Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017 Exécuté par Francois (administrateur) sur FRANCOIS-PC (04-09-2017 19:40:54) Exécuté depuis C:\Users\Francois\Desktop Profils chargés: Francois (Profils disponibles: Francois) Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe (Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe () C:\Program Files (x86)\No-IP\ducservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxEM.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe (Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe () C:\Program Files (x86)\No-IP\DUC40.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe (Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe (Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [602968 2015-12-07] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830232 2016-03-08] (Conexant Systems, Inc.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112104 2017-06-19] (VMware, Inc.) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-08-28] (Valve Corporation) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [PhotoMasterImportAgent] => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [675608 2016-04-22] (CyberLink Corp.) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [NoIPDUCv4] => C:\Program Files (x86)\No-IP\DUC40.exe [347648 2015-07-21] () HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1248848 2017-08-31] (CyberGhost S.A.) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-02] (Disc Soft Ltd) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27784672 2017-06-27] (Skype Technologies S.A.) HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] () HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\MountPoints2: {2796fb66-203c-11e7-af3e-ac2b6ecce4de} - "H:\Lenovo_Suite.exe" ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{053aa05a-ae84-4f83-9099-9aca1009e44d}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{65e6dfa3-ddbd-49c2-8239-26b0cf32077f}: [DhcpNameServer] 192.168.44.1 Tcpip\..\Interfaces\{e1be80d5-ee13-458c-9c0b-9e85bc4eb53d}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709369465&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709372771&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709377141&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll => Pas de fichier BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_112\bin\ssv.dll [2016-12-30] (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL => Pas de fichier BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL => Pas de fichier BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_112\bin\jp2ssv.dll [2016-12-30] (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL Pas de fichier Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-1288880404-4155176319-3141220653-1001 -> FireFox: ======== FF DefaultProfile: cuece6iw.default FF ProfilePath: C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default [2017-09-04] FF Extension: (Avira Browser Safety) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\abs@avira.com.xpi [2017-07-20] FF Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-19] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-06-03] () FF Plugin: @java.com/DTPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\dtplugin\npDeployJava1.dll [2016-12-30] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\plugin2\npjp2.dll [2016-12-30] (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-06-03] () FF Plugin-x32: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-15] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2017-05-15] (Oracle Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [Pas de fichier] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi.dll [2017-02-03] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin64 -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi-x64.dll [2017-02-03] (Skype Technologies S.A.) Chrome: ======= CHR DefaultProfile: Profile 1 CHR HomePage: Profile 1 -> hxxps://www.google.fr/ CHR StartupUrls: Profile 1 -> "hxxps://www.google.fr/" CHR DefaultSearchURL: Profile 1 -> hxxps://mail.google.com/mail/u/0/#inbox CHR Session Restore: Profile 1 -> est activé. CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default [2017-07-07] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-07] CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-07] CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-04-25] CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-09-04] CHR Extension: (MEGA) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2017-08-20] CHR Extension: (Appel Skype) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-07-07] CHR Extension: (Adblock Plus) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13] CHR Extension: (GeForce Experience Stream Client) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gjljknijpnfibppaijefibndmiabonep [2017-08-26] CHR Extension: (Gamekit) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jeedakojomhhndjiacgkhlkknflflchl [2017-07-07] CHR Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2017-07-07] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22] CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-07-06] CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13] CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-05-23] CHR Extension: (Google Slides) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-01] CHR Extension: (Google Docs) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-01] CHR Extension: (Google Drive) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-01] CHR Extension: (YouTube) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-01] CHR Extension: (Google Sheets) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-01] CHR Extension: (Google Docs hors connexion) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-03] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-16] CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-05-10] CHR Extension: (Gmail) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-01] CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-14] CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\System Profile [2017-07-07] ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated) R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.) R3 cphs; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe [301504 2017-01-04] (Intel Corporation) S3 cplspcon; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHDCPSvc.exe [480192 2017-01-04] (Intel Corporation) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-02] (Disc Soft Ltd) S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [107520 2016-09-15] (Freemake) [Fichier non signé] S4 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2016-09-15] (Ellora Assets Corp.) [Fichier non signé] S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation) S4 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [165616 2015-11-12] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe [341952 2017-01-04] (Intel Corporation) R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [57160 2017-06-05] (Lenovo Group Limited) S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes) R2 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [12288 2015-07-20] () [Fichier non signé] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Fichier non signé] R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project) S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-17] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-17] (Electronic Arts) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 SAService; C:\WINDOWS\system32\SAsrv.exe [431960 2015-09-15] (Conexant Systems, Inc.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé] R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267352 2017-03-23] (Synaptics Incorporated) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH) R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12482024 2017-06-19] () S3 wampapache; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [22016 2014-05-01] (Apache Software Foundation) [Fichier non signé] S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [10959360 2014-05-01] () [Fichier non signé] R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation) S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-25] () S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-25] () R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-02-05] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-02-05] (Disc Soft Ltd) S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-04-11] (Huawei Technologies Co., Ltd.) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [300304 2015-11-13] (Intel Corporation) R3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igdkmd64.sys [11039680 2017-01-04] (Intel Corporation) R2 memudrv; C:\Program Files (x86)\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation) R1 MpKsl6957c223; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{843D48E6-E44F-4E05-8BCE-6E21E213856C}\MpKsl6957c223.sys [44928 2017-09-04] (Microsoft Corporation) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7626488 2017-03-09] (Intel Corporation) R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_984d7ebc1a4a35bd\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation) S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-12-22] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [408280 2015-10-15] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3094272 2015-12-30] (Realtek Semiconductor Corp.) S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [11376 2013-09-17] () [Fichier non signé] R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-03-01] (Anchorfree Inc.) R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [196040 2017-07-27] (Oracle Corporation) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206976 2017-07-27] (Oracle Corporation) R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.) R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [38376 2017-05-05] (VMware, Inc.) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 xhunter1; C:\WINDOWS\xhunter1.sys [37344 2017-08-31] (Wellbia.com Co., Ltd.) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-04 19:40 - 2017-09-04 19:44 - 000027621 _____ C:\Users\Francois\Desktop\FRST.txt 2017-09-04 19:40 - 2017-09-04 19:40 - 000000000 ____D C:\FRST 2017-09-04 19:39 - 2017-09-04 19:40 - 002395648 _____ (Farbar) C:\Users\Francois\Desktop\FRST64.exe 2017-09-04 15:04 - 2017-09-04 15:04 - 000002214 _____ C:\Users\Francois\Desktop\ZHPFixReport.txt 2017-09-04 14:43 - 2017-09-04 14:44 - 003067264 _____ (Nicolas Coolman) C:\Users\Francois\Desktop\zhpfix_2017-6-13-1.exe 2017-09-04 11:30 - 2017-09-04 15:33 - 000181564 _____ C:\Users\Francois\Desktop\ZHPDiag.txt 2017-09-04 11:11 - 2017-09-04 11:11 - 000004141 _____ C:\Users\Francois\Desktop\Malwarebytes.txt 2017-09-04 11:03 - 2017-09-04 11:04 - 000000000 ____D C:\Users\Francois\Desktop\Your lie in april 2017-09-04 10:47 - 2017-09-04 15:07 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-09-04 10:47 - 2017-09-04 15:07 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-09-04 10:47 - 2017-09-04 15:06 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-09-04 10:47 - 2017-09-04 11:17 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-09-04 10:47 - 2017-09-04 11:16 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-09-04 10:47 - 2017-09-04 10:47 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-09-04 10:47 - 2017-09-04 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\Program Files\Malwarebytes 2017-09-04 10:44 - 2017-09-04 10:44 - 000001542 _____ C:\Users\Francois\Desktop\AdwCleaner[C0].txt 2017-09-04 10:35 - 2017-06-08 21:29 - 004110280 _____ C:\Users\Francois\Desktop\adwcleaner_6.047.exe 2017-09-04 10:09 - 2017-09-04 10:12 - 000002790 _____ C:\Users\Francois\Desktop\ZHPCleaner.txt 2017-09-04 09:40 - 2017-09-04 09:42 - 002830720 _____ C:\Users\Francois\Desktop\ZHPDiag3.exe 2017-09-04 09:39 - 2017-09-04 09:43 - 006965249 _____ C:\Users\Francois\Desktop\adwcleaner_7.0.2.1.exe 2017-09-04 09:39 - 2017-09-04 09:40 - 002869632 _____ C:\Users\Francois\Desktop\zhpcleaner_2017.8.31.148.exe 2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ C:\Users\Francois\AppData\Local\Resmon.ResmonCfg 2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ C:\Users\Francois\AppData\Local\recently-used.xbel 2017-09-01 09:14 - 2017-09-01 09:16 - 001050180 _____ C:\WINDOWS\Minidump\090117-39140-01.dmp 2017-08-31 20:55 - 2017-08-31 20:55 - 000037344 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys 2017-08-31 20:27 - 2017-08-31 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\S4 League 2017-08-31 16:59 - 2017-08-31 20:02 - 000000000 ____D C:\AeriaGames 2017-08-30 17:42 - 2017-08-30 17:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Craften Terminal 2017-08-30 17:25 - 2017-08-30 17:28 - 000000000 ____D C:\Users\Francois\AppData\Roaming\jEdit 2017-08-27 17:25 - 2017-08-27 17:27 - 001088268 _____ C:\WINDOWS\Minidump\082717-38031-01.dmp 2017-08-27 10:32 - 2017-08-27 10:32 - 007897776 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.1_win64-setup.exe 2017-08-26 18:23 - 2017-08-26 18:23 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome 2017-08-26 18:09 - 2017-08-26 18:09 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2017-08-25 13:22 - 2017-08-25 13:23 - 004876550 _____ C:\Users\Francois\Downloads\forge-1.12.1-14.22.0.2462-installer-win.exe 2017-08-25 13:20 - 2017-08-25 13:21 - 004160345 _____ () C:\Users\Francois\Downloads\liteloader-installer-1.12.1-00-SNAPSHOT.exe 2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC 2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\ProgramData\Vitalwerks 2017-08-22 11:20 - 2017-08-22 11:20 - 000241736 _____ C:\Users\Francois\Downloads\DUCSetup_v4_1_1.exe 2017-08-21 19:53 - 2017-08-22 15:59 - 000000000 ____D C:\Users\Francois\Documents\Overwatch 2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.mono 2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\LocalLow\Blizzard Entertainment 2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard 2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\ProgramData\.mono 2017-08-21 14:42 - 2017-08-21 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch 2017-08-20 21:26 - 2017-09-04 10:17 - 000000000 ____D C:\Program Files (x86)\Overwatch 2017-08-20 20:32 - 2017-08-20 20:32 - 002812800 _____ C:\Users\Francois\Downloads\ZHPDiag3.exe 2017-08-14 00:17 - 2017-08-14 00:17 - 000000000 ____D C:\Users\Francois\80AE23DF71A44E3FB931F93AB5DF0BDD.TMP 2017-08-09 12:47 - 2017-08-09 12:47 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2017-08-07 02:20 - 2017-08-07 02:21 - 009037583 _____ C:\Users\Francois\Downloads\csgodouble.rar 2017-08-07 00:45 - 2017-09-02 23:21 - 000001234 _____ C:\Users\Francois\Desktop\Starter Pack Launcher.lnk 2017-08-07 00:45 - 2017-08-07 00:45 - 000001502 _____ C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Starter Pack Launcher (PyLNP).lnk 2017-08-07 00:44 - 2017-08-07 16:01 - 000000000 ____D C:\Program Files (x86)\Dwarf Fortress 2017-08-06 17:04 - 2017-08-06 17:04 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Python-Eggs 2017-08-06 16:37 - 2017-08-06 16:37 - 000000603 _____ C:\Users\Francois\Desktop\exhtpasswd.php 2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit) 2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\Program Files\PuTTY 2017-08-05 22:03 - 2017-08-05 22:03 - 000000000 ____D C:\ProgramData\AomeiBR 2017-08-05 21:53 - 2017-08-14 01:51 - 000001024 ____H C:\AMTAG.BIN 2017-08-05 21:53 - 2017-08-05 22:04 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant Standard Edition 6.3 2017-08-05 21:53 - 2017-08-05 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.3 2017-08-05 21:53 - 2016-12-28 16:25 - 001931112 _____ C:\WINDOWS\ampa.exe 2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\SysWOW64\ampa.sys 2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\system32\ampa.sys 2017-08-05 21:46 - 2017-08-05 21:46 - 000000000 ____D C:\Program Files (x86)\EaseUS 2017-08-05 13:52 - 2017-08-04 17:04 - 007873888 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.0.1_win64-setup.exe ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-04 19:35 - 2016-11-27 06:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-09-04 15:23 - 2016-12-04 19:19 - 000000000 ____D C:\Users\Francois\AppData\Roaming\ZHP 2017-09-04 15:21 - 2016-11-27 07:00 - 000000000 ____D C:\ProgramData\NVIDIA 2017-09-04 15:15 - 2016-09-16 19:15 - 000000000 ____D C:\Program Files (x86)\Steam 2017-09-04 15:14 - 2016-11-20 22:20 - 000201169 _____ C:\WINDOWS\system32\InstallUtil.InstallLog 2017-09-04 15:13 - 2016-09-10 09:58 - 000000000 __SHD C:\Users\Francois\IntelGraphicsProfiles 2017-09-04 15:10 - 2016-07-17 00:40 - 002552862 _____ C:\WINDOWS\system32\perfh00C.dat 2017-09-04 15:10 - 2016-07-17 00:40 - 000675640 _____ C:\WINDOWS\system32\perfc00C.dat 2017-09-04 15:10 - 2015-11-03 21:28 - 005261026 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-09-04 15:06 - 2017-08-01 22:48 - 000000000 ____D C:\ProgramData\VMware 2017-09-04 15:06 - 2016-11-27 07:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-09-04 15:05 - 2016-07-16 08:04 - 003145728 _____ C:\WINDOWS\system32\config\BBI 2017-09-04 15:02 - 2016-09-17 10:38 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.minecraft 2017-09-04 14:13 - 2016-09-16 20:57 - 000000000 ____D C:\FFOutput 2017-09-04 13:33 - 2016-09-10 10:21 - 000000000 ____D C:\Users\Francois\AppData\Local\CrashDumps 2017-09-04 11:52 - 2016-09-30 22:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Battle.net 2017-09-04 11:52 - 2016-09-30 22:48 - 000000000 ____D C:\Program Files (x86)\Battle.net 2017-09-04 11:04 - 2017-02-05 01:12 - 000000000 ____D C:\Program Files\DAEMON Tools Lite 2017-09-04 11:04 - 2016-09-16 19:28 - 000000000 ____D C:\Program Files (x86)\FormatFactory 2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\RTX Encoder 2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\PCTools Lile Information 2017-09-04 10:46 - 2017-01-15 20:56 - 000000000 ____D C:\Program Files\CyberGhost 6 2017-09-04 10:44 - 2017-07-11 11:32 - 000000000 ____D C:\AdwCleaner 2017-09-04 01:00 - 2016-11-05 21:20 - 000000000 ____D C:\Program Files (x86)\osu! 2017-09-03 12:53 - 2016-09-25 11:18 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Audacity 2017-09-02 23:21 - 2017-07-20 19:52 - 000002264 _____ C:\Users\Francois\Desktop\WhatsApp.lnk 2017-09-02 23:21 - 2017-01-15 20:56 - 000001820 _____ C:\Users\Francois\Desktop\CyberGhost 6.lnk 2017-09-02 23:21 - 2016-11-12 12:39 - 000001171 _____ C:\Users\Francois\Desktop\CodeBlocks.lnk 2017-09-02 23:21 - 2016-10-20 14:32 - 000001059 _____ C:\Users\Francois\Desktop\mcedit.exe.lnk 2017-09-02 23:21 - 2016-09-17 10:42 - 000001037 _____ C:\Users\Francois\Desktop\Minecraft.lnk 2017-09-02 00:27 - 2016-11-27 07:07 - 000000000 ____D C:\Users\Francois 2017-09-01 22:19 - 2017-01-07 21:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2017-09-01 11:53 - 2016-09-17 11:23 - 000000000 ____D C:\Users\Francois\.gimp-2.8 2017-09-01 11:37 - 2016-09-17 11:55 - 000000000 ____D C:\Users\Francois\AppData\Local\gtk-2.0 2017-09-01 09:14 - 2017-07-26 19:39 - 799368595 _____ C:\WINDOWS\MEMORY.DMP 2017-09-01 09:14 - 2017-05-16 09:28 - 000000000 ____D C:\WINDOWS\Minidump 2017-08-30 17:32 - 2016-12-31 19:09 - 000000000 ____D C:\Users\Francois\AppData\Local\Eclipse 2017-08-30 17:32 - 2016-12-31 19:00 - 000000000 ____D C:\Users\Francois\.p2 2017-08-30 01:55 - 2017-05-28 21:17 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm 2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Roaming\VMware 2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Local\VMware 2017-08-29 17:49 - 2016-09-18 17:51 - 000000000 ____D C:\Users\Francois\AppData\Roaming\FileZilla 2017-08-29 13:30 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\VMware 2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default User\AppData\Roaming\VMware 2017-08-27 17:32 - 2017-08-03 07:52 - 000000000 ____D C:\Users\Francois\.TianTianVM 2017-08-27 10:18 - 2016-06-09 16:21 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-08-26 18:12 - 2016-11-27 06:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-08-26 18:11 - 2017-06-30 11:48 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:11 - 2017-06-30 11:48 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:11 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF 2017-08-26 18:10 - 2017-06-30 11:47 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:10 - 2016-11-27 06:59 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-08-26 18:09 - 2017-06-30 11:47 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:09 - 2017-06-30 11:47 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:09 - 2017-06-30 11:47 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:09 - 2017-06-30 11:47 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 18:09 - 2017-06-30 11:47 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ___HD C:\Users\Francois\AppData\Roaming\Skype 2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ____D C:\ProgramData\Skype 2017-08-24 15:34 - 2017-07-10 20:50 - 000000000 ____D C:\Users\Francois\Documents\Virtual Machines 2017-08-22 19:57 - 2016-11-04 22:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\obs-studio 2017-08-22 15:23 - 2016-09-23 23:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard Entertainment 2017-08-22 11:21 - 2016-11-01 17:53 - 000000000 ____D C:\Program Files (x86)\No-IP 2017-08-21 15:42 - 2016-09-30 23:00 - 000000000 ____D C:\Program Files (x86)\Hearthstone 2017-08-20 20:28 - 2017-07-10 11:08 - 000000000 ____D C:\Users\Francois\.VirtualBox 2017-08-20 19:40 - 2017-03-11 23:36 - 000000000 ____D C:\Users\Francois\.MemuHyperv 2017-08-18 06:37 - 2017-06-30 11:48 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2017-08-18 06:37 - 2017-06-30 11:48 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2017-08-18 06:37 - 2017-06-30 11:48 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2017-08-18 06:37 - 2017-06-30 11:48 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2017-08-18 06:37 - 2017-06-30 11:48 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2017-08-18 06:37 - 2017-06-30 11:47 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-08-18 06:37 - 2017-06-30 11:47 - 000048064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2017-08-18 06:36 - 2017-06-30 11:47 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2017-08-18 06:36 - 2017-06-30 11:47 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2017-08-17 20:11 - 2017-03-17 19:56 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-08-17 18:26 - 2017-06-30 11:47 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2017-08-11 18:06 - 2016-10-14 19:58 - 000000000 ____D C:\Users\Francois\Documents\My Games 2017-08-10 21:28 - 2017-06-16 22:27 - 000000000 ____D C:\Users\Francois\Desktop\YGOPro DevPro Launcher 2017-08-10 19:59 - 2016-09-18 20:20 - 000000000 ____D C:\Users\Francois\AppData\Roaming\vlc 2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Roaming\discord 2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Local\Discord 2017-08-08 15:30 - 2017-03-05 16:16 - 000000600 _____ C:\Users\Francois\AppData\Local\PUTTY.RND 2017-08-05 20:26 - 2017-03-30 15:41 - 000000961 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2017-08-05 18:59 - 2017-07-20 19:52 - 000000000 ____D C:\Users\Francois\AppData\Roaming\WhatsApp ==================== Fichiers à la racine de certains dossiers ======= 2016-12-04 02:00 - 2016-12-05 21:55 - 000000034 _____ () C:\Users\Francois\AppData\Roaming\AdobeWLCMCache.dat 2017-04-03 20:10 - 2017-04-03 20:10 - 000000125 _____ () C:\Users\Francois\AppData\Roaming\D2Info0 2017-04-03 20:10 - 2017-04-04 00:07 - 000000008 _____ () C:\Users\Francois\AppData\Roaming\DofusAppId0_1 2017-08-03 11:14 - 2017-08-03 11:24 - 000003062 _____ () C:\Users\Francois\AppData\Roaming\droid4xinstaller.log 2016-10-16 15:16 - 2016-10-16 15:16 - 000014336 ___SH () C:\Users\Francois\AppData\Roaming\Thumbs.db 2017-03-05 16:16 - 2017-08-08 15:30 - 000000600 _____ () C:\Users\Francois\AppData\Local\PUTTY.RND 2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ () C:\Users\Francois\AppData\Local\recently-used.xbel 2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ () C:\Users\Francois\AppData\Local\Resmon.ResmonCfg 2016-12-17 22:30 - 2017-03-11 02:06 - 000000552 _____ () C:\Users\Francois\AppData\Local\TroubleshooterConfig.json 2017-06-18 18:30 - 2017-06-18 18:30 - 000010255 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag Fichiers à déplacer ou supprimer: ==================== C:\Users\Francois\ZHPCleaner.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-08-31 19:41 ==================== Fin de FRST.txt ============================