Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-06-2017 Exécuté par Léonie (administrateur) sur LÉONIE-PC (06-06-2017 13:36:36) Exécuté depuis C:\Users\Léonie\Desktop Profils chargés: UpdatusUser & Léonie (Profils disponibles: UpdatusUser & Léonie) Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE (SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe (ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini" HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-18] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation) HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd) HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [Google Update] => C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2017-02-04] (Google Inc.) HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software) ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.) ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-04-13] ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2016-12-22] ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe () ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-06] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-06] (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) FireFox: ======== FF DefaultProfile: bx905c1k.default FF ProfilePath: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default [2017-06-06] FF NewTab: Mozilla\Firefox\Profiles\bx905c1k.default -> about:newtab FF DefaultSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google FF DefaultSearchUrl: Mozilla\Firefox\Profiles\bx905c1k.default -> hxxps://www.google.com/search?bcutc=sp-006 FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\bx905c1k.default -> Google FF SelectedSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google FF Homepage: Mozilla\Firefox\Profiles\bx905c1k.default -> www.google.fr FF Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\sp@avast.com.xpi [2017-05-31] FF Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\wrc@avast.com.xpi [2017-05-31] FF Extension: (Disable TLS Certificate Transparency) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-cert-transparency@mozilla.org.xpi [2017-05-11] FF Extension: (Disable Prefetch) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-prefetch@mozilla.org.xpi [2017-05-11] FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\google-avast.xml [2017-02-28] FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\yahoo-avast.xml [2017-02-24] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-05-27] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-05-27] (NVIDIA Corporation) FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation) FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google) FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/O1DPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google) FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.) FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google) Chrome: ======= CHR HomePage: Default -> hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG CHR StartupUrls: Default -> "hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG" CHR DefaultSearchURL: Default -> hxxp://www.ourluckysites.com/search/?type=ds&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG&q={searchTerms} CHR DefaultSearchKeyword: Default -> ourluckysites CHR Profile: C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default [2017-05-30] CHR Extension: (Google Slides) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-23] CHR Extension: (Google Docs) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-23] CHR Extension: (Google Drive) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-23] CHR Extension: (YouTube) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-23] CHR Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-04-09] CHR Extension: (Google Sheets) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-23] CHR Extension: (Google Docs hors connexion) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-03] CHR Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-04-09] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-09] CHR Extension: (Gmail) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-23] CHR Extension: (Chrome Media Router) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-09] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.) R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.) R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.) R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-10] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software) R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software) R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [252832 2017-06-06] (Malwarebytes) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] () S3 catchme; \??\C:\Users\LONIE~1\AppData\Local\Temp\catchme.sys [X] <==== ATTENTION ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-06 13:36 - 2017-06-06 13:36 - 00022444 _____ C:\Users\Léonie\Desktop\FRST.txt 2017-06-06 13:36 - 2017-06-06 13:36 - 00000000 ____D C:\FRST 2017-06-06 13:35 - 2017-06-06 13:35 - 02433536 _____ (Farbar) C:\Users\Léonie\Desktop\FRST64.exe 2017-06-06 12:57 - 2017-06-06 12:57 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\EPSON 2017-06-06 10:15 - 2017-06-06 10:15 - 00120603 _____ C:\Users\Léonie\Desktop\ZHPDiag4.txt 2017-06-06 10:06 - 2017-06-06 10:06 - 00000000 ____D C:\ProgramData\SWCUTemp 2017-06-06 10:03 - 2017-06-06 10:03 - 00003084 _____ C:\Users\Léonie\Desktop\ZHPFixReport.txt 2017-06-06 10:01 - 2017-06-06 10:01 - 00001855 _____ C:\Users\Public\Desktop\ZHPFix.lnk 2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP 2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\Program Files (x86)\ZHPFix 2017-06-06 09:59 - 2017-06-06 09:59 - 03521617 _____ (Nicolas Coolman ) C:\Users\Léonie\Desktop\zhpfix_2015.10.19.9.exe 2017-06-05 22:21 - 2017-06-05 22:21 - 00123657 _____ C:\Users\Léonie\Desktop\ZHPDiag2.txt 2017-06-05 22:16 - 2017-06-05 22:16 - 00000971 _____ C:\Users\Léonie\Desktop\AdwCleaner[C0] - Raccourci.lnk 2017-06-05 21:54 - 2017-06-05 22:16 - 00000000 ____D C:\AdwCleaner 2017-06-05 21:54 - 2017-06-05 21:54 - 04110280 _____ C:\adwcleaner_6.047.exe 2017-06-05 21:49 - 2017-06-05 21:51 - 00007877 _____ C:\Users\Léonie\Desktop\ZHPCleaner.txt 2017-06-05 21:42 - 2017-06-05 21:42 - 02513920 _____ C:\Users\Léonie\Desktop\ZHPCleaner-2017.exe 2017-06-05 21:42 - 2017-06-05 21:42 - 00000902 _____ C:\Users\Léonie\Desktop\ZHPCleaner.lnk 2017-06-05 19:59 - 2017-06-06 10:14 - 00120600 _____ C:\Users\Léonie\Desktop\ZHPDiag.txt 2017-06-05 15:09 - 2017-06-06 10:11 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\ZHP 2017-06-05 15:09 - 2017-06-06 10:10 - 00000000 ____D C:\Users\Léonie\AppData\Local\ZHP 2017-06-05 15:08 - 2017-06-05 15:08 - 02734592 _____ C:\Users\Léonie\Desktop\ZHPDiag3.exe 2017-06-01 21:18 - 2017-06-06 00:18 - 00443568 _____ C:\Windows\ntbtlog.txt 2017-05-30 21:50 - 2017-05-30 21:51 - 00004622 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.odt 2017-05-30 21:50 - 2017-05-30 21:50 - 00097273 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.pdf 2017-05-30 17:46 - 2017-05-30 17:47 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo 2017-05-30 17:46 - 2017-05-30 17:46 - 00001206 _____ C:\Users\Léonie\Desktop\CrystalDiskInfo.lnk 2017-05-30 17:46 - 2017-05-30 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo 2017-05-30 17:45 - 2017-05-30 17:45 - 03961080 _____ (Crystal Dew World ) C:\crystaldiskinfo_7-0-5_en_306038.exe 2017-05-26 15:01 - 2017-05-26 15:01 - 00081570 _____ C:\Users\Léonie\Desktop\annexes.pdf 2017-05-26 14:55 - 2017-05-26 14:55 - 00136947 _____ C:\Users\Léonie\Desktop\2377-PAJE-CDI-AMA.pdf 2017-05-26 14:32 - 2017-05-26 14:32 - 00089111 _____ C:\Users\Léonie\Desktop\acte_caution_solidaire.pdf 2017-05-14 20:55 - 2017-05-14 20:55 - 00001051 _____ C:\Users\Léonie\Desktop\MaxiCompte 3.lnk 2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxiCompte 3 2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Program Files (x86)\MaxiCompte 3 2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Données EuroSoft Software Development 2017-05-14 20:52 - 2017-05-14 20:52 - 09535089 _____ (EuroSoft Software Development ) C:\maxicompte_3-24_fr_15616.exe 2017-05-13 00:46 - 2017-05-30 23:32 - 00002043 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-05-13 00:45 - 2017-05-13 00:46 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-05-13 00:43 - 2017-05-13 00:44 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2.exe 2017-05-13 00:43 - 2017-05-13 00:43 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2 (1).exe 2017-05-13 00:12 - 2017-05-13 00:12 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-05-13 00:12 - 2017-05-13 00:12 - 00000000 ____D C:\Users\Public\Documents\Google 2017-05-13 00:10 - 2017-05-13 00:10 - 00000000 ____D C:\Program Files (x86)\Default Company Name 2017-05-11 23:39 - 2017-05-13 00:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-05-11 22:13 - 2017-06-06 10:06 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-05-11 22:13 - 2017-06-05 22:01 - 00077376 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-05-11 22:13 - 2017-05-11 22:13 - 00001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\Program Files\Malwarebytes 2017-05-11 20:36 - 2017-05-11 20:36 - 00000000 _____ C:\Windows\SysWOW64\3333333 2017-05-11 20:35 - 2017-05-11 20:35 - 00000000 _____ C:\Windows\SysWOW64\00 2017-05-10 13:25 - 2017-05-10 13:25 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\Documents\My Games 2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\ProgramData\Age of Empires 3 2017-05-09 21:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2017-05-09 21:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2017-05-09 21:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2017-05-09 21:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2017-05-09 15:00 - 2017-05-09 15:00 - 00000222 _____ C:\Users\Léonie\Desktop\Age of Empires III Complete Collection.url 2017-05-08 14:39 - 2017-05-08 14:40 - 00000000 ____D C:\Users\Public\Documents\temp 2017-05-08 14:39 - 2017-05-08 14:39 - 00000000 ____D C:\Users\Public\Documents\chrome 2017-05-07 22:21 - 2017-06-05 23:43 - 00000000 ____D C:\Users\Léonie\AppData\Local\FalloutShelter 2017-05-07 22:21 - 2017-05-07 22:21 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Bethesda 2017-05-07 22:15 - 2017-05-07 22:15 - 00000222 _____ C:\Users\Léonie\Desktop\Fallout Shelter.url ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-06 11:01 - 2011-04-11 14:05 - 00482258 _____ C:\Windows\system32\perfh001.dat 2017-06-06 11:01 - 2011-04-11 14:05 - 00098162 _____ C:\Windows\system32\perfc001.dat 2017-06-06 11:01 - 2011-03-17 13:52 - 00727844 _____ C:\Windows\system32\perfh019.dat 2017-06-06 11:01 - 2011-03-17 13:52 - 00154232 _____ C:\Windows\system32\perfc019.dat 2017-06-06 11:01 - 2011-02-19 07:02 - 00395588 _____ C:\Windows\system32\perfh00D.dat 2017-06-06 11:01 - 2011-02-19 07:02 - 00088148 _____ C:\Windows\system32\perfc00D.dat 2017-06-06 11:01 - 2011-02-19 06:56 - 00610232 _____ C:\Windows\system32\perfh008.dat 2017-06-06 11:01 - 2011-02-19 06:56 - 00114518 _____ C:\Windows\system32\perfc008.dat 2017-06-06 11:01 - 2011-02-19 06:51 - 00409036 _____ C:\Windows\system32\prfh0404.dat 2017-06-06 11:01 - 2011-02-19 06:51 - 00125534 _____ C:\Windows\system32\prfc0404.dat 2017-06-06 11:01 - 2011-02-19 06:45 - 00732262 _____ C:\Windows\system32\prfh0816.dat 2017-06-06 11:01 - 2011-02-19 06:45 - 00156296 _____ C:\Windows\system32\prfc0816.dat 2017-06-06 11:01 - 2011-02-19 06:40 - 00746742 _____ C:\Windows\system32\perfh013.dat 2017-06-06 11:01 - 2011-02-19 06:40 - 00156492 _____ C:\Windows\system32\perfc013.dat 2017-06-06 11:01 - 2011-02-19 06:35 - 00743290 _____ C:\Windows\system32\perfh010.dat 2017-06-06 11:01 - 2011-02-19 06:35 - 00150236 _____ C:\Windows\system32\perfc010.dat 2017-06-06 11:01 - 2011-02-19 06:29 - 00759010 _____ C:\Windows\system32\perfh00C.dat 2017-06-06 11:01 - 2011-02-19 06:29 - 00153584 _____ C:\Windows\system32\perfc00C.dat 2017-06-06 11:01 - 2011-02-19 06:24 - 00700452 _____ C:\Windows\system32\perfh007.dat 2017-06-06 11:01 - 2011-02-19 06:24 - 00152506 _____ C:\Windows\system32\perfc007.dat 2017-06-06 11:01 - 2011-02-19 06:19 - 00748700 _____ C:\Windows\system32\perfh00A.dat 2017-06-06 11:01 - 2011-02-19 06:19 - 00161864 _____ C:\Windows\system32\perfc00A.dat 2017-06-06 11:01 - 2009-07-14 07:13 - 09348272 _____ C:\Windows\system32\PerfStringBackup.INI 2017-06-06 11:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2017-06-06 10:16 - 2017-01-27 23:18 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Mozilla 2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-06-06 10:08 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2017-06-06 10:06 - 2016-12-21 17:41 - 00045056 _____ C:\Windows\system32\acovcnt.exe 2017-06-06 10:06 - 2016-12-21 17:41 - 00000000 ___HD C:\ASUS.DAT 2017-06-06 10:05 - 2016-12-22 02:07 - 00000000 ____D C:\ProgramData\NVIDIA 2017-06-06 10:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-06-05 23:09 - 2017-01-02 21:43 - 00000000 ____D C:\Program Files (x86)\Steam 2017-06-05 22:10 - 2017-01-13 15:18 - 00000000 ____D C:\Users\Léonie\AppData\Local\Microsoft Games 2017-06-05 22:09 - 2017-04-18 09:08 - 00000000 ____D C:\Windows\Update 2017-06-05 22:09 - 2017-04-07 09:28 - 00000000 ____D C:\Update 2017-06-05 21:51 - 2017-04-10 20:48 - 00000000 ____D C:\Windows\system32\log 2017-06-03 15:23 - 2017-02-23 22:18 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2017-06-01 21:45 - 2017-02-23 22:22 - 00003920 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1487881344 2017-05-30 21:47 - 2016-12-30 19:14 - 00000000 ___SD C:\Users\Léonie\AppData\LocalLow\Temp 2017-05-30 18:01 - 2017-03-03 15:29 - 00007601 _____ C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg 2017-05-23 21:59 - 2016-12-30 19:10 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\SoftGrid Client 2017-05-20 00:26 - 2009-07-14 07:08 - 00024426 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2017-05-13 10:05 - 2017-01-27 23:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-05-13 00:43 - 2017-02-23 22:18 - 00158880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2017-05-11 23:38 - 2017-01-29 18:42 - 00000000 ____D C:\Users\Léonie\Documents\My Downloads 2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrerdc(62553776).lnk 2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\Léonie\Desktop\chambrerdc(62553776).lnk 2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrejuliette(62658996).lnk 2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\Léonie\Desktop\chambrejuliette(62658996).lnk 2017-05-11 22:36 - 2017-02-03 23:20 - 00001435 _____ C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-05-11 22:35 - 2017-04-07 09:28 - 00000000 ____D C:\Users\Léonie\AppData\Local\AMD 2017-05-11 22:30 - 2016-12-22 02:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\ProgramData\CyberLink 2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\Program Files (x86)\CyberLink 2017-05-11 20:35 - 2017-05-03 21:24 - 00000000 _____ C:\Windows\SysWOW64\1111111 2017-05-11 20:35 - 2017-04-20 09:12 - 00000000 _____ C:\Windows\SysWOW64\11 2017-05-11 20:35 - 2017-04-07 09:25 - 00000000 ____D C:\Program Files\MK 2017-05-10 22:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports 2017-05-10 13:25 - 2017-02-23 22:18 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2017-05-10 13:25 - 2017-02-23 22:18 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2017-05-10 13:25 - 2017-02-23 22:18 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2017-05-10 13:25 - 2017-02-23 22:18 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2017-05-10 13:25 - 2017-02-23 22:18 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2017-05-10 13:24 - 2017-02-23 22:19 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 00334576 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 00311808 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 00190256 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2017-05-10 13:24 - 2017-02-23 22:18 - 00049016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys 2017-05-09 21:04 - 2017-03-12 00:57 - 00004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-05-09 21:04 - 2017-01-02 21:16 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-05-09 21:04 - 2017-01-02 21:16 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-05-09 21:04 - 2017-01-02 21:16 - 00000000 ____D C:\Windows\system32\Macromed 2017-05-09 21:04 - 2011-04-13 04:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-05-09 15:00 - 2017-01-02 22:03 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam ==================== Fichiers à la racine de certains dossiers ======= 2017-03-03 15:29 - 2017-05-30 18:01 - 0007601 _____ () C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg 2011-04-13 04:48 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe 2016-12-22 02:24 - 2016-12-22 02:25 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2016-12-22 02:24 - 2016-12-22 02:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2009-07-29 07:04 ==================== Fin de FRST.txt ============================