Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x86) Version: 21-06-2017 01
Exécuté par PC1 (administrateur) sur PC1-PC (22-06-2017 04:49:55)
Exécuté depuis C:\Users\PC1\Desktop
Profils chargés: PC1 (Profils disponibles: PC1 & DefaultAppPool)
Platform: Microsoft Windows 10 Famille Version 1607 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files\Orange\ma Livebox\dedicarz\DedicarzService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Orange) C:\Program Files\Orange\ma Livebox\maLivebox.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Orange) C:\Program Files\Le Cloud d'Orange\OrangeCloudApplication.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
(Orange) C:\Program Files\Orange\MailNotifier\MailNotifier.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
(Orange) C:\Program Files\Orange\ma Livebox\dist\ST2.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17042.14211.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Farbar) C:\Users\PC1\Desktop\FRST (1).exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12355816 2015-09-18] (Realtek Semiconductor)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2017-01-13] (Apple Inc.)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220288 2017-05-31] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [GoPro Studio Importer] => C:\Program Files\GoPro\Tools\Importer\GoPro Importer.exe [3218184 2015-10-03] (GoPro)
HKLM\...\Run: [vProt] => "C:\Program Files\AVG Web TuneUp\vprot.exe"
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2017-01-19] (Apple Inc.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [263232 2017-05-23] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [TrojanScanner] => C:\Program Files\Trojan Remover\Trjscan.exe [3673656 2017-05-29] (Simply Super Software)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [Google Update] => C:\Users\PC1\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-29] (Google Inc.)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [Spotify Web Helper] => C:\Users\PC1\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-21] (Spotify Ltd)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [OrangeInside] => C:\Users\PC1\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [0 2016-05-13] ()
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [Spotify] => C:\Users\PC1\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-04-21] (Spotify Ltd)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [OCCDesktop] => C:\Program Files\Le Cloud d'Orange\OrangeCloudApplication.exe [7037952 2017-02-08] (Orange)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [2427400 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [MailNotifier] => C:\Program Files\Orange\MailNotifier\MailNotifier.exe [1495040 2017-05-10] (Orange)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\Run: [Embedded Callback - join24.net] => C:\Users\PC1\AppData\Local\bomgar-scc-cb\join24.net\embedhook-x86.exe [91488 2017-06-20] (Bomgar)
HKU\S-1-5-21-111735135-2287874445-161117311-1000\...\MountPoints2: {893b40f1-c620-11e6-945a-e81132076a49} - "F:\AutoRun.exe" 
ShellIconOverlayIdentifiers: [ AWCOverlayIconFailed] -> {807B3DE6-04E1-41CD-BE17-79259C6F287E} => C:\Program Files\Le Cloud d'Orange\WindowsCloudShellExtensions_3.dll [2017-02-08] (Orange)
ShellIconOverlayIdentifiers: [ AWCOverlayIconIgnored] -> {78E727AC-5F74-44D4-AB7B-1AF593CAB71A} => C:\Program Files\Le Cloud d'Orange\WindowsCloudShellExtensions_3.dll [2017-02-08] (Orange)
ShellIconOverlayIdentifiers: [ AWCOverlayIconUploaded] -> {6AB3E22E-6F5C-4D4A-9F00-76BB29BAEAEF} => C:\Program Files\Le Cloud d'Orange\WindowsCloudShellExtensions_3.dll [2017-02-08] (Orange)
ShellIconOverlayIdentifiers: [ AWCOverlayIconUploading] -> {5A062BD3-C231-4E7A-8782-D83B74BC2B08} => C:\Program Files\Le Cloud d'Orange\WindowsCloudShellExtensions_3.dll [2017-02-08] (Orange)
ShellIconOverlayIdentifiers: [000_OMHOverlayError] -> {6985F9D3-5A54-4C41-BABF-812F79A2B673} => C:\Users\PC1\AppData\Local\Le Cloud Orange\overlay\x86\OMHOverlay.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [001_OMHOverlayProg] -> {809D24D6-A067-4C51-BF0F-0A60CA722182} => C:\Users\PC1\AppData\Local\Le Cloud Orange\overlay\x86\OMHOverlay.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [002_OMHOverlayIcon] -> {0D077A21-3DB2-4955-A3AB-D623C9270D9C} => C:\Users\PC1\AppData\Local\Le Cloud Orange\overlay\x86\OMHOverlay.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [003_OMHOverlayExcl] -> {37FC1C76-E238-4779-B2AC-68DCEA8253C5} => C:\Users\PC1\AppData\Local\Le Cloud Orange\overlay\x86\OMHOverlay.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Pas de fichier

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{174b465c-95f2-4e60-b6fb-d42b118e3371}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{81bd7667-c87c-43cb-a628-b7b6574a4b31}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ada4a406-5980-4088-a13a-b77f0e63a90f}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-111735135-2287874445-161117311-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-111735135-2287874445-161117311-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
HKU\S-1-5-21-111735135-2287874445-161117311-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-111735135-2287874445-161117311-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.7.452\AVG Web TuneUp.dll => Pas de fichier

FireFox:
========
FF DefaultProfile: yypa95t7.default
FF ProfilePath: C:\Users\PC1\AppData\Roaming\Mozilla\Firefox\Profiles\yypa95t7.default [2017-06-20]
FF Extension: (Menu contextuel Orange) - C:\Users\PC1\AppData\Roaming\Mozilla\Firefox\Profiles\yypa95t7.default\Extensions\menu_contextuel_orange@orange.fr [2015-09-26] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-20] ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-111735135-2287874445-161117311-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\PC1\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-02] (RocketLife, LLP)
FF Plugin HKU\S-1-5-21-111735135-2287874445-161117311-1000: @tools.google.com/Google Update;version=3 -> C:\Users\PC1\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-111735135-2287874445-161117311-1000: @tools.google.com/Google Update;version=9 -> C:\Users\PC1\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default [2017-06-22]
CHR Extension: (Google Slides) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-04]
CHR Extension: (Google Docs) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-04]
CHR Extension: (Google Drive) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
CHR Extension: (Recherche Google) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Sheets) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-04]
CHR Extension: (Barre de Confiance CM-CIC) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffjkhaeogkeelkioellpgcebmekedpag [2016-01-24]
CHR Extension: (Google Docs hors connexion) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (AdBlock) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-10]
CHR Extension: (Gmail) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]
CHR Extension: (Chrome Media Router) - C:\Users\PC1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [264432 2017-05-23] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [1189720 2017-05-31] (AVG Technologies CZ, s.r.o.)
R2 Dedicarz Service; C:\Program Files\Orange\ma Livebox\dedicarz\DedicarzService.exe [1970544 2014-09-15] () [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3398608 2017-05-09] (Malwarebytes)
S2 Orange update Core Service; C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe [734488 2016-08-29] (Orange SA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 athr; C:\WINDOWS\System32\drivers\athwn.sys [3228672 2016-07-16] (Qualcomm Atheros Communications, Inc.)
R1 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiskx.sys [135872 2017-05-23] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [35264 2017-05-23] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [109056 2017-05-23] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [63280 2017-05-23] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [765704 2017-05-23] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [483736 2017-05-23] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [280928 2017-05-23] (AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [137632 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [22432 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [59936 2017-05-25] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [162208 2017-06-20] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [97208 2017-06-21] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [39840 2017-06-21] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [220576 2017-06-21] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [74656 2017-06-22] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 Trufos; C:\WINDOWS\System32\DRIVERS\Trufos.sys [428832 2016-11-10] (BitDefender S.R.L.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
R3 yukonw8; C:\WINDOWS\System32\drivers\yk63x86.sys [242688 2016-07-16] (Marvell)
U3 idsvc; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-06-22 04:49 - 2017-06-22 04:50 - 00017425 _____ C:\Users\PC1\Desktop\FRST.txt
2017-06-22 04:48 - 2017-06-22 04:49 - 01778688 _____ (Farbar) C:\Users\PC1\Desktop\FRST (1).exe
2017-06-21 19:10 - 2017-06-21 19:11 - 00055338 _____ C:\Users\PC1\Downloads\Addition.txt
2017-06-21 19:08 - 2017-06-22 04:49 - 00000000 ____D C:\FRST
2017-06-21 19:08 - 2017-06-21 19:11 - 00041370 _____ C:\Users\PC1\Downloads\FRST.txt
2017-06-21 19:06 - 2017-06-21 19:08 - 01778688 _____ (Farbar) C:\Users\PC1\Downloads\FRST.exe
2017-06-21 19:04 - 2017-06-20 11:05 - 00108392 _____ (Bomgar) C:\Users\PC1\AppData\Local\Z@H!-1580180707491238373-32.tmp
2017-06-21 11:07 - 2017-06-21 11:07 - 00000000 ____D C:\Users\PC1\Downloads\Quarantine
2017-06-21 11:06 - 2017-06-21 11:07 - 03067264 _____ (Nicolas Coolman) C:\Users\PC1\Downloads\zhpfix_2017-6-13-1.exe
2017-06-21 08:26 - 2017-06-21 08:30 - 02789888 _____ C:\Users\PC1\Desktop\zhpcleaner_2017.06.17.100 (1).exe
2017-06-21 08:23 - 2017-06-21 19:05 - 00000761 _____ C:\Users\PC1\Desktop\Boite d’envoi du Cloud d’Orange.lnk
2017-06-21 04:23 - 2017-06-21 04:50 - 00000000 _____ C:\Users\PC1\Documents\premières bulles 2017_AutoSave.gcs
2017-06-20 20:56 - 2017-06-20 20:56 - 00001427 _____ C:\Users\PC1\Desktop\Rmvtrjan - Raccourci.lnk
2017-06-20 20:54 - 2017-06-22 04:41 - 00074656 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-06-20 20:54 - 2017-06-21 11:17 - 00097208 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-06-20 20:54 - 2017-06-21 11:17 - 00039840 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-06-20 20:54 - 2017-06-20 20:54 - 00162208 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-06-20 20:54 - 2017-06-20 20:54 - 00002093 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-06-20 20:54 - 2017-06-20 20:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-06-20 20:54 - 2017-06-20 20:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-06-20 20:54 - 2017-05-25 11:58 - 00059936 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-06-20 20:29 - 2017-06-20 20:53 - 64232976 _____ (Malwarebytes ) C:\Users\PC1\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.141-1.0.2092.exe
2017-06-20 20:22 - 2017-06-20 20:22 - 00001110 _____ C:\Users\PC1\Desktop\adwcleaner_6.047 - Raccourci.lnk
2017-06-20 19:11 - 2017-06-20 19:11 - 04110280 _____ C:\Users\PC1\Downloads\adwcleaner_6.047.exe
2017-06-20 17:10 - 2017-06-21 14:56 - 00000906 _____ C:\Users\PC1\Desktop\ZHPCleaner.lnk
2017-06-20 16:08 - 2017-06-21 14:56 - 00000000 ____D C:\Users\PC1\AppData\Roaming\ZHP
2017-06-20 16:08 - 2017-06-20 17:10 - 00000000 ____D C:\Users\PC1\AppData\Local\ZHP
2017-06-20 16:08 - 2017-06-20 16:08 - 02751872 _____ C:\Users\PC1\Downloads\ZHPDiag3.exe
2017-06-20 16:08 - 2017-06-20 16:08 - 00000899 _____ C:\Users\PC1\Desktop\ZHPDiag.lnk
2017-06-20 15:48 - 2017-06-20 15:50 - 02789888 _____ C:\Users\PC1\Downloads\zhpcleaner_2017.06.17.100.exe
2017-06-20 12:00 - 2017-06-20 12:02 - 22851472 _____ (Malwarebytes ) C:\Users\PC1\Downloads\malwarebytes-anti-malware_2-2-1-1043_fr_215092.exe
2017-06-20 11:24 - 2017-06-20 20:56 - 00000000 ____D C:\Program Files\Trojan Remover
2017-06-20 11:24 - 2017-06-20 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover
2017-06-20 11:24 - 2017-06-20 11:24 - 00000000 ____D C:\Users\PC1\Documents\Simply Super Software
2017-06-20 11:24 - 2017-06-20 11:24 - 00000000 ____D C:\ProgramData\Simply Super Software
2017-06-20 11:23 - 2017-06-20 11:23 - 10197816 _____ (Simply Super Software ) C:\Users\PC1\Downloads\trjsetup695.exe
2017-06-20 11:05 - 2017-06-20 11:05 - 00000000 ____D C:\Users\PC1\AppData\Local\bomgar-scc-cb
2017-06-20 11:03 - 2017-06-20 11:03 - 00000000 ____D C:\Users\PC1\AppData\Local\Deployment
2017-06-20 11:03 - 2017-06-20 11:03 - 00000000 ____D C:\Users\PC1\AppData\Local\Apps\2.0
2017-06-20 10:42 - 2017-06-20 10:42 - 02118713 _____ C:\Users\PC1\Downloads\ERQUY 2017 - Google Photos.html
2017-06-20 10:42 - 2017-06-20 10:42 - 00000000 ____D C:\Users\PC1\Downloads\ERQUY 2017 - Google Photos_files
2017-06-20 08:34 - 2017-06-20 10:53 - 00000000 ____D C:\Users\PC1\Desktop\ERQUY 2017
2017-06-15 19:22 - 2017-06-15 19:35 - 278372024 _____ (GoPro, Inc.) C:\Users\PC1\Downloads\GoPro_Quik-WinInstaller-2.3.0.5383.exe
2017-06-15 18:59 - 2017-06-15 18:59 - 00000000 ____D C:\Users\PC1\Desktop\go pro 2017
2017-06-14 20:12 - 2017-06-14 20:12 - 00000000 ____D C:\Users\PC1\Desktop\photo bulles
2017-06-14 19:15 - 2017-06-14 19:15 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 12:11 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 12:11 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 12:11 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 12:11 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 12:11 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 12:11 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 12:11 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 12:11 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 12:11 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 12:11 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 12:11 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 12:11 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-14 12:11 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-06-14 12:11 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 12:11 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 12:11 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 12:11 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 12:11 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 12:11 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 12:11 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 12:11 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 12:11 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 12:11 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 12:11 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 12:11 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 12:11 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 12:11 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 12:11 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 12:11 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 12:11 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-06-14 12:11 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-06-14 12:11 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 12:10 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 12:10 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 12:10 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 12:10 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 12:10 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 12:10 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 12:10 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 12:10 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 12:10 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 12:10 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 12:10 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 12:10 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 12:10 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 12:10 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 12:10 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 12:10 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 12:10 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 12:10 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 12:10 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 12:10 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 12:10 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 12:10 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 12:10 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 12:10 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 12:10 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-06-14 12:10 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 12:10 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 12:10 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 12:10 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 12:10 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 12:10 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 12:10 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 12:10 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 12:10 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 12:10 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 12:10 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 12:10 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 12:10 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 12:10 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 12:10 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-14 08:59 - 2017-06-14 08:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-06-12 20:56 - 2017-06-12 21:01 - 00000000 ____D C:\Users\PC1\Documents\Picosmos
2017-06-12 14:33 - 2017-06-12 14:33 - 00312896 _____ C:\Users\PC1\Downloads\AM-Document-20170612-135528-0 ameli.pdf
2017-06-12 09:51 - 2017-06-12 09:51 - 00003822 _____ C:\Users\PC1\Desktop\1er bulles projet go pro.gcs
2017-06-12 08:55 - 2017-06-12 08:55 - 00001094 _____ C:\Users\PC1\Desktop\Picosmos Tools.lnk
2017-06-12 08:55 - 2017-06-12 08:55 - 00001094 _____ C:\Users\PC1\Desktop\Picosmos Shows.lnk
2017-06-12 08:55 - 2017-06-12 08:55 - 00000000 ____D C:\Users\PC1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicosmosTools
2017-06-12 08:54 - 2017-06-12 08:55 - 00000000 ____D C:\Program Files\PicosmosTools
2017-06-12 08:54 - 2017-06-12 08:54 - 00000000 ____D C:\Users\PC1\AppData\Roaming\Picosmos
2017-06-12 08:43 - 2017-06-20 15:50 - 00000000 ____D C:\Program Files\FormatFactory
2017-06-12 08:43 - 2017-06-12 08:43 - 00001094 _____ C:\Users\PC1\Desktop\Format Factory.lnk
2017-06-12 08:43 - 2017-06-12 08:43 - 00000000 ____D C:\Users\PC1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2017-06-12 08:39 - 2017-06-12 08:42 - 47616432 _____ (Free Time Co., Ltd) C:\Users\PC1\Downloads\format-factory_4-0-0-0_fr_223920.exe
2017-06-11 17:19 - 2017-06-15 19:47 - 00324141 _____ C:\Users\PC1\Documents\premières bulles 2017.gcs
2017-06-11 17:08 - 2017-06-21 05:09 - 00000000 ____D C:\Users\PC1\Desktop\1er bulles
2017-06-08 09:25 - 2017-06-08 09:34 - 00518464 _____ (Orange) C:\Users\PC1\Downloads\Installateur_notificationmail (1).exe
2017-06-06 08:14 - 2017-06-06 08:24 - 09551280 _____ (Piriform Ltd) C:\Users\PC1\Downloads\ccleaner_5-30-6065_fr_14492.exe
2017-05-31 15:14 - 2017-05-31 15:15 - 00000000 ____D C:\Users\PC1\Desktop\shaker 2017
2017-05-23 18:37 - 2017-05-23 18:36 - 00765704 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2017-05-23 18:37 - 2017-05-23 18:36 - 00483736 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys
2017-05-23 18:37 - 2017-05-23 18:36 - 00280928 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2017-05-23 18:37 - 2017-05-23 18:36 - 00109056 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2017-05-23 18:37 - 2017-05-23 18:36 - 00063280 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2017-05-23 18:37 - 2017-05-23 18:36 - 00035264 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgHwid.sys
2017-05-23 18:37 - 2017-05-23 18:35 - 00135872 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbdiskx.sys
2017-05-23 18:36 - 2017-05-23 18:36 - 00331896 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2017-05-23 18:29 - 2017-06-14 08:59 - 00000925 _____ C:\Users\Public\Desktop\AVG.lnk

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-06-22 04:47 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-22 04:47 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-21 19:16 - 2016-07-06 22:22 - 00000000 ____D C:\Users\PC1\AppData\Roaming\Skype
2017-06-21 19:07 - 2016-09-30 09:48 - 00000000 ____D C:\Users\PC1
2017-06-21 19:04 - 2016-07-01 09:30 - 00000000 ____D C:\Users\PC1\AppData\Local\OrangeCloud
2017-06-21 14:55 - 2016-04-10 17:43 - 00000000 ____D C:\AdwCleaner
2017-06-21 14:19 - 2016-07-03 22:52 - 00000000 ____D C:\Users\PC1\Desktop\photo
2017-06-21 11:17 - 2016-09-30 10:08 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-21 11:17 - 2015-03-04 15:34 - 00220576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-06-21 11:16 - 2016-07-16 04:22 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-06-21 04:58 - 2016-08-16 22:05 - 00000000 ____D C:\Users\PC1\Desktop\luciole
2017-06-21 03:37 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-06-20 20:54 - 2015-03-04 15:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-06-20 19:29 - 2017-05-07 09:47 - 00000000 ____D C:\Users\PC1\Documents\Boite d’envoi de munoz-j
2017-06-20 18:14 - 2016-09-30 09:40 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-06-20 16:04 - 2016-09-30 09:47 - 02173020 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-06-20 16:04 - 2016-07-16 19:15 - 00832222 _____ C:\WINDOWS\system32\perfh00C.dat
2017-06-20 16:04 - 2016-07-16 19:15 - 00188434 _____ C:\WINDOWS\system32\perfc00C.dat
2017-06-20 15:40 - 2015-09-08 21:08 - 00000441 _____ C:\WINDOWS\BRWMARK.INI
2017-06-20 15:40 - 2015-09-08 21:08 - 00000034 _____ C:\WINDOWS\system32\BD2070N.DAT
2017-06-20 15:38 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2017-06-20 14:00 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache
2017-06-20 11:44 - 2015-09-02 20:29 - 00000000 ____D C:\ProgramData\TEMP
2017-06-20 11:32 - 2015-09-26 09:50 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-06-20 11:01 - 2015-04-27 15:22 - 00000000 __SHD C:\Users\PC1\AppData\LocalLow\EmieUserList
2017-06-20 11:01 - 2015-04-27 15:21 - 00000000 __SHD C:\Users\PC1\AppData\LocalLow\EmieSiteList
2017-06-20 11:01 - 2015-04-27 15:21 - 00000000 __SHD C:\Users\PC1\AppData\Local\EmieUserList
2017-06-20 11:01 - 2015-04-27 15:21 - 00000000 __SHD C:\Users\PC1\AppData\Local\EmieSiteList
2017-06-20 09:59 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-06-15 18:11 - 2015-04-11 12:02 - 00000000 ____D C:\Users\PC1\AppData\Roaming\vlc
2017-06-15 18:06 - 2016-08-16 23:35 - 00000000 ____D C:\Users\PC1\AppData\Roaming\dvdcss
2017-06-14 20:04 - 2015-08-18 18:59 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-14 19:17 - 2016-09-30 09:40 - 00340992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-14 19:17 - 2015-03-28 10:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-06-14 19:15 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-14 19:15 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-14 16:49 - 2015-08-18 19:11 - 00002437 _____ C:\Users\PC1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-14 16:49 - 2015-08-18 19:11 - 00000000 ___RD C:\Users\PC1\OneDrive
2017-06-14 12:33 - 2015-03-24 02:40 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-14 12:27 - 2015-03-28 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-14 12:27 - 2015-03-24 02:40 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-14 12:24 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-13 10:26 - 2015-05-30 11:34 - 00000000 ____D C:\Users\PC1\AppData\Local\Avg
2017-06-13 10:26 - 2015-03-23 20:37 - 00000000 ____D C:\ProgramData\MFAData
2017-06-12 21:19 - 2017-05-03 16:10 - 00000000 ____D C:\Users\PC1\Documents\Photos Les Chouchous
2017-06-09 09:35 - 2016-10-12 12:22 - 00000000 ____D C:\Users\PC1\Desktop\vente leboncoin
2017-06-08 09:47 - 2015-09-26 09:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orange
2017-06-08 09:47 - 2015-09-26 09:52 - 00000000 ____D C:\ProgramData\Orange
2017-06-06 08:52 - 2016-09-30 10:39 - 00000000 ___DC C:\WINDOWS\Panther
2017-06-03 08:36 - 2016-07-16 10:31 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-06-03 08:36 - 2016-07-16 10:31 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-05-31 15:01 - 2017-05-03 15:45 - 00000000 ____D C:\Users\PC1\Documents\Musique
2017-05-23 20:44 - 2015-10-25 11:47 - 00000000 ____D C:\ProgramData\Avg
2017-05-23 18:39 - 2016-07-16 10:29 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-05-23 18:38 - 2015-11-05 13:25 - 00000000 ____D C:\Users\PC1\AppData\Roaming\AVG
2017-05-23 18:30 - 2015-03-23 20:39 - 00000000 ____D C:\Program Files\AVG

==================== Fichiers à la racine de certains dossiers =======

2015-05-25 21:40 - 2017-02-20 11:17 - 0029184 _____ () C:\Users\PC1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-06-21 19:04 - 2017-06-20 11:05 - 0108392 _____ (Bomgar) C:\Users\PC1\AppData\Local\Z@H!-1580180707491238373-32.tmp
2015-05-04 17:25 - 2015-05-04 17:25 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-09-30 09:42 - 2016-09-30 09:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-06-12 10:14

==================== Fin de FRST.txt ============================