Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-06-2017 01
Ran by nath (administrator) on NATH-PC (16-06-2017 17:19:21)
Running from C:\Users\nath\Downloads
Loaded Profiles: nath (Available Profiles: nath & DefaultAppPool)
Platform: Microsoft Windows 10 Professionnel Version 1607 (X86) Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Rene.E Laboratory) C:\Program Files\Rene.E Laboratory\Becca\bcservice.exe
(CybelSoft) C:\Program Files\ma-config.com\MaConfigAgent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1439_none_22df65e269979a9a\TiWorker.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1793736 2015-06-29] (NVIDIA Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKU\S-1-5-21-473236415-4064107739-3555441044-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7618776 2017-05-05] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-05-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{75fcb7ba-6116-4815-ba37-149276239624}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{e3a47b47-6446-4726-8939-9dcca6747b5c}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKU\S-1-5-21-473236415-4064107739-3555441044-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp

FireFox:
========
FF DefaultProfile: 4p816aew.default
FF ProfilePath: C:\Users\nath\AppData\Roaming\Mozilla\Firefox\Profiles\4p816aew.default [2017-06-16]
FF Extension: (Avast SafePrice) - C:\Users\nath\AppData\Roaming\Mozilla\Firefox\Profiles\4p816aew.default\Extensions\sp@avast.com.xpi [2017-06-01]
FF Extension: (Avast Online Security) - C:\Users\nath\AppData\Roaming\Mozilla\Firefox\Profiles\4p816aew.default\Extensions\wrc@avast.com.xpi [2017-06-01]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5732136 2017-05-10] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 Becca Service; C:\Program Files\Rene.E Laboratory\Becca\bcservice.exe [54768 2015-08-17] (Rene.E Laboratory)
R2 MaConfigAgent; C:\Program Files\ma-config.com\MaConfigAgent.exe [2117448 2014-10-15] (CybelSoft)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3398608 2017-05-09] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [981184 2015-07-11] (@ByELDI) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [258288 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [148696 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [268016 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [41664 2017-05-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34136 2017-05-10] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [31064 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [107928 2017-05-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [90336 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [62152 2017-05-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [764576 2017-05-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [482608 2017-05-10] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [115152 2017-05-21] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [279800 2017-05-10] (AVAST Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109456 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 ma-config_x86; C:\Program Files\ma-config.com\Drivers\ma-config_x86.sys [16160 2014-02-24] (CybelSoft)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [220576 2017-06-14] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2016-07-16] (Realtek                                            )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147344 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-16 17:19 - 2017-06-16 17:19 - 00008357 _____ C:\Users\nath\Downloads\FRST.txt
2017-06-16 17:19 - 2017-06-16 17:19 - 00000000 ____D C:\FRST
2017-06-16 17:18 - 2017-06-16 17:18 - 01777152 _____ (Farbar) C:\Users\nath\Downloads\FRST.exe
2017-06-15 11:32 - 2017-06-15 11:32 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-14 11:34 - 2017-06-14 11:34 - 00055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys.149743287307801
2017-06-14 11:25 - 2017-06-14 11:25 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 11:05 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 11:05 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 11:05 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 11:05 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 11:05 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 11:05 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 11:05 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 11:05 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 11:05 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 11:05 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 11:05 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 11:05 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 11:05 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 11:05 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 11:05 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 11:05 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 11:05 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 11:05 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 11:05 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 11:05 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 11:05 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 11:05 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 11:05 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-14 11:05 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-06-14 11:05 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 11:05 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 11:05 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 11:05 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 11:05 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 11:05 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 11:05 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 11:05 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 11:05 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-06-14 11:05 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 11:05 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 11:05 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 11:05 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 11:05 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 11:05 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 11:05 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 11:05 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 11:05 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 11:05 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 11:05 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 11:05 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 11:05 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 11:05 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-06-14 11:05 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-06-14 11:05 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 11:04 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 11:04 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 11:04 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 11:04 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 11:04 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 11:04 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 11:04 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 11:04 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 11:04 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 11:04 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 11:04 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 11:04 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 11:04 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 11:04 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 11:04 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 11:04 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 11:04 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 11:04 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 11:04 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 11:04 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-07 15:28 - 2017-06-07 15:28 - 00339238 _____ C:\Users\nath\Downloads\B.C213.pdf
2017-06-07 15:28 - 2017-06-07 15:28 - 00339238 _____ C:\Users\nath\Downloads\B.C213(1).pdf
2017-06-06 12:04 - 2017-06-06 12:04 - 00004096 _____ C:\WINDOWS\SECOH-QAD.exe
2017-05-21 18:15 - 2017-06-14 11:26 - 00220576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-05-21 18:15 - 2017-06-06 11:03 - 00059936 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-05-21 18:15 - 2017-06-04 19:00 - 00074656 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-05-21 18:15 - 2017-06-03 10:40 - 00162208 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-05-21 18:15 - 2017-06-03 10:40 - 00097208 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-05-21 18:15 - 2017-06-03 10:40 - 00039840 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-05-21 18:15 - 2017-05-21 18:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-21 18:15 - 2017-05-21 18:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-21 18:11 - 2017-05-21 18:13 - 63035592 _____ (Malwarebytes ) C:\Users\nath\Downloads\mb3-setup-35891.35891-3.1.2.1733.exe
2017-05-18 22:18 - 2017-05-18 22:18 - 00147344 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-16 16:44 - 2016-11-18 23:13 - 00000000 ____D C:\Users\nath\AppData\LocalLow\Mozilla
2017-06-16 16:07 - 2016-09-17 08:58 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-06-16 15:51 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-16 11:29 - 2017-01-26 23:01 - 00000000 ____D C:\Users\nath\Desktop\papier
2017-06-16 11:01 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-16 11:01 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-14 11:30 - 2016-09-17 18:47 - 00711330 _____ C:\WINDOWS\system32\perfh00C.dat
2017-06-14 11:30 - 2016-09-17 18:47 - 00153376 _____ C:\WINDOWS\system32\perfc00C.dat
2017-06-14 11:30 - 2016-09-17 09:02 - 02016910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-06-14 11:27 - 2015-12-19 19:26 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-14 11:26 - 2016-09-17 09:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-14 11:26 - 2016-09-17 09:00 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-14 11:26 - 2016-09-17 08:58 - 00224128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-14 11:26 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-06-14 11:26 - 2016-07-16 04:22 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-06-14 11:25 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-14 11:25 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-14 11:14 - 2015-03-22 20:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-14 11:10 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-14 11:10 - 2010-02-10 07:47 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-03 08:36 - 2016-07-16 10:31 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-06-03 08:36 - 2016-07-16 10:31 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-05-31 14:39 - 2016-05-31 14:04 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-05-29 22:22 - 2017-03-26 19:57 - 00000000 ____D C:\Users\nath\Desktop\photos
2017-05-21 18:39 - 2015-03-22 13:58 - 00115152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-05-21 18:36 - 2015-03-22 15:15 - 00000000 ___RD C:\Users\nath\Desktop\logiciel
2017-05-21 18:31 - 2016-12-15 23:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-05-21 18:31 - 2015-03-22 13:44 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-05-18 22:17 - 2014-01-22 08:52 - 00109456 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus.sys

==================== Files in the root of some directories =======

2016-01-02 10:33 - 2016-01-03 14:18 - 0007606 _____ () C:\Users\nath\AppData\Local\Resmon.ResmonCfg
2015-03-24 14:29 - 2015-03-24 14:29 - 0000057 _____ () C:\ProgramData\Ament.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-08 11:18

==================== End of FRST.txt ============================