Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 08-05-2017 Exécuté par Maxou (administrateur) sur MAXOU-PC (08-05-2017 21:58:49) Exécuté depuis C:\Users\Maxou\Desktop Profils chargés: Maxou (Profils disponibles: Maxou) Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: "C:\Program Files (x86)\Bookness\Application\chrome.exe" "%1") Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Mad Catz Inc) C:\Program Files\Mad Catz\R.A.T.TE\RAT_TE_Profiler.exe (Safer Networking Limited) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Spotify Ltd) C:\Users\Maxou\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Akamai Technologies, Inc.) C:\Users\Maxou\AppData\Local\Akamai\netsession_win.exe (Tablet Driver) C:\Windows\SysWOW64\WTClient.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Akamai Technologies, Inc.) C:\Users\Maxou\AppData\Local\Akamai\netsession_win.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe (Guangzhou Ugee Computer Technology Co.,Ltd.) C:\Windows\System32\drivers\WTSrv.exe () C:\Program Files\TRENDnet\TEW-649UB\WlanWpsSvc.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-01-20] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation) HKLM\...\Run: [R.A.T.TE] => C:\Program Files\Mad Catz\R.A.T.TE\RAT_TE_Profiler.exe [195072 2015-09-18] (Mad Catz Inc) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe HKLM-x32\...\Run: [WTClient] => C:\Windows\system32\WTClient.exe [94344 2016-07-20] (Tablet Driver) HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1666432 2014-05-22] (Simply Super Software) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-03-10] (Autodesk, Inc.) HKLM\...\RunOnce: [MAXOU-PC] => C:\Windows\TEMP\g4329.tmp.exe [302592 2017-05-08] () <===== ATTENTION HKLM-x32\...\Winlogon: [Userinit] userinit.exe,"C:\Windows\system32\monitor.exe", Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2144088 2009-01-26] (Safer Networking Limited) HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\Run: [Spotify Web Helper] => C:\Users\Maxou\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-13] (Spotify Ltd) HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\Run: [MyComGames] => C:\Users\Maxou\AppData\Local\MyComGames\MyComGames.exe [5377936 2017-04-14] (MY.COM B.V.) HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Maxou\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.) HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd) HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\MountPoints2: {94df24c1-888e-11e6-ac19-027005270901} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\demarrer.html HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\MountPoints2: {afe5bbf7-0924-11e6-9ca1-e66785c613f7} - F:\autorun.exe HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\...\MountPoints2: {bc4c1eb3-fbce-11e5-9653-fdf3638f160c} - E:\Startme.exe HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation) HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-11-11] () IFEO\avgwdsvc.exe: [Debugger] C:\Windows\System32\svchost.exe ShellExecuteHooks: Pas de nom - {D05DB088-9EBF-11E6-B6CD-64006A5CFC23} - -> Pas de fichier ShellExecuteHooks: Pas de nom - {7E69FF54-20E2-11E7-8377-64006A5CFC23} - -> Pas de fichier ShellExecuteHooks: Pas de nom - {ED4A8166-307E-11E7-8B1F-64006A5CFC23} - C:\Users\Maxou\AppData\Roaming\Beligeanergosy\Ziloknerpugh.dll -> Pas de fichier ShellExecuteHooks: Pas de nom - {8EEDD9B0-307E-11E7-9875-64006A5CFC23} - C:\Users\Maxou\AppData\Roaming\Drinucult\Anervick.dll -> Pas de fichier ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () GroupPolicy: Restriction - Chrome <======= ATTENTION GroupPolicyScripts: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Fichier hosts non détecté dans le dossier par défaut Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{05E18C2E-8480-4296-92FC-92C4EECE1672}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{08A5064E-E5A7-4305-8044-14699EED0B57}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{1BC3FCA7-D2E8-4161-8FCD-691EA28587C0}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{22FBDD3A-9718-4BF3-9FF2-303B10859448}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{66D3F8AE-FF93-4780-AECD-75810578AE4B}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{97741F65-4E1D-44DC-B48A-80FA617020ED}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpageing123.com/?type=hp&ts=1487710954&z=25dbd10dd5b3936dd7a5890gczeb6m4mfgde0t9wfc&from=ggg0221&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.startpageing123.com/search/?type=ds&ts=1487710954&z=25dbd10dd5b3936dd7a5890gczeb6m4mfgde0t9wfc&from=ggg0221&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.startpageing123.com/?type=hp&ts=1487710954&z=25dbd10dd5b3936dd7a5890gczeb6m4mfgde0t9wfc&from=ggg0221&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1487710954&z=25dbd10dd5b3936dd7a5890gczeb6m4mfgde0t9wfc&from=ggg0221&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA&q={searchTerms} HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491065451&z=acb27d50f5ae688d572b655g4z9t5g9e4q5w7z7wcg&from=gggn1&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.startpageing123.com/?type=hp&ts=1487710954&z=25dbd10dd5b3936dd7a5890gczeb6m4mfgde0t9wfc&from=ggg0221&uid=WDCXWD20EZRZ-00Z5HB0_WD-WCC4M4LAEJNAAEJNA SearchScopes: HKU\S-1-5-21-1987299526-3664676351-2479547558-1000 -> {7ABE770D-7E44-43AB-A0E7-095A0A69575B} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=H57zbcnbl1BU,a55a104d-8051-4593-8ab9-b367bc9cee4c, BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-03] (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2017-01-10] (Perfect World Entertainment Inc) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-03] (Oracle Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF DefaultProfile: hbyi4rqv.default FF ProfilePath: C:\Users\Maxou\AppData\Roaming\Firefox\Firefox\Profiles\hbyi4rqv.default [2017-04-19] FF Extension: (Français Language Pack) - C:\Users\Maxou\AppData\Roaming\Firefox\Firefox\Profiles\hbyi4rqv.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2017-04-17] [non signé] FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems) FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [Pas de fichier] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-03] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-03] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2017-01-10] (Perfect World Entertainment Inc) FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2015-05-22] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems) FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-1987299526-3664676351-2479547558-1000: @my.com/Games -> C:\Users\Maxou\AppData\Local\MyComGames\NPMyComDetector.dll [2017-04-13] (MY.COM B.V.) FF Plugin HKU\S-1-5-21-1987299526-3664676351-2479547558-1000: @nsroblox.roblox.com/launcher -> C:\Users\Maxou\AppData\Local\Roblox\Versions\version-b6923b4ee6414bd0\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation) FF Plugin HKU\S-1-5-21-1987299526-3664676351-2479547558-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Maxou\AppData\Local\Roblox\Versions\version-b6923b4ee6414bd0\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation) Chrome: ======= CHR DefaultProfile: Profile 1 CHR HomePage: Profile 1 -> hxxp://www.google.fr/ CHR StartupUrls: Profile 1 -> "hxxp://www-searching.com/?pid=s&s=H57zbcnbl1BU,a55a104d-8051-4593-8ab9-b367bc9cee4c,&vp=ch&prd=set_ch" CHR Profile: C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-05-08] CHR Extension: (Google Slides) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-11] CHR Extension: (Theme Creator) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akpelnjfckgfiplcikojhomllgombffc [2016-11-11] CHR Extension: (Google Docs) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-11] CHR Extension: (Google Drive) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-11] CHR Extension: (YouTube) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-11] CHR Extension: (Adblock Plus) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-07] CHR Extension: (Bouncy Mouse) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cgdllcbmneiklcmbeclfegccdjholomb [2016-11-11] CHR Extension: (Star Legends) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chcaflnbhnoegjedbjaamecefhglfamc [2016-11-11] CHR Extension: (Realm of the Mad God) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp [2016-11-11] CHR Extension: (Google Sheets) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-11] CHR Extension: (Google Docs hors connexion) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-11] CHR Extension: (Pocket Legends) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mhpdbcnfpodnaefldpdohoibdajcfabp [2016-11-11] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-07] CHR Extension: (Gmail) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-11] CHR Extension: (Chrome Media Router) - C:\Users\Maxou\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-07] CHR HKU\S-1-5-21-1987299526-3664676351-2479547558-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx StartMenuInternet: Google Chrome - Chrome.exe ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1309176 2017-03-10] (Autodesk Inc.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated) S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [87064 2017-01-10] (Perfect World Entertainment Inc) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1530376 2017-04-14] () R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited) S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2017-02-12] (BitRaider, LLC) S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1443520 2016-04-04] (Disc Soft Ltd) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [245544 2017-04-29] (EasyAntiCheat Ltd) S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6625856 2016-11-12] (GOG.com) R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3416584 2017-03-02] (LogMeIn Inc.) U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-03-28] (Hi-Rez Studios) [Fichier non signé] R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-12-11] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Fichier non signé] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2017-02-27] (LogMeIn, Inc.) R2 MCSvc; C:\ProgramData\PreEmptive Solutions\Common\LAC\sos\1.1.4322__3.1.1.0.dll [344064 2016-11-25] () [Fichier non signé] S3 mi-raysat_3dsmax2016_64; C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [Fichier non signé] R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119176 2017-01-13] (Electronic Arts) S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2181648 2017-01-13] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-02-25] () R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [396024 2015-05-26] (Apple Inc.) R2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1355000 2015-05-26] (BlackBerry Limited) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé] S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7534864 2016-08-25] (TeamViewer GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WinInstallSvc; C:\ProgramData\Microsoft\AppV\Setup\Integrator.dll [105984 2017-05-08] () [Fichier non signé] R2 WinTabService; C:\Windows\System32\Drivers\WTSRV.EXE [138376 2016-07-28] (Guangzhou Ugee Computer Technology Co.,Ltd.) R2 WlanWpsSvc; C:\Program Files\TRENDnet\TEW-649UB\WlanWpsSvc.exe [167936 2008-06-26] () [Fichier non signé] S2 3DM; C:\Users\Maxou\AppData\Local\3DM\Kitty.dll [X] S2 AdBlockerService; C:\Program Files (x86)\AdBlocker\AdBlockerService.exe [X] S2 Kerotnry; C:\Program Files (x86)\Dowetraduge\ferjerlyServer.dll [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 70610a084a9fa14882c5ffff7721e78f; C:\Windows\system32\drivers\70610a084a9fa14882c5ffff7721e78f.sys [66408 2017-05-05] (QRDXPX) <==== ATTENTION S3 blackberryncm; C:\Windows\System32\DRIVERS\blackberryncm6_AMD64.sys [25600 2015-01-23] (BlackBerry Limited) S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2017-02-12] (BitRaider) R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-23] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-23] (Disc Soft Ltd) S3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-03-22] () R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation) R3 Larmkanal; C:\Windows\System32\DRIVERS\Larmkanal.sys [33112 2015-09-02] (Adoriasoft LLC) S3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-05-06] (Malwarebytes) S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-06] (Malwarebytes) [Fichier non signé] R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R3 Phosgene; C:\Windows\System32\DRIVERS\Phosgene.sys [34136 2015-09-02] (Adoriasoft LLC) R3 PTSimBus; C:\Windows\System32\DRIVERS\PTSimBus.sys [39048 2016-07-21] (UC-Logic Technology Corp.) R3 PTSimHid; C:\Windows\System32\DRIVERS\PTSimHid.sys [31368 2016-07-21] (UGEE Technology Corp.) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [80384 2015-01-14] (BlackBerry Limited) R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [18432 2015-05-26] (BlackBerry Limited) R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) S3 SaiH040B; C:\Windows\System32\DRIVERS\SaiH040B.sys [171144 2007-05-01] (Saitek) R3 SaiK0728; C:\Windows\System32\DRIVERS\SaiK0728.sys [129024 2008-01-21] (Saitek) R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23968 2014-09-15] (Saitek) R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51488 2014-09-15] (Saitek) S3 SaiU040B; C:\Windows\System32\DRIVERS\SaiU040B.sys [34304 2007-05-01] (Saitek) R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] () U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [33512 2017-04-20] () R3 voxaldriver; C:\Windows\System32\DRIVERS\voxaldriverx64.sys [52976 2017-04-14] () R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2016-06-15] (SplitmediaLabs Limited) R3 XtuAcpiDriver; C:\Windows\System32\DRIVERS\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation) R3 _hid_0738_1704; C:\Windows\System32\DRIVERS\_hid_0738_1704.sys [179904 2014-09-15] (Saitek) R3 _usb_0738_1704; C:\Windows\System32\DRIVERS\_usb_0738_1704.sys [46528 2014-09-15] (Saitek) S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X] S2 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X] S3 MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [X] S3 MSICDSetup; \??\D:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X] S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [X] S3 WacHidRouter; system32\DRIVERS\wachidrouter.sys [X] S3 wacomrouterfilter; system32\DRIVERS\wacomrouterfilter.sys [X] U3 pgloypog; \??\C:\Users\Maxou\AppData\Local\Temp\pgloypog.sys [X] <==== ATTENTION ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-05-08 21:58 - 2017-05-08 21:58 - 00028319 _____ C:\Users\Maxou\Desktop\FRST.txt 2017-05-08 21:52 - 2017-05-08 21:58 - 00000000 ____D C:\FRST 2017-05-08 21:52 - 2017-05-08 21:52 - 02429440 _____ (Farbar) C:\Users\Maxou\Desktop\FRST64.exe 2017-05-08 21:52 - 2017-05-08 21:52 - 00000000 ____D C:\Users\Maxou\Downloads\FRST-OlderVersion 2017-05-08 18:40 - 2017-05-08 18:40 - 00004028 _____ C:\Windows\System32\Tasks\{CBB8FA6C-7C13-4DC7-C23C-309FA56228AB} 2017-05-08 18:40 - 2017-05-08 18:40 - 00000000 ____D C:\ProgramData\{795525ca-712c-1} 2017-05-08 18:40 - 2017-05-08 18:40 - 00000000 ____D C:\ProgramData\{4b8c4964-512c-0} 2017-05-08 18:40 - 2017-05-08 18:40 - 00000000 ____D C:\ProgramData\{401DBDBA-F7B6-0A11-2A71-86832084BE01} 2017-05-08 18:39 - 2017-05-08 18:49 - 00000000 ____D C:\ProgramData\bf1c05c8-7761-1 2017-05-08 18:39 - 2017-05-08 18:40 - 00000000 ____D C:\ProgramData\bf1c05c8-04a7-0 2017-05-08 18:39 - 2017-05-08 18:39 - 00023616 _____ C:\Windows\System32\Tasks\{0D0B0C47-0D7E-0A7E-0D11-7F050F0C110F} 2017-05-08 16:53 - 2017-05-08 16:53 - 00000000 ____D C:\Users\Public\Documents\Google 2017-05-08 16:49 - 2017-05-08 16:54 - 00000000 ____D C:\Users\Public\Documents\temp 2017-05-08 16:49 - 2017-05-08 16:50 - 00000000 ____D C:\Users\Public\Documents\chrome 2017-05-07 20:59 - 2017-05-07 20:59 - 00566128 _____ (Malwarebytes) C:\Users\Maxou\Downloads\mbam-clean-2.3.0.1001.exe 2017-05-07 20:53 - 2017-05-07 20:55 - 00541854 _____ C:\Windows\ntbtlog.txt 2017-05-07 19:17 - 2017-05-07 19:31 - 444205745 _____ C:\Users\Maxou\Downloads\Non confirmé 432333.crdownload 2017-05-07 13:35 - 2017-05-08 21:58 - 00016700 _____ C:\Windows\System32\Tasks\Word Tools 2017-05-07 13:35 - 2017-05-07 19:53 - 00000000 ____D C:\Program Files\Word Tools 2017-05-07 12:40 - 2017-05-07 13:25 - 00000000 ____D C:\ProgramData\Microleaves 2017-05-07 12:38 - 2017-05-07 19:53 - 00000000 ____D C:\Program Files (x86)\Coirgh 2017-05-07 12:38 - 2017-05-07 12:38 - 00000000 ____H C:\Windows\system32\BITFF2F.tmp 2017-05-07 12:34 - 2017-05-07 19:53 - 00000000 ____D C:\Windows\SysWOW64\SSL 2017-05-07 12:34 - 2017-05-07 19:53 - 00000000 ____D C:\ProgramData\17d69d4 2017-05-07 12:34 - 2017-05-07 12:34 - 00004028 _____ C:\Windows\System32\Tasks\{D85AC08B-6FF1-7720-8D99-AC8D81A50993} 2017-05-07 12:33 - 2017-05-07 12:33 - 01653760 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\libeay32.dll 2017-05-07 12:33 - 2017-05-07 12:33 - 00849360 _____ (Microsoft Corporation) C:\Windows\msvcr110.dll 2017-05-07 12:33 - 2017-05-07 12:33 - 00661456 _____ (Microsoft Corporation) C:\Windows\msvcp110.dll 2017-05-07 12:32 - 2017-05-07 12:32 - 00314656 _____ (NVIDIA Corporation) C:\Windows\cudart64_60.dll 2017-05-07 12:30 - 2017-05-07 19:53 - 00000000 ____D C:\Program Files\3D UltraBite Project 2017-05-07 12:30 - 2017-05-07 13:27 - 00016742 _____ C:\Windows\System32\Tasks\3D UltraBite Project 2017-05-07 12:30 - 2017-05-07 12:30 - 00000000 ____D C:\Windows\system32\sstmp 2017-05-07 12:29 - 2017-05-07 12:30 - 00000132 _____ C:\ProgramData\log.binb 2017-05-07 12:29 - 2017-05-07 12:29 - 00006034 _____ C:\Windows\System32\Tasks\Anshwukasy Helper 2017-05-07 12:28 - 2017-05-07 19:53 - 00000000 ____D C:\Users\Maxou\AppData\Local\Zkughhbch 2017-05-07 12:28 - 2017-05-07 12:29 - 00014895 _____ C:\ProgramData\log.ewbt 2017-05-07 12:28 - 2017-05-07 12:29 - 00000128 _____ C:\ProgramData\log.ewbb 2017-05-06 21:48 - 2017-05-06 21:48 - 00001128 _____ C:\Users\Maxou\Desktop\Dolphin - Raccourci.lnk 2017-05-06 21:47 - 2017-05-06 21:48 - 00000000 ____D C:\Program Files\dolphinnet 2017-05-06 19:21 - 2017-05-07 20:46 - 00000000 ____D C:\Users\Maxou\Documents\ROM 2017-05-06 19:21 - 2017-05-06 20:24 - 1291176055 _____ C:\Users\Maxou\Downloads\Mario Kart - Double Dash!! (Europe) (En,Fr,De,Es,It).7z 2017-05-05 22:49 - 2017-05-05 22:51 - 41677949 _____ C:\Users\Maxou\Downloads\Mario Kart - Double Dash!! (Europe) (En,Fr,De,Es,It).7z.crdownload 2017-05-05 22:13 - 2017-05-07 21:27 - 00000000 ____D C:\Users\Maxou\Documents\Dolphin Emulator 2017-05-05 22:10 - 2017-05-05 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolphin 2017-05-05 22:10 - 2017-05-05 22:11 - 00000000 ____D C:\Program Files\Dolphin 2017-05-05 21:09 - 2017-05-05 21:09 - 00000000 ____D C:\Users\Maxou\AppData\LocalLow\Vonsnake 2017-05-05 10:19 - 2017-05-05 10:19 - 01386496 _____ C:\Windows\2459bf2ee749aebe6ab5db0536c7e7e8.exe 2017-05-05 10:19 - 2017-05-05 10:19 - 00066408 _____ (QRDXPX) C:\Windows\system32\Drivers\70610a084a9fa14882c5ffff7721e78f.sys 2017-05-05 10:19 - 2017-05-05 10:19 - 00051619 _____ C:\Windows\uninstaller.dat 2017-05-01 20:36 - 2017-05-01 20:36 - 00000000 ____D C:\Users\Maxou\Documents\MAGIX Téléchargements 2017-05-01 20:34 - 2017-05-01 20:36 - 00000000 ___RD C:\Users\Maxou\Documents\MAGIX 2017-05-01 20:34 - 2017-05-01 20:34 - 00000000 ____D C:\Users\Public\Documents\MAGIX 2017-05-01 20:34 - 2017-05-01 20:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX 2017-05-01 20:33 - 2017-05-08 18:46 - 00000372 _____ C:\Windows\Tasks\MAGIX Connector.job 2017-05-01 20:33 - 2017-05-01 20:34 - 00000000 ____D C:\ProgramData\Magix 2017-05-01 20:33 - 2017-05-01 20:33 - 00002756 _____ C:\Windows\System32\Tasks\MAGIX Connector 2017-05-01 20:33 - 2017-05-01 20:33 - 00000000 ____D C:\ProgramData\simplitec 2017-05-01 20:33 - 2017-05-01 20:33 - 00000000 ____D C:\Program Files (x86)\MAGIX 2017-05-01 19:47 - 2017-05-01 20:34 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\MAGIX 2017-05-01 19:47 - 2017-05-01 19:47 - 04769840 _____ (MAGIX Software GmbH) C:\Users\Maxou\Downloads\musicmaker.exe 2017-05-01 19:47 - 2017-05-01 19:47 - 00000000 ____D C:\Users\Maxou\Documents\MAGIX Downloads 2017-04-29 19:25 - 2017-04-29 19:25 - 00000000 ____D C:\Users\Maxou\AppData\LocalLow\Freejam 2017-04-29 16:10 - 2017-04-29 16:10 - 00044786 _____ C:\Windows\SysWOW64\report.txt 2017-04-29 11:47 - 2017-04-29 11:47 - 00000000 ____D C:\Users\Maxou\AppData\Local\Saber Interactive 2017-04-28 21:00 - 2017-04-28 21:01 - 00000000 ____D C:\Users\Maxou\AppData\Local\Bethesda.net Launcher 2017-04-28 20:58 - 2017-05-01 20:51 - 00000000 ____D C:\Program Files (x86)\Bethesda.net Launcher 2017-04-28 20:58 - 2017-04-28 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda.net Launcher 2017-04-28 20:57 - 2017-04-28 20:57 - 08176208 _____ (Bethesda Softworks ) C:\Users\Maxou\Downloads\BethesdaNetLauncher_Setup.exe 2017-04-23 20:27 - 2017-05-01 22:06 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox 2017-04-23 20:27 - 2017-04-23 22:20 - 00000249 _____ C:\Users\Maxou\AppData\LocalLow\rbxcsettings.rbx 2017-04-23 20:27 - 2017-04-23 20:48 - 00000000 ____D C:\Users\Maxou\AppData\Local\Roblox 2017-04-23 20:27 - 2017-04-23 20:27 - 00852024 _____ (ROBLOX Corporation) C:\Users\Maxou\Downloads\RobloxPlayerLauncher.exe 2017-04-22 21:14 - 2017-05-07 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-04-22 21:14 - 2017-05-06 21:23 - 00082720 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-04-22 21:14 - 2017-05-06 19:09 - 00111544 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-04-22 21:14 - 2017-03-22 11:02 - 00077440 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-04-22 19:35 - 2017-05-08 18:49 - 00000000 _____ C:\Users\Public\Documents\temp.dat 2017-04-21 17:03 - 2017-04-21 17:06 - 00000000 ____D C:\Program Files\Guild Wars 2 2017-04-21 17:03 - 2017-04-21 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 2017-04-21 17:00 - 2017-04-21 17:04 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Guild Wars 2 2017-04-21 17:00 - 2017-04-21 17:00 - 30588072 _____ (ArenaNet) C:\Users\Maxou\Downloads\Gw2Setup-64.tmp 2017-04-21 17:00 - 2017-04-21 17:00 - 00000000 ____D C:\Users\Maxou\Downloads\bin64 2017-04-21 17:00 - 2017-04-21 17:00 - 00000000 _____ C:\Users\Maxou\Downloads\Gw2.tmp 2017-04-21 17:00 - 2017-04-21 17:00 - 00000000 _____ C:\Users\Maxou\Downloads\Gw2.dat 2017-04-21 16:57 - 2017-04-21 17:00 - 30588072 _____ (ArenaNet) C:\Users\Maxou\Downloads\Gw2Setup-64.exe 2017-04-21 13:35 - 2017-04-22 21:25 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\NetCtl 2017-04-20 17:18 - 2017-04-20 19:52 - 00000000 ____D C:\ProgramData\AppxadsulP 2017-04-20 15:14 - 2017-04-20 15:14 - 00000000 _____ C:\Windows\SysWOW64\1 2017-04-20 14:09 - 2017-04-20 14:12 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Awesomium 2017-04-20 13:47 - 2017-04-20 13:47 - 00000000 ____D C:\Program Files (x86)\n1 2017-04-20 11:04 - 2017-04-20 13:47 - 00000000 _____ C:\Windows\SysWOW64\22 2017-04-20 11:04 - 2017-04-20 13:47 - 00000000 _____ C:\Windows\SysWOW64\11 2017-04-20 10:41 - 2017-04-21 13:36 - 00000000 ____D C:\Users\Maxou\AppData\Local\FreeReign 2017-04-20 10:41 - 2017-04-20 10:41 - 00000000 ____D C:\Users\Maxou\Documents\FreeReign 2017-04-19 23:39 - 2017-04-19 23:39 - 00297951 _____ C:\Users\Maxou\Downloads\f.txt 2017-04-19 23:39 - 2017-04-19 23:39 - 00297923 _____ C:\Users\Maxou\Downloads\f (1).txt 2017-04-19 10:23 - 2017-04-20 17:07 - 00000000 ____D C:\Users\Maxou\AppData\Local\3DM 2017-04-19 10:11 - 2017-04-19 10:11 - 00000000 ____H C:\Users\Maxou\AppData\Local\BITCDAA.tmp 2017-04-19 10:11 - 2017-04-19 10:11 - 00000000 _____ C:\Users\Maxou\AppData\Local\{1CDC6DF2-8B52-455E-9144-70E77AC4FF18} 2017-04-18 10:12 - 2017-04-18 10:12 - 00000000 ____D C:\Windows\Update 2017-04-17 22:50 - 2017-04-17 22:50 - 00000000 ____D C:\Users\Maxou\AppData\Local\Tempzxpsignb98c92134fde07f2 2017-04-17 22:49 - 2017-04-17 22:49 - 00000000 ____D C:\Users\Maxou\AppData\Local\Tempzxpsignc4d0d29280a9ef3c 2017-04-17 22:49 - 2017-04-17 22:49 - 00000000 ____D C:\Users\Maxou\AppData\Local\Tempzxpsign7d46418da246a23b 2017-04-17 13:04 - 2017-04-17 13:04 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Firefox 2017-04-16 20:08 - 2017-04-20 15:12 - 00000000 ____D C:\ProgramData\locep 2017-04-16 18:47 - 2017-04-16 18:48 - 00000000 _____ C:\Windows\SysWOW64\2 2017-04-16 18:46 - 2017-04-16 18:48 - 03754488 _____ (Google) C:\Users\Maxou\Downloads\chrome_cleanup_tool.exe 2017-04-16 18:35 - 2017-05-07 19:53 - 00000000 ____D C:\Users\Maxou\AppData\Local\AdvinstAnalytics 2017-04-16 18:35 - 2017-05-07 13:25 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Microleaves 2017-04-16 18:35 - 2017-04-20 15:12 - 00000000 ____D C:\Program Files (x86)\Clafospgovation 2017-04-16 18:35 - 2017-04-16 18:35 - 00006020 _____ C:\Windows\System32\Tasks\Kepisesterpeght Manager 2017-04-16 18:07 - 2017-04-22 21:30 - 00000000 ____D C:\Program Files\Common Files\pqh3wdfy 2017-04-16 18:07 - 2017-04-16 18:07 - 00003388 _____ C:\Windows\System32\Tasks\1nwvrzic 2017-04-16 17:34 - 2017-04-20 15:12 - 00000000 ____D C:\Users\Maxou\AppData\Local\Stoymutertain 2017-04-16 17:07 - 2017-05-07 19:53 - 00000000 ____D C:\Program Files\BitTorrent 2017-04-16 17:07 - 2017-04-20 19:52 - 00000000 ____D C:\ProgramData\Logic Cramble 2017-04-16 17:07 - 2017-04-16 17:07 - 00018432 _____ C:\Users\Maxou\AppData\Roaming\Main.dat 2017-04-16 17:06 - 2017-04-16 17:06 - 00140288 _____ C:\Users\Maxou\AppData\Roaming\Installer.dat 2017-04-16 17:05 - 2017-04-16 17:05 - 00003818 _____ C:\Windows\System32\Tasks\{8FDEFC6B-3875-4BC0-AAD1-5DE556C7D5F2} 2017-04-16 17:04 - 2017-04-20 17:07 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Huvepy 2017-04-16 17:04 - 2017-04-20 15:12 - 00000000 ____D C:\Users\Maxou\AppData\Local\Sosowardaromersh 2017-04-16 17:04 - 2017-04-16 17:04 - 00006046 _____ C:\Windows\System32\Tasks\Aracisy Center 2017-04-16 16:55 - 2017-05-07 19:53 - 00000000 ____D C:\Users\Public\Documents\ZBrushData 2017-04-16 15:04 - 2017-04-16 15:04 - 00000000 ____D C:\Users\Public\Pixologic 2017-04-16 15:04 - 2017-04-16 15:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixologic 2017-04-16 15:03 - 2017-04-16 15:03 - 00000000 ____D C:\Program Files (x86)\Pixologic 2017-04-16 14:45 - 2017-04-16 15:14 - 00000000 ____D C:\Users\Maxou\Desktop\ZBRUSH 2017-04-16 14:45 - 2017-04-16 15:00 - 597195048 _____ (Pixologic) C:\Users\Maxou\Downloads\ZBrush_4R7_Trial_Installer_WIN.exe 2017-04-16 14:36 - 2017-04-16 14:36 - 00000000 _____ C:\Windows\system32\__000000013FCEC39D__C0000005.dmp 2017-04-16 14:28 - 2017-04-16 14:28 - 00005978 _____ C:\Windows\System32\Tasks\Hmechhebity Engine 2017-04-16 12:20 - 2017-04-16 12:20 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2017-04-16 11:17 - 2017-04-16 11:17 - 00000000 ____D C:\Users\Maxou\Autodesk 2017-04-16 11:05 - 2017-04-16 11:05 - 00000000 ____D C:\ProgramData\FLEXnet 2017-04-15 19:20 - 2017-04-16 11:12 - 00000000 ____D C:\Users\Maxou\AppData\Local\Autodesk 2017-04-15 19:20 - 2017-04-15 19:20 - 00000000 ____D C:\Users\Maxou\Documents\Autodesk Application Manager 2017-04-15 19:01 - 2017-04-15 19:55 - 00000000 ____D C:\Program Files (x86)\Autodesk 2017-04-15 18:50 - 2017-04-15 18:50 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2017-04-15 18:40 - 2017-04-16 11:12 - 00000000 ____D C:\Users\Maxou\Documents\3dsMax 2017-04-15 18:39 - 2017-05-07 19:53 - 00000000 ____D C:\Program Files\Autodesk 2017-04-15 18:39 - 2017-04-15 19:19 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2017-04-15 17:40 - 2017-04-15 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2017-04-15 17:24 - 2017-05-07 19:53 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Autodesk 2017-04-15 17:24 - 2017-05-07 19:53 - 00000000 ____D C:\ProgramData\Autodesk 2017-04-15 17:23 - 2017-04-15 17:23 - 00000000 ____D C:\Autodesk 2017-04-15 17:22 - 2017-04-15 17:23 - 09539928 _____ C:\Users\Maxou\Downloads\Autodesk_3ds_Max_2016_EFGJKS_Win_64bit_wi_fr-FR_Setup.exe 2017-04-15 17:22 - 2017-04-15 17:22 - 00377760 _____ (Autodesk Inc.) C:\Users\Maxou\Downloads\Autodesk_3ds_Max_2016_EFGJKS_Win_64bit_wi_fr-FR_Setup_webinstall.exe 2017-04-15 17:21 - 2017-04-20 19:56 - 00001138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk 2017-04-15 17:20 - 2017-04-15 17:20 - 00000000 ____D C:\Users\Public\Documents\Adobe 2017-04-15 17:06 - 2017-04-15 17:07 - 00000013 _____ C:\Users\Maxou\Downloads\mdp (1).txt 2017-04-15 16:46 - 2017-04-15 16:46 - 00000000 ____D C:\Users\Maxou\Desktop\LOW POLY MASK 2017-04-15 15:46 - 2017-04-16 11:02 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Apple Computer 2017-04-15 15:46 - 2017-04-15 15:46 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2017-04-15 15:46 - 2017-04-15 15:46 - 00000000 ____D C:\Users\Maxou\AppData\Local\Apple Computer 2017-04-15 15:45 - 2017-04-15 15:45 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2017-04-15 15:44 - 2017-04-15 15:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2017-04-15 15:44 - 2017-04-15 15:44 - 00000000 ____D C:\ProgramData\Apple Computer 2017-04-15 15:44 - 2017-04-15 15:44 - 00000000 ____D C:\Program Files (x86)\QuickTime 2017-04-15 15:43 - 2017-04-20 19:56 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2017-04-15 15:43 - 2017-04-15 15:43 - 00000000 ____D C:\Users\Maxou\AppData\Local\Apple 2017-04-15 15:43 - 2017-04-15 15:43 - 00000000 ____D C:\ProgramData\Apple 2017-04-15 15:42 - 2017-04-15 15:42 - 00000000 ____D C:\Users\Maxou\AppData\LocalLow\Apple Computer 2017-04-15 15:41 - 2017-04-15 15:42 - 41896256 _____ (Apple Inc.) C:\Users\Maxou\Downloads\QuickTimeInstaller.exe 2017-04-15 15:19 - 2017-04-15 15:19 - 12441161 _____ C:\Users\Maxou\Downloads\Douille_8mm_01.rar 2017-04-15 15:06 - 2017-04-15 15:06 - 00342716 _____ C:\Users\Maxou\Downloads\Smoke_puff.rar 2017-04-15 14:56 - 2017-04-15 14:56 - 00037987 _____ C:\Users\Maxou\Downloads\Pre-Keyed Muzzle Flash Side (FREE Stock Footage 3).mp4 2017-04-15 14:44 - 2017-04-20 19:56 - 00001254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2017.lnk 2017-04-15 11:00 - 2017-04-20 19:56 - 00001137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2017-04-15 10:58 - 2017-04-15 10:58 - 00000013 _____ C:\Users\Maxou\Downloads\mdp .txt 2017-04-14 22:38 - 2017-05-07 13:33 - 00000000 ____D C:\Users\Maxou\Desktop\VOICE 2017-04-14 22:38 - 2017-04-14 22:38 - 01035480 _____ (NCH Software) C:\Users\Maxou\Downloads\vxlsetup (1).exe 2017-04-14 22:38 - 2017-04-14 22:38 - 00052976 _____ C:\Windows\system32\Drivers\voxaldriverx64.sys 2017-04-14 22:38 - 2016-05-06 18:54 - 00000524 _____ C:\Users\Maxou\Downloads\instructions.txt 2017-04-14 22:38 - 2016-05-06 18:17 - 00000115 _____ C:\Users\Maxou\Downloads\Visit - PirateCity.NET.url 2017-04-14 21:27 - 2017-04-14 21:27 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-04-14 21:27 - 2017-04-14 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-04-13 22:46 - 2017-05-08 18:46 - 00000000 ____D C:\Users\Maxou\AppData\Local\MyComGames 2017-04-13 22:46 - 2017-04-14 10:52 - 00000000 ____D C:\MyGames 2017-04-13 22:46 - 2017-04-13 22:46 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games 2017-04-13 22:45 - 2017-04-13 22:45 - 05690304 _____ (MY.COM B.V.) C:\Users\Maxou\Downloads\SkyforgeLoader_865d181066ad81834f95968a550cf1fd__fr.exe 2017-04-13 18:53 - 2017-04-13 18:53 - 00000014 _____ C:\Windows\SysWOW64\vxcode.dll 2017-04-13 18:53 - 2017-04-13 18:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video X Converter 2017-04-13 18:53 - 2017-04-13 18:53 - 00000000 ____D C:\ProgramData\DVD X Studios 2017-04-13 18:53 - 2017-04-13 18:53 - 00000000 ____D C:\Program Files (x86)\Video X Converter 2017-04-13 18:47 - 2017-04-13 18:52 - 29089621 _____ ( ) C:\Users\Maxou\Downloads\VideoXConverterSetup2.0.4.0.exe 2017-04-13 18:42 - 2017-05-07 13:44 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\MPC-HC 2017-04-13 18:35 - 2017-04-13 18:35 - 00003160 _____ C:\Windows\System32\Tasks\klcp_update 2017-04-13 18:35 - 2017-04-13 18:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2017-04-13 18:35 - 2017-04-13 18:35 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2017-04-13 18:35 - 2016-05-08 12:27 - 03613696 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll 2017-04-13 18:35 - 2016-05-08 12:19 - 03642880 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll 2017-04-13 18:35 - 2015-12-18 12:00 - 00755200 _____ C:\Windows\system32\xvidcore.dll 2017-04-13 18:35 - 2015-12-18 12:00 - 00674816 _____ C:\Windows\SysWOW64\xvidcore.dll 2017-04-13 18:35 - 2015-12-18 12:00 - 00309248 _____ C:\Windows\system32\xvidvfw.dll 2017-04-13 18:35 - 2015-12-18 12:00 - 00282112 _____ C:\Windows\SysWOW64\xvidvfw.dll 2017-04-13 18:35 - 2015-10-24 19:00 - 00126976 _____ C:\Windows\system32\ff_vfw.dll 2017-04-13 18:35 - 2015-10-24 19:00 - 00112128 _____ C:\Windows\SysWOW64\ff_vfw.dll 2017-04-13 18:35 - 2012-07-21 13:55 - 00180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm 2017-04-13 18:35 - 2012-07-21 13:54 - 00122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm 2017-04-13 18:35 - 2011-12-07 20:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll 2017-04-13 18:35 - 2011-12-07 20:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll 2017-04-13 18:30 - 2017-04-13 18:31 - 44213414 _____ (KLCP ) C:\Users\Maxou\Downloads\k-lite-mega-codec-pack_13-0-0_fr_35535.exe 2017-04-13 17:42 - 2017-04-15 16:56 - 00000000 ____D C:\Users\Maxou\Desktop\VLOG 2017-04-13 17:32 - 2017-04-13 17:33 - 04684794 _____ C:\Users\Maxou\Downloads\billy_ohio.zip 2017-04-13 17:08 - 2017-04-20 15:12 - 00000000 ____D C:\Users\Maxou\AppData\Local\Kitty 2017-04-10 22:12 - 2017-04-10 22:12 - 00000000 ____D C:\Update 2017-04-10 12:12 - 2017-04-10 12:12 - 00000000 ____D C:\Program Files (x86)\deskapp 2017-04-09 21:31 - 2017-04-09 21:31 - 00000000 ____D C:\Users\Maxou\Documents\4A Games 2017-04-09 21:25 - 2017-04-09 21:25 - 00000000 ____D C:\Users\Maxou\AppData\Local\4A Games 2017-04-09 21:22 - 2017-04-09 21:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro Last Light Redux 2017-04-09 21:17 - 2017-04-09 21:22 - 00000000 ____D C:\Program Files (x86)\Metro Last Light Redux ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-05-08 21:40 - 2016-06-12 20:41 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2017-05-08 21:25 - 2017-02-11 17:15 - 00020972 _____ C:\Users\Maxou\AppData\Local\kritarc 2017-05-08 21:24 - 2016-07-16 19:41 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\DS4Windows 2017-05-08 21:23 - 2016-03-12 10:27 - 00000000 ____D C:\Program Files (x86)\Steam 2017-05-08 20:48 - 2016-03-20 17:02 - 00000000 ____D C:\Users\Maxou\AppData\Local\CrashDumps 2017-05-08 20:33 - 2017-02-24 18:16 - 00000000 ____D C:\ProgramData\TEMP 2017-05-08 20:21 - 2016-09-17 19:42 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2017-05-08 19:16 - 2016-06-12 21:03 - 00000000 ____D C:\Users\Maxou\Desktop\DIVERS 2017-05-08 19:14 - 2016-03-08 20:35 - 00000000 ____D C:\Users\Maxou 2017-05-08 18:55 - 2009-07-14 06:45 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-05-08 18:55 - 2009-07-14 06:45 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-05-08 18:47 - 2016-08-13 23:39 - 00000000 ____D C:\Users\Maxou\AppData\Local\LogMeIn Hamachi 2017-05-08 18:47 - 2016-03-12 17:22 - 00000000 __SHD C:\Users\Maxou\IntelGraphicsProfiles 2017-05-08 18:46 - 2016-03-18 13:34 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-08 18:45 - 2016-04-23 13:31 - 00000950 ____H C:\Windows\Tasks\{61A6DD24-FCB8-4646-8BAE-254B0D0CF85D}.job 2017-05-08 18:45 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-05-08 17:51 - 2016-06-12 21:03 - 00000000 ___RD C:\Users\Maxou\Desktop\JEU 2017-05-08 17:25 - 2016-04-04 10:34 - 00000000 ____D C:\Users\Maxou\Desktop\TRAVAIL 2017-05-08 16:59 - 2016-06-12 20:38 - 00000000 ____D C:\Users\Maxou\AppData\Local\Adobe 2017-05-08 16:53 - 2016-03-08 20:47 - 00002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-05-08 16:51 - 2017-02-05 15:56 - 00000000 ___RD C:\Users\Maxou\Creative Cloud Files 2017-05-08 16:51 - 2017-02-05 15:56 - 00000000 ____D C:\ProgramData\boost_interprocess 2017-05-07 21:18 - 2016-11-11 12:14 - 00002360 __RSH C:\ProgramData\ntuser.pol 2017-05-07 21:02 - 2017-02-22 21:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-05-07 20:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2017-05-07 20:52 - 2017-02-24 19:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2017-05-07 19:53 - 2017-02-24 18:01 - 00000000 ____D C:\ProgramData\MFAData 2017-05-07 19:53 - 2017-02-24 18:00 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2017-05-07 19:53 - 2017-02-05 14:55 - 00000000 ____D C:\Users\Maxou\Desktop\CLEANER 2017-05-07 19:53 - 2016-05-29 19:03 - 00000000 ____D C:\Users\Maxou\AppData\Local\Akamai 2017-05-07 19:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2017-05-07 19:45 - 2016-07-16 19:40 - 00000000 ____D C:\Users\Maxou\Desktop\DS4 2017-05-07 14:12 - 2016-03-20 02:54 - 00000000 ____D C:\Windows\Minidump 2017-05-07 13:26 - 2017-02-15 23:16 - 00001992 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-05-07 13:26 - 2016-03-08 20:35 - 00001345 _____ C:\Users\Maxou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-07 12:34 - 2017-02-23 23:48 - 00003724 _____ C:\Windows\System32\Tasks\{071B1B61-C930-3B72-C805-1CBFBA38994F} 2017-05-07 12:28 - 2017-02-23 22:28 - 00000000 ____D C:\Program Files\GridinSoft Anti-Malware 2017-05-06 22:30 - 2016-06-12 20:41 - 00001064 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2017-05-05 18:40 - 2016-03-12 16:47 - 00122808 _____ C:\Users\Maxou\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-05 18:40 - 2009-07-14 06:45 - 05102240 _____ C:\Windows\system32\FNTCACHE.DAT 2017-04-30 15:30 - 2016-03-19 15:34 - 00000000 ____D C:\Users\Maxou\AppData\Local\Spotify 2017-04-30 14:21 - 2016-03-19 15:31 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Spotify 2017-04-29 18:57 - 2016-12-02 21:57 - 00245544 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe 2017-04-29 11:56 - 2016-04-27 16:54 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.4 2017-04-29 06:00 - 2016-03-08 20:47 - 00003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2017-04-29 06:00 - 2016-03-08 20:47 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2017-04-23 16:39 - 2017-02-24 18:18 - 00000000 ____D C:\ProgramData\AVG2013 2017-04-23 16:39 - 2016-07-16 19:35 - 00000000 ____D C:\Program Files (x86)\DSDCS 2017-04-23 10:30 - 2009-07-14 07:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\Windows\Temp1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\Users\Maxou\AppData\LocalLow\Youtube AdBlock1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\GOG Games1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\Fraps1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\download1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\AdwCleaner1 2017-04-22 21:54 - 2016-12-11 20:13 - 00000000 ___HD C:\1 2017-04-22 21:54 - 2016-04-05 11:48 - 00000000 ____D C:\download 2017-04-22 21:54 - 2016-03-18 23:26 - 00000000 ____D C:\GOG Games 2017-04-22 21:54 - 2016-03-12 20:31 - 00000000 ____D C:\Fraps 2017-04-22 21:33 - 2016-12-27 13:33 - 00000000 ____D C:\ProgramData\gadgj 2017-04-22 20:55 - 2016-03-08 20:41 - 01645124 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-04-22 20:55 - 2011-04-12 11:16 - 00747644 _____ C:\Windows\system32\perfh00C.dat 2017-04-22 20:55 - 2011-04-12 11:16 - 00150168 _____ C:\Windows\system32\perfc00C.dat 2017-04-22 20:55 - 2009-07-14 07:13 - 01645124 _____ C:\Windows\system32\PerfStringBackup.INI 2017-04-22 19:11 - 2017-02-26 13:04 - 00000000 ____D C:\Users\Maxou\Desktop\VIDEO KONCEPT 2017-04-22 19:10 - 2016-03-19 15:33 - 00000000 ____D C:\Users\Maxou\Desktop\VIDEO EN COURS 2017-04-21 23:02 - 2017-02-05 13:00 - 00000000 ____D C:\tmp 2017-04-21 17:02 - 2016-03-13 16:28 - 00000000 ____D C:\Users\Maxou\AppData\Local\Sony 2017-04-21 17:02 - 2016-03-13 16:28 - 00000000 ____D C:\ProgramData\Sony 2017-04-21 17:02 - 2016-03-13 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2017-04-21 17:02 - 2016-03-13 16:28 - 00000000 ____D C:\Program Files (x86)\Sony 2017-04-21 16:58 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-04-21 14:44 - 2016-06-20 17:29 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Audacity 2017-04-20 19:56 - 2017-03-26 19:03 - 00001096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voxal Voice Changer.lnk 2017-04-20 19:56 - 2017-02-05 16:29 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2017.lnk 2017-04-20 19:56 - 2016-09-11 17:35 - 00001035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk 2017-04-20 19:56 - 2016-08-26 17:37 - 00000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riders of Asgard.lnk 2017-04-20 19:56 - 2016-07-13 17:58 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Floor is Jelly.lnk 2017-04-20 19:56 - 2016-06-24 14:19 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2017-04-20 19:56 - 2016-06-20 17:29 - 00001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2017-04-20 19:56 - 2016-04-13 13:42 - 00002515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2017-04-20 19:56 - 2016-03-19 15:34 - 00001753 _____ C:\Users\Maxou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2017-04-20 19:56 - 2016-03-08 20:31 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2017-04-20 19:56 - 2016-03-08 20:31 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2017-04-20 19:56 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2017-04-20 19:56 - 2009-07-14 06:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-04-20 19:56 - 2009-07-14 06:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2017-04-20 19:56 - 2009-07-14 06:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2017-04-20 19:56 - 2009-07-14 06:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2017-04-20 19:56 - 2009-07-14 06:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2017-04-20 19:56 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2017-04-20 19:52 - 2017-04-07 20:20 - 00000000 ____D C:\Users\Maxou\AppData\Local\AMD 2017-04-20 19:49 - 2016-11-11 10:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2017-04-20 17:07 - 2016-12-11 20:13 - 00000000 ___HD C:\Users\Maxou\AppData\Local\Temp1 2017-04-20 15:14 - 2016-03-09 16:28 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-04-20 15:14 - 2016-03-09 16:28 - 00000000 ____D C:\Windows\system32\MRT 2017-04-20 15:12 - 2016-12-20 21:12 - 00000000 ____D C:\Program Files (x86)\Please Don’t Touch Anything 2017-04-20 15:12 - 2016-05-01 13:48 - 00000000 ____D C:\Program Files (x86)\Audiosurf 2 2017-04-20 14:52 - 2017-02-24 18:05 - 00033512 _____ C:\Windows\SysWOW64\Drivers\TrueSight.sys 2017-04-20 14:08 - 2016-05-01 21:35 - 00000000 ___HD C:\Windows\msdownld.tmp 2017-04-20 13:40 - 2017-02-11 16:10 - 00000000 ____D C:\Program Files (x86)\Battle.net 2017-04-20 13:38 - 2017-02-11 16:21 - 00000000 ____D C:\Users\Maxou\AppData\Local\Battle.net 2017-04-20 13:38 - 2016-11-11 12:12 - 00000000 ____D C:\Windows\system32\SSL 2017-04-20 13:38 - 2016-10-21 15:19 - 00000000 ____D C:\Users\Maxou\AppData\Local\Ubisoft Game Launcher 2017-04-19 15:13 - 2017-02-15 23:17 - 00000000 ____D C:\Users\Maxou\AppData\LocalLow\Mozilla 2017-04-18 10:46 - 2017-02-13 20:34 - 00000000 ____D C:\Program Files (x86)\Arc 2017-04-17 22:44 - 2016-03-12 10:35 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Skype 2017-04-17 12:14 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins 2017-04-16 21:47 - 2016-03-18 13:29 - 00000000 ____D C:\ProgramData\Package Cache 2017-04-16 17:07 - 2017-04-01 19:03 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Mozilla 2017-04-16 16:59 - 2016-07-08 09:57 - 00000000 ____D C:\ProgramData\Leap Motion 2017-04-16 16:59 - 2016-07-08 09:56 - 00000000 ____D C:\Program Files (x86)\Leap Motion 2017-04-15 18:39 - 2009-07-14 04:34 - 00017570 _____ C:\Windows\system32\Drivers\etc\services 2017-04-15 17:23 - 2016-03-09 18:22 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\Adobe 2017-04-15 17:21 - 2017-02-05 16:29 - 00000000 ____D C:\Users\Maxou\Documents\Adobe 2017-04-15 17:20 - 2016-06-24 14:19 - 00000000 ____D C:\Program Files\Adobe 2017-04-15 17:08 - 2017-02-05 17:25 - 00000000 ____D C:\Users\Maxou\Desktop\CRACK ADOBE 2017-04-15 14:44 - 2016-06-24 14:18 - 00000000 ____D C:\Program Files\Common Files\Adobe 2017-04-15 11:00 - 2016-06-24 14:19 - 00000000 ___HD C:\Program Files (x86)\Adobe 2017-04-14 22:40 - 2017-03-26 19:03 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2017-04-14 22:38 - 2017-03-26 19:03 - 00001181 _____ C:\Users\Maxou\AppData\Roaming\trace_FilterInstaller.txt 2017-04-14 22:38 - 2017-03-26 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite 2017-04-14 22:38 - 2017-03-26 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs 2017-04-14 22:38 - 2017-03-26 19:03 - 00000000 _____ C:\Users\Maxou\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2017-04-14 21:27 - 2016-03-12 10:34 - 00000000 ____D C:\ProgramData\Skype 2017-04-13 18:54 - 2016-03-08 20:35 - 00000000 ____D C:\Users\Maxou\AppData\Local\VirtualStore 2017-04-12 20:54 - 2016-11-19 22:40 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\discord 2017-04-12 17:10 - 2016-11-26 20:55 - 00000000 ____D C:\Windows\system32\log 2017-04-12 17:09 - 2016-04-17 19:38 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\uTorrent 2017-04-11 10:42 - 2017-01-15 20:48 - 00002151 _____ C:\Users\Maxou\AppData\Roaming\SpeedRunnersLog.txt 2017-04-11 10:39 - 2016-07-16 19:35 - 00000000 ____D C:\Users\Maxou\AppData\Roaming\InputMapper2 2017-04-09 17:58 - 2017-03-04 23:50 - 00000000 ____D C:\Users\Maxou\Desktop\TONY 2017-04-08 16:41 - 2016-03-19 15:33 - 00000000 ____D C:\Users\Maxou\Desktop\JEU EN DOSSIER 2017-04-08 14:20 - 2017-02-11 16:37 - 00000000 ____D C:\Program Files (x86)\Hearthstone ==================== Fichiers à la racine de certains dossiers ======= 2016-04-14 11:52 - 2016-04-14 11:52 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll 2017-02-05 18:37 - 2017-04-02 15:34 - 0000033 _____ () C:\Users\Maxou\AppData\Roaming\AdobeWLCMCache.dat 2017-04-16 17:06 - 2017-04-16 17:06 - 0140288 _____ () C:\Users\Maxou\AppData\Roaming\Installer.dat 2017-04-16 17:07 - 2017-04-16 17:07 - 0018432 _____ () C:\Users\Maxou\AppData\Roaming\Main.dat 2017-01-15 20:48 - 2017-04-11 10:42 - 0002151 _____ () C:\Users\Maxou\AppData\Roaming\SpeedRunnersLog.txt 2017-03-26 19:03 - 2017-03-26 19:03 - 0001181 _____ () C:\Users\Maxou\AppData\Roaming\trace_FilterInstaller.1.txt 2017-03-26 19:03 - 2017-04-14 22:38 - 0001181 _____ () C:\Users\Maxou\AppData\Roaming\trace_FilterInstaller.txt 2017-03-26 19:03 - 2017-04-14 22:38 - 0000000 _____ () C:\Users\Maxou\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2017-04-19 10:11 - 2017-04-19 10:11 - 0000000 ____H () C:\Users\Maxou\AppData\Local\BITCDAA.tmp 2017-02-11 17:16 - 2017-02-11 17:16 - 0000063 _____ () C:\Users\Maxou\AppData\Local\emaildefaults 2017-02-11 17:17 - 2017-02-11 17:17 - 0000426 _____ () C:\Users\Maxou\AppData\Local\karboncalligraphyrc 2017-02-26 23:08 - 2017-02-26 23:08 - 0009700 _____ () C:\Users\Maxou\AppData\Local\kritacrash.log 2017-02-11 17:15 - 2017-05-08 21:25 - 0020972 _____ () C:\Users\Maxou\AppData\Local\kritarc 2017-02-11 17:15 - 2017-02-11 17:15 - 0000218 _____ () C:\Users\Maxou\AppData\Local\recently-used.xbel 2017-04-19 10:11 - 2017-04-19 10:11 - 0000000 _____ () C:\Users\Maxou\AppData\Local\{1CDC6DF2-8B52-455E-9144-70E77AC4FF18} 2016-03-08 20:47 - 2016-03-08 20:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2017-05-07 12:29 - 2017-05-07 12:30 - 0000132 _____ () C:\ProgramData\log.binb 2017-05-07 12:28 - 2017-05-07 12:29 - 0000128 _____ () C:\ProgramData\log.ewbb 2017-05-07 12:28 - 2017-05-07 12:29 - 0014895 _____ () C:\ProgramData\log.ewbt 2016-07-31 14:54 - 2016-07-31 14:54 - 0000016 _____ () C:\ProgramData\mntemp Fichiers à déplacer ou supprimer: ==================== C:\Windows\TEMP\g4329.tmp.exe C:\Windows\Tasks\{61A6DD24-FCB8-4646-8BAE-254B0D0CF85D}.job Certains fichiers dans TEMP: ==================== 2017-05-07 12:31 - 2017-05-07 12:31 - 1042800 _____ (Star Line ) C:\Users\Maxou\AppData\Local\Temp\AdBlocker.exe 2017-05-07 12:28 - 2017-05-07 12:28 - 0951520 _____ (Olimp company) C:\Users\Maxou\AppData\Local\Temp\msclean.exe 2014-11-08 10:33 - 2015-03-29 21:06 - 0606208 _____ () C:\Users\Maxou\AppData\Local\Temp\Quarantine.exe 2017-05-07 12:28 - 2017-05-07 12:28 - 0606748 _____ ( ) C:\Users\Maxou\AppData\Local\Temp\speedownloader.exe 2014-11-08 10:47 - 2014-10-17 13:39 - 0665682 _____ (SQLite Development Team) C:\Users\Maxou\AppData\Local\Temp\sqlite3.dll 2017-05-07 12:29 - 2017-05-07 12:29 - 1199825 _____ () C:\Users\Maxou\AppData\Local\Temp\unins000.exe 2017-05-07 12:28 - 2017-05-07 12:29 - 0597261 _____ (VideoBox ) C:\Users\Maxou\AppData\Local\Temp\vbsetup.exe 2017-05-07 12:29 - 2017-05-07 12:30 - 1320703 _____ ( ) C:\Users\Maxou\AppData\Local\Temp\webfriend.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-05-05 19:01 ==================== Fin de FRST.txt ============================