Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x86) Version: 18-08-2017
Exécuté par Unknown_2015 (administrateur) sur UNKNOWN_2015-PC (18-08-2017 22:35:27)
Exécuté depuis C:\Users\Unknown_2015\Desktop
Profils chargés: Unknown_2015 (Profils disponibles: Unknown_2015)
Platform: Microsoft Windows 7 Édition Starter  Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(McAfee, Inc.) C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
(hxxp://winaero.com/) C:\Program Files\winaero.com\Personalization Panel DWM Controller\persdwmsrv.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\McAfee\SiteAdvisor\saUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
() C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(SlySoft, Inc.) C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Facebook) C:\Users\Unknown_2015\AppData\Local\Facebook\Games\FacebookGameroom.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
() C:\On-ScreenKeyboardPortable\App\osk\On-ScreenKeyboard.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(BitTorrent Inc.) C:\Users\Unknown_2015\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Unknown_2015\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(BitTorrent Inc.) C:\Users\Unknown_2015\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM\...\Run: [CloneCDTray] => C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [718688 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKU\S-1-5-21-2866674283-3230663183-555734474-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-06-01] (Nero AG)
HKU\S-1-5-21-2866674283-3230663183-555734474-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3964984 2016-09-07] (Tonec Inc.)
HKU\S-1-5-21-2866674283-3230663183-555734474-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-12-04] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-19]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Unknown_2015\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-08-01]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Unknown_2015\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{60AC6E5F-E2FC-4873-A0FD-FCF2A25992BA}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{83173EF6-7D3E-4BF3-9086-AC077F6B1188}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B90950AD-B025-4405-99C6-D1BD353E0965}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.bureau108.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.bureau108.fr/
HKU\S-1-5-21-2866674283-3230663183-555734474-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.bureau108.fr/
HKU\S-1-5-21-2866674283-3230663183-555734474-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.bureau108.fr/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2866674283-3230663183-555734474-1000 -> DefaultScope {910B0E08-22E8-4D94-9A35-215BC04329A5} URL = hxxp://search.bureau108.fr/s.php?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2866674283-3230663183-555734474-1000 -> {910B0E08-22E8-4D94-9A35-215BC04329A5} URL = hxxp://search.bureau108.fr/s.php?q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files\McAfee\SiteAdvisor\saffplg.xpi [2017-07-20]
FF HKU\S-1-5-21-2866674283-3230663183-555734474-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Unknown_2015\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Unknown_2015\AppData\Roaming\IDM\idmmzcc5 [2017-08-18] [non signé]
FF HKU\S-1-5-21-2866674283-3230663183-555734474-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2866674283-3230663183-555734474-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Unknown_2015\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)

Chrome: 
=======
CHR Profile: C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default [2017-08-18]
CHR Extension: (AdBlock) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-11]
CHR Extension: (IDM Integration Module) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-07-14]
CHR Extension: (MultiLogin) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\nknfhhmhoflkcijaodalbncnmidocced [2017-08-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-23]
CHR Extension: (Chrome Media Router) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-04]
CHR Extension: (Dimensional) - C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnkncnnbocdlclffjijnblpdekojphcj [2017-07-28]
CHR Profile: C:\Users\Unknown_2015\AppData\Local\Google\Chrome\User Data\System Profile [2017-05-01]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2017-04-07]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-06-30] (Freemake) [Fichier non signé]
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2960160 2016-04-22] (IObit)
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3398608 2017-05-09] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [462496 2017-07-25] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [321768 2017-06-30] (McAfee, Inc.)
R2 persdwmsrv; C:\Program Files\winaero.com\Personalization Panel DWM Controller\persdwmsrv.exe [8192 2012-04-07] (hxxp://winaero.com/) [Fichier non signé]
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 Themes; C:\Windows\system32\themeservice.dll [37376 2017-08-01] (Microsoft Corporation) [Fichier non signé]
S3 uSHAREitSvc; C:\Program Files\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-01-20] (SHAREit Technologies Co.Ltd)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [206312 2016-04-01] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146024 2016-04-01] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [111040 2016-04-01] (ESET)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [35112 2014-02-10] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2014-12-20] (Elaborate Bytes AG)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [152728 2016-04-01] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44608 2016-04-01] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [71488 2016-04-01] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59936 2017-08-15] ()
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [162240 2017-08-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [85400 2017-08-18] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [40352 2017-08-18] (Malwarebytes)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [40352 2017-08-18] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [221600 2017-08-18] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65824 2017-08-18] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [65824 2017-08-18] (Malwarebytes)
R3 mfesapsn; C:\Program Files\McAfee\SiteAdvisor\mfesapsn.sys [88448 2017-02-14] (McAfee, Inc.)
S3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0093.sys [37920 2016-01-02] (SoftEther Corporation)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\DRTWlanU.sys [2911960 2014-07-30] (Realtek Semiconductor Corporation )
S3 SEE; C:\Windows\System32\drivers\see.sys [55328 2016-01-02] (SoftEther Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [146048 2016-07-22] (Samsung Electronics Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-12-12] ()
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [128704 2016-08-16] (MBB)
S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [465408 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-08-18 22:35 - 2017-08-18 22:37 - 000016557 _____ C:\Users\Unknown_2015\Desktop\FRST.txt
2017-08-18 22:25 - 2017-08-18 22:26 - 001792512 _____ (Farbar) C:\Users\Unknown_2015\Desktop\FRST.exe
2017-08-18 16:18 - 2017-08-18 16:18 - 000036598 _____ C:\Users\Unknown_2015\Downloads\PINK FLOYD - Discography (Discovery) 2011 Remasters [Bubanee]-[rarbg.to].torrent
2017-08-18 09:20 - 2017-08-18 09:20 - 000021992 _____ C:\Users\Unknown_2015\Downloads\4DF48957B95E892265CC632FE6025A5AA744C36D.torrent
2017-08-17 22:20 - 2017-08-17 22:20 - 000051934 _____ C:\Users\Unknown_2015\Downloads\[zooqle.com] Great White - Дискография (1984-2012) MP3.torrent
2017-08-17 01:42 - 2017-08-17 01:42 - 000001354 _____ C:\Users\Unknown_2015\Desktop\Hein Recovery 1.8.lnk
2017-08-17 01:42 - 2017-08-17 01:42 - 000001279 _____ C:\Users\Unknown_2015\Desktop\Hein 4.5.1.lnk
2017-08-16 16:44 - 2017-08-16 16:44 - 000004002 _____ C:\Users\Unknown_2015\Downloads\VA - Ibiza Trance 2017 (2017) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-16 07:39 - 2017-08-16 07:39 - 000106828 _____ C:\Users\Unknown_2015\Downloads\C9583D6B970855B0C088EE12C4A7744F83C96162.torrent
2017-08-16 07:14 - 2017-08-16 07:14 - 000001001 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-08-16 07:14 - 2017-08-16 07:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-08-16 07:14 - 2017-08-16 07:14 - 000000000 ____D C:\Program Files\RogueKiller
2017-08-16 07:08 - 2017-08-16 07:13 - 035688304 _____ (Adlice Software ) C:\Users\Unknown_2015\Downloads\RogueKiller_setup_ref3.exe
2017-08-16 05:23 - 2017-08-16 05:23 - 000025115 _____ C:\Users\Unknown_2015\Downloads\Battlefield-2-Special-Forces-Addon--[DVD]-(Torrent) (1).torrent
2017-08-16 04:55 - 2017-08-16 04:55 - 000025115 _____ C:\Users\Unknown_2015\Downloads\Battlefield-2-Special-Forces-Addon--[DVD]-(Torrent).torrent
2017-08-16 04:10 - 2017-08-16 04:10 - 000048200 _____ C:\Users\Unknown_2015\Downloads\e856d261-ca16-4b1d-b652-3a0759df2537.tmp
2017-08-15 23:35 - 2017-08-15 23:39 - 014889849 _____ C:\Users\Unknown_2015\Desktop\Mon film.mp4
2017-08-15 23:27 - 2017-08-15 23:29 - 011023944 _____ C:\Users\Unknown_2015\Desktop\videoplayback.WEBM
2017-08-15 20:49 - 2017-08-18 04:09 - 000085400 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-08-15 20:49 - 2017-08-15 20:49 - 000002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-15 20:49 - 2017-08-15 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-15 20:48 - 2017-08-15 22:45 - 000059936 _____ C:\Windows\system32\Drivers\mbae.sys
2017-08-15 20:48 - 2017-08-15 20:48 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-15 20:33 - 2017-08-15 20:43 - 064025992 _____ (Malwarebytes ) C:\Users\Unknown_2015\Downloads\mb3-setup-35891.35891-3.1.2.1733-1.0.139-1.0.2060.exe
2017-08-15 20:17 - 2017-08-15 20:18 - 008185288 _____ (Malwarebytes) C:\Users\Unknown_2015\Desktop\adwcleaner_7.0.1.0.exe
2017-08-15 19:57 - 2017-08-15 21:19 - 000000000 ____D C:\Users\Unknown_2015\Desktop\REPORTS
2017-08-15 19:53 - 2017-08-15 19:55 - 000005600 _____ C:\Users\Unknown_2015\Desktop\Rkill.txt
2017-08-15 19:52 - 2017-08-15 19:52 - 000000055 _____ C:\Users\Unknown_2015\Desktop\.txt7sb.txt
2017-08-15 19:29 - 2017-08-15 19:29 - 001780224 _____ (Bleeping Computer, LLC) C:\Users\Unknown_2015\Desktop\Non confirmé 862896.exe
2017-08-15 19:26 - 2017-08-15 19:26 - 000000000 ____D C:\Users\Unknown_2015\Desktop\RKOURSI
2017-08-15 17:13 - 2017-08-15 17:14 - 000000000 ____D C:\Users\Unknown_2015\Desktop\FORZ M4
2017-08-15 14:42 - 2017-08-16 15:26 - 000000000 ____D C:\Users\Unknown_2015\Documents\kdob
2017-08-15 05:46 - 2017-08-15 05:46 - 000017632 _____ C:\Users\Unknown_2015\Downloads\VA - Passion Dance Hit 90s (2016) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-15 04:41 - 2017-08-15 04:41 - 000005366 _____ C:\Users\Unknown_2015\Downloads\VA - Eletro House Music Life July (2017) MP3 [320 KBPS]-[rarbg.to].torrent
2017-08-14 19:47 - 2017-08-17 11:29 - 000000055 _____ C:\Users\Unknown_2015\Desktop\TO CLEN PCCC.txt
2017-08-14 18:24 - 2017-08-14 18:24 - 000010470 _____ C:\Users\Unknown_2015\Downloads\VA-Dance Hits Collection 90’s. Vol.2 (2015) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-14 15:16 - 2015-07-17 10:06 - 158584196 _____ C:\Users\Unknown_2015\Desktop\startimes_Mr oussama_Midtown Madness 2.rar
2017-08-14 13:44 - 2017-08-14 13:44 - 000192411 _____ C:\Users\Unknown_2015\Downloads\42255-save-gta-5-100-and-1-billion-xbox-360.zip
2017-08-14 11:30 - 2017-08-14 11:30 - 000022833 _____ C:\Users\Unknown_2015\Downloads\The Best Dance Hits Of 90s (2015) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-14 11:28 - 2017-08-14 11:28 - 000018847 _____ C:\Users\Unknown_2015\Downloads\VA - Disco Dance 90s (2016) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-14 11:23 - 2017-08-14 11:23 - 000019239 _____ C:\Users\Unknown_2015\Downloads\VA - Classic Magic Dance Hits [1990]-[rarbg.to].torrent
2017-08-14 11:18 - 2017-08-14 11:19 - 000025509 _____ C:\Users\Unknown_2015\Downloads\Maxi Dance Sensation - Vol  01 (1990)-[rarbg.to].torrent
2017-08-14 06:44 - 2017-08-14 06:44 - 000017459 _____ C:\Users\Unknown_2015\Downloads\VA - Vocal Trance vol.4 (2017) MP3 [320 KBPS]-[rarbg.to].torrent
2017-08-14 05:48 - 2017-08-14 05:48 - 000006962 _____ C:\Users\Unknown_2015\Downloads\VA - Total Trance Selections Vol.05 (2017) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-14 05:39 - 2017-08-14 19:06 - 000000048 _____ C:\Users\Unknown_2015\Desktop\TGGGGGGGGGGGGGGGGGGGGGGGGGG.txt
2017-08-14 04:47 - 2017-08-14 04:47 - 000005840 _____ C:\Users\Unknown_2015\Downloads\VA-Progress To Goa Vol 2 Progressive Psychedelic Trance By Random And Dr Spook-WEB-2017-SFH-[rarbg.to].torrent
2017-08-13 19:55 - 2017-08-13 19:55 - 000005954 _____ C:\Users\Unknown_2015\Downloads\VA-Trance Summer Essentials 2017-(EDMC177)-WEB-2017-iHR-[rarbg.to].torrent
2017-08-13 18:02 - 2017-08-13 18:02 - 000006717 _____ C:\Users\Unknown_2015\Downloads\VA - Tech Trance Essentials Vol.8 (2017) MP3 [320 kbps]-[rarbg.to].torrent
2017-08-13 11:16 - 2017-08-13 11:16 - 000033962 _____ C:\Users\Unknown_2015\Downloads\4100ec3e-30a0-40e3-806e-189038bcf2c7.tmp
2017-08-12 14:10 - 2017-08-12 14:10 - 000023364 _____ C:\Users\Unknown_2015\Downloads\Eros Ramazzotti  - Eros 30 [3 CD Deluxe Edition]   2014-[rarbg.to].torrent
2017-08-12 14:09 - 2017-08-12 14:09 - 000069039 _____ C:\Users\Unknown_2015\Downloads\Eros Ramazzotti - Discography-[rarbg.to].torrent
2017-08-12 14:04 - 2017-08-12 14:04 - 000031287 _____ C:\Users\Unknown_2015\Downloads\[limetorrents.cc]Eros.Ramazzotti.-.Discografia[mp3].torrent
2017-08-12 14:04 - 2017-08-12 14:04 - 000031287 _____ C:\Users\Unknown_2015\Downloads\[limetorrents.cc]Eros.Ramazzotti.-.Discografia[mp3] (1).torrent
2017-08-12 13:58 - 2017-08-12 13:58 - 000025478 _____ C:\Users\Unknown_2015\Downloads\eros-ramazzotti-eros-30-deluxe-version-2014.torrent
2017-08-12 13:57 - 2017-08-12 13:57 - 000023817 _____ C:\Users\Unknown_2015\Downloads\eros-ramazzotti-e2-2007.torrent
2017-08-11 22:48 - 2017-08-11 22:49 - 000000000 ____D C:\Users\Unknown_2015\Downloads\PRT3
2017-08-10 12:27 - 2017-08-10 12:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link
2017-08-10 12:26 - 2017-08-10 12:26 - 000000000 ____D C:\Program Files\D-Link
2017-08-09 17:36 - 2017-08-15 14:43 - 000000000 ____D C:\Users\Unknown_2015\Documents\ll in one
2017-08-08 18:56 - 2017-08-08 18:56 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2017-08-08 18:32 - 2017-08-08 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2017-08-08 18:32 - 2017-08-08 18:32 - 000000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2017-08-02 09:02 - 2017-08-02 09:02 - 000147312 _____ C:\Users\Unknown_2015\AppData\Local\GDIPFONTCACHEV1.DAT
2017-08-01 21:26 - 2017-08-01 21:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-08-01 21:26 - 2017-08-01 21:26 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-08-01 09:55 - 2017-08-01 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personalization Panel
2017-08-01 09:55 - 2017-08-01 09:55 - 000000000 ____D C:\Program Files\winaero.com
2017-08-01 09:55 - 2017-08-01 09:55 - 000000000 ____D C:\Program Files\Personalization Panel
2017-08-01 09:42 - 2017-08-01 09:42 - 000000000 ____D C:\ProgramData\IsolatedStorage
2017-08-01 09:41 - 2017-08-01 21:52 - 000000000 ___HD C:\W7P_Backups
2017-08-01 09:40 - 2017-08-01 22:05 - 000000000 ____D C:\SkinPack
2017-08-01 08:58 - 2009-07-14 02:16 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll.backup
2017-08-01 08:57 - 2010-11-20 13:21 - 002755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll.backup
2017-08-01 08:57 - 2009-07-14 02:16 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll.backup
2017-08-01 01:20 - 2017-08-01 01:21 - 000000000 ____D C:\On-ScreenKeyboardPortable
2017-07-30 20:58 - 2017-07-30 21:24 - 000000000 ____D C:\Users\Unknown_2015\Desktop\DUMP 7100HD
2017-07-24 22:53 - 2017-07-24 22:53 - 000002254 _____ C:\Users\Unknown_2015\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2017-07-24 22:48 - 2017-07-24 22:53 - 000000000 ____D C:\Users\Unknown_2015\AppData\Local\chromium
2017-07-24 22:42 - 2017-07-24 23:26 - 000000000 ____D C:\Users\Unknown_2015\AppData\Local\{78C24E9E-5C6A-2226-31F2-07CE159AFB56}
2017-07-22 15:14 - 2017-07-22 15:14 - 000000000 ___HD C:\$AV_ASW
2017-07-20 22:29 - 2017-07-20 22:29 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\PowerISO
2017-07-20 02:09 - 2017-07-20 02:09 - 000000000 ____D C:\Users\Unknown_2015\Documents\Nouveau dossier
2017-07-19 13:54 - 2017-07-19 13:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-07-19 13:54 - 2017-07-19 13:54 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2017-07-19 13:25 - 2017-07-20 22:29 - 000000000 ____D C:\Users\Unknown_2015\Documents\MEGAsync Downloads
2017-07-19 03:31 - 2017-08-14 05:24 - 000000028 _____ C:\Users\Unknown_2015\Desktop\Nouveau document texte.txt

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-08-18 22:37 - 2015-11-09 03:55 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\uTorrent
2017-08-18 22:35 - 2017-04-28 11:28 - 000000000 ____D C:\FRST
2017-08-18 22:27 - 2015-11-05 19:47 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\vlc
2017-08-18 21:36 - 2009-07-14 05:34 - 000025344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-08-18 21:36 - 2009-07-14 05:34 - 000025344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-08-18 20:39 - 2017-01-20 03:49 - 000065824 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-08-18 19:10 - 2015-11-05 19:42 - 000006260 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-18 19:10 - 2009-07-14 09:39 - 000903490 _____ C:\Windows\system32\perfh00C.dat
2017-08-18 19:10 - 2009-07-14 09:39 - 000307930 _____ C:\Windows\system32\perfc00C.dat
2017-08-18 16:18 - 2015-11-18 23:57 - 000000000 ____D C:\Users\Unknown_2015\Documents\Torrent
2017-08-18 14:25 - 2016-12-12 23:31 - 000000000 ____D C:\Users\Unknown_2015\AppData\Local\CrashDumps
2017-08-18 10:25 - 2015-11-08 22:31 - 000000000 ____D C:\Program Files\Opera
2017-08-18 04:43 - 2015-11-18 23:57 - 000000000 ____D C:\Users\Unknown_2015\AppData\LocalLow\uTorrent
2017-08-18 04:37 - 2015-11-07 21:36 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-18 04:37 - 2015-11-07 21:36 - 000002127 ____H C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-18 04:09 - 2017-01-20 03:51 - 000221600 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-18 04:09 - 2017-01-20 03:49 - 000040352 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-08-18 04:08 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-17 23:33 - 2017-04-20 03:55 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\DMCache
2017-08-15 23:30 - 2015-12-02 03:07 - 000000000 ____D C:\Users\Unknown_2015\AppData\Local\Windows Live
2017-08-15 22:45 - 2017-01-20 03:49 - 000162240 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-08-15 20:48 - 2016-01-19 22:31 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 20:22 - 2016-11-30 22:06 - 000000000 ____D C:\AdwCleaner
2017-08-15 19:49 - 2017-01-21 10:48 - 000000000 ____D C:\ProgramData\Avira
2017-08-15 19:49 - 2017-01-17 14:05 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-12 12:40 - 2009-07-14 05:53 - 000032482 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-08-10 12:26 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2017-08-09 17:38 - 2016-05-31 22:16 - 000000000 ____D C:\Users\Unknown_2015\Documents\Important Word files
2017-08-08 18:46 - 2015-12-10 16:07 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-08-08 18:46 - 2015-12-10 16:07 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-08-08 18:45 - 2015-11-07 19:38 - 000000000 ____D C:\Windows\system32\Macromed
2017-08-05 20:43 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\system32\NDF
2017-08-02 09:01 - 2016-05-06 13:48 - 000537648 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-01 21:53 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\Cursors
2017-08-01 08:58 - 2009-07-14 00:40 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2017-08-01 08:57 - 2015-12-03 12:41 - 002755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-08-01 08:57 - 2009-07-14 00:39 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2017-08-01 02:21 - 2017-04-19 20:52 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\IDM
2017-08-01 00:06 - 2017-06-26 08:42 - 000000000 ____D C:\Users\Unknown_2015\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2017-07-31 08:01 - 2016-12-31 18:44 - 000000000 ____D C:\ProgramData\SP_FT_Logs
2017-07-28 22:41 - 2017-03-25 20:48 - 000000000 ____D C:\Program Files\McAfee
2017-07-25 16:19 - 2017-07-13 17:47 - 000000000 ____D C:\ProgramData\AVAST Software
2017-07-20 23:09 - 2016-12-27 19:00 - 000000041 ___SH C:\ProgramData\.zreglib
2017-07-20 22:35 - 2017-07-14 13:33 - 000000000 ____D C:\Users\Unknown_2015\Desktop\WWE 2K15
2017-07-19 19:58 - 2015-11-05 19:39 - 000000000 ____D C:\Users\Unknown_2015
2017-07-19 13:54 - 2016-07-03 13:42 - 000000000 ____D C:\Program Files\McAfee Security Scan
2017-07-19 13:24 - 2015-11-08 18:59 - 000000000 ____D C:\Users\Unknown_2015\AppData\Local\MEGAsync

==================== Fichiers à la racine de certains dossiers =======

2015-11-08 22:32 - 2015-11-08 22:32 - 000000353 _____ () C:\Users\Unknown_2015\AppData\Roaming\imagetuner.ini
2016-03-06 17:03 - 2016-04-17 16:56 - 000005632 _____ () C:\Users\Unknown_2015\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-12-27 19:00 - 2017-07-20 23:09 - 000000041 ___SH () C:\ProgramData\.zreglib
2016-03-24 09:41 - 2016-03-24 09:41 - 000004927 _____ () C:\ProgramData\mtbjfghn.xbe

Certains fichiers dans TEMP:
====================
2017-08-14 13:51 - 2017-08-18 14:29 - 000003584 _____ () C:\Users\Unknown_2015\AppData\Local\Temp\dateinj01.dll
2017-08-16 07:15 - 2016-05-11 04:00 - 001289096 _____ (Microsoft Corporation) C:\Users\Unknown_2015\AppData\Local\Temp\dllnt_dump.dll
2017-08-13 14:25 - 2017-08-18 14:29 - 000425624 _____ (Sysinternals - www.sysinternals.com) C:\Users\Unknown_2015\AppData\Local\Temp\hd.dll
2017-08-14 13:51 - 2017-08-18 14:29 - 005908480 _____ (The PHP Group) C:\Users\Unknown_2015\AppData\Local\Temp\Helper.dll
2017-08-14 13:51 - 2017-08-18 14:29 - 001170432 _____ ( ) C:\Users\Unknown_2015\AppData\Local\Temp\Msserv32.exe
2017-08-13 14:25 - 2017-08-18 14:29 - 000027232 _____ () C:\Users\Unknown_2015\AppData\Local\Temp\rad.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-08-11 13:42

==================== Fin de FRST.txt ============================