Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-09-2017 02 Exécuté par clips (administrateur) sur DESKTOP-BCUPR2E (12-09-2017 16:39:08) Exécuté depuis C:\Users\clips\Desktop Profils chargés: clips (Profils disponibles: clips) Platform: Windows 10 Home Version 1703 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGiftBoxDesktop.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\PixelMaster Video HDR\DriverMFTService.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (McAfee, Inc.) C:\Program Files\mcafee\vul\McV12B8.tmp (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe () C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSPanel.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\VSCore_15_7\mcapexe.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\2.5.312.0\McCSPServiceHost.exe (Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\mcafee\MfeAV\MfeAVSvc.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8500.40725.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8500.40725.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Spotify Ltd) C:\Users\clips\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (McAfee LLC.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-24] (NVIDIA Corporation) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] () HKLM-x32\...\Run: [ROGNB] => C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe [463872 2013-05-15] () HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\Run: [Spotify] => C:\Users\clips\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-25] (Spotify Ltd) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\Run: [Spotify Web Helper] => C:\Users\clips\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-25] (Spotify Ltd) HKU\S-1-5-21-1086667615-2688694175-826190078-1001\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-08] (Adobe Systems Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-07-11] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) GroupPolicy: Restriction - Chrome <==== ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{d7e68dd5-e9d4-462e-9c95-2023963b006c}: [DhcpNameServer] 192.168.0.254 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1086667615-2688694175-826190078-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1086667615-2688694175-826190078-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE SearchScopes: HKU\S-1-5-21-1086667615-2688694175-826190078-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3333673&octid=EB_ORIGINAL_CTID&ISID=BE8CB65E-FB6F-4ECD-A263-293F946E8840&SearchSource=58&CUI=&UM=8&UP=SPFD16B58F-B0CB-484D-8530-D0CB4C5A074D&D=110416&q={searchTerms}&SSPV= BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-07-25] (McAfee, Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-26] (Oracle Corporation) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-04-30] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-26] (Oracle Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-07-25] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-07-25] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-07-25] (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2017-08-08] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2017-08-08] (McAfee, Inc.) FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-07-20] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2017-09-12] [non signé] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-08] () FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2017-08-08] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-26] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-26] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2017-08-08] () FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.fr/ CHR StartupUrls: Default -> "hxxp://www.google.fr/" CHR Profile: C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default [2017-09-12] CHR Extension: (Google Slides) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-24] CHR Extension: (Google Docs) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-25] CHR Extension: (Google Drive) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-24] CHR Extension: (YouTube) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-24] CHR Extension: (Spotify - Music for every moment) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh [2017-07-16] CHR Extension: (Google Agenda) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-09] CHR Extension: (Google Sheets) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-24] CHR Extension: (Word Online) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2016-03-24] CHR Extension: (Google Docs hors connexion) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-25] CHR Extension: (Google Sites) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmandedkgonhldbnjpikffdnneenijnd [2017-08-06] CHR Extension: (Google Keep – Notes et listes) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2017-09-12] CHR Extension: (Excel Online) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2016-03-24] CHR Extension: (Google Maps) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-03-24] CHR Extension: (Extension Google Keep pour Chrome) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2016-08-05] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-27] CHR Extension: (Picasa) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2016-03-24] CHR Extension: (Gmail) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-24] CHR Extension: (Chrome Media Router) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-26] CHR Extension: (Always Weather) - C:\Users\clips\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcboldhlmhecoigccicmippjglnhhic [2017-09-08] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-17] CHR HKLM-x32\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-17] ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe [71168 2015-05-31] (ASUS Cloud Corporation) [Fichier non signé] R2 ASUSGiftBoxDekstop; C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe [315704 2015-07-20] (ASUS) S3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1511728 2017-08-10] (McAfee, Inc.) R2 DriverMFTService; C:\Program Files (x86)\Asus\PixelMaster Video HDR\DriverMFTService.exe [20992 2015-05-19] (ASUSTek Computer Inc.) [Fichier non signé] R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Fichier non signé] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2016-11-30] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-06-24] (Intel Corporation) S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe [133480 2015-07-21] (Zhuhai Kingsoft Office Software Co.,Ltd) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [590880 2017-07-25] (McAfee, Inc.) R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_7\McApExe.exe [993256 2017-08-07] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.) R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.5.312.0\\McCSPServiceHost.exe [2139832 2017-05-31] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [242640 2017-06-21] (McAfee, Inc.) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [394704 2017-06-21] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [350160 2017-06-21] (McAfee, Inc.) R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1546904 2017-08-17] (McAfee, Inc.) R3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-10-06] () S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé] R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1043864 2017-07-31] (Intel Security, Inc.) S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-10-06] (Intel® Corporation) R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUS Corporation) R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [77800 2017-06-26] (McAfee, Inc.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [209608 2017-08-07] (McAfee, Inc.) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230144 2016-11-11] (Intel Corporation) R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [88256 2015-06-26] (Intel Corporation) S3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [487408 2017-06-26] (McAfee, Inc.) U3 mfeaack01; pas de ImagePath R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [355312 2017-06-26] (McAfee, Inc.) U3 mfeavfk02; pas de ImagePath S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [84544 2017-06-26] (McAfee, Inc.) R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [506352 2017-06-26] (McAfee, Inc.) R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [933360 2017-06-26] (McAfee, Inc.) U3 mfehidk01; pas de ImagePath R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [504792 2017-06-27] (McAfee LLC.) S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [108504 2017-06-27] (McAfee LLC.) R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [116208 2017-06-26] (McAfee, Inc.) R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [111608 2017-02-14] (McAfee, Inc.) R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [253424 2017-06-26] (McAfee, Inc.) R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\Netwbw02.sys [3525896 2016-11-09] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_d4715679184092a8\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [887552 2015-07-15] (Realtek ) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [753368 2015-06-15] (Realsil Semiconductor Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-12 16:39 - 2017-09-12 16:40 - 000028230 _____ C:\Users\clips\Desktop\FRST.txt 2017-09-12 16:39 - 2017-09-12 16:39 - 000000000 ____D C:\FRST 2017-09-12 16:32 - 2017-09-12 16:33 - 002397184 _____ (Farbar) C:\Users\clips\Desktop\FRST64.exe 2017-09-12 13:24 - 2017-09-12 13:53 - 000000000 ____D C:\Users\clips\Downloads\analized 17 09 11 sarah banks can take it as hard as you can give it tk 480p 2017-09-12 13:24 - 2017-09-12 13:48 - 000000000 ____D C:\Users\clips\Downloads\assparade 17 09 11 jynx maze tk 480p 2017-09-12 12:55 - 2017-09-12 13:17 - 000000000 ____D C:\Users\clips\Downloads\ExposedCasting - Lucia Denville 2017-09-12 12:42 - 2017-09-12 12:42 - 000110080 _____ C:\Users\clips\Downloads\COPIE - Tableaux promouvables SUEP RAEP BIER 2018 (1).xls 2017-09-12 12:21 - 2017-09-12 12:21 - 000012173 _____ C:\Users\clips\Desktop\Avancement MAJOR 2018 LUDO D2.xlsx 2017-09-12 11:42 - 2017-09-12 11:42 - 000066048 _____ C:\Users\clips\Downloads\COPIE - TableauxPromouvablesSUEP_Major_2018 (1).xls 2017-09-12 11:41 - 2017-09-12 11:41 - 000066048 _____ C:\Users\clips\Downloads\COPIE - TableauxPromouvablesSUEP_Major_2018.xls 2017-09-12 11:41 - 2017-09-12 11:41 - 000012459 _____ C:\Users\clips\Desktop\Avancement BC 2018 D2 LUDO.xlsx 2017-09-12 11:26 - 2017-09-12 11:26 - 000068608 _____ C:\Users\clips\Downloads\COPIE - TableauxPromouvablesSUEP_BC_2018.xls 2017-09-12 11:25 - 2017-09-12 11:26 - 000014318 _____ C:\Users\clips\Desktop\AVANCEMENT BRIGADIER 2018 LUDO D2.xlsx 2017-09-12 10:35 - 2017-09-12 10:35 - 000110080 _____ C:\Users\clips\Downloads\COPIE - Tableaux promouvables SUEP RAEP BIER 2018.xls 2017-09-12 10:29 - 2017-09-12 10:29 - 000011450 _____ C:\Users\clips\Desktop\Avancement BC 2018 modele vierge.xlsx 2017-09-12 10:29 - 2017-09-12 10:29 - 000011335 _____ C:\Users\clips\Desktop\Avancement MAJOR 2018 modele vierge.xlsx 2017-09-12 10:27 - 2017-09-12 10:27 - 000013281 _____ C:\Users\clips\Desktop\AVANCEMENT BRIGADIER 2018 modele vierge.xlsx 2017-09-12 01:10 - 2017-09-12 01:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2017-09-12 00:46 - 2017-09-12 00:46 - 000000000 ___HD C:\OneDriveTemp 2017-09-08 19:42 - 2017-09-12 13:29 - 000000000 ____D C:\Users\clips\Downloads\HerLimit European hottie Gabriella Lati enjoys hardcore anal and gets facial 02 09 2017 rq 2017-09-08 19:42 - 2017-09-12 12:47 - 000004034 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse 2017-09-08 19:42 - 2017-09-12 01:00 - 000004222 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse 2017-09-08 19:41 - 2017-09-12 01:42 - 000000000 ____D C:\Users\clips\Downloads\BackroomCastingCouch Elizabeth 11 09 2017 rq 2017-09-08 19:40 - 2017-09-12 01:42 - 000000000 ____D C:\Users\clips\Downloads\BackroomCastingCouch Jessi 04 09 2017 rq 2017-09-08 19:38 - 2017-09-12 13:22 - 000000000 ____D C:\Users\clips\Downloads\WoodmanCastingX Anna Swix Casting X 170 Updated - 02 09 2017 rq 480p 2017-09-08 19:37 - 2017-09-12 12:55 - 000000000 ____D C:\Users\clips\Downloads\Alex Grey 2017-09-08 19:36 - 2017-09-12 01:42 - 000000000 ____D C:\Users\clips\Downloads\Maddy O Reilly 2017-09-08 19:35 - 2017-09-12 01:37 - 000000000 ____D C:\Users\clips\Downloads\Nelya 2017-09-08 19:23 - 2017-09-08 19:48 - 000000000 ____D C:\Users\clips\Downloads\TeenErotica xxx Selvaggia Babe - Interracial Creampie for a Teen 04 09 2017 rq 2017-09-08 19:16 - 2017-09-08 19:46 - 000000000 ____D C:\Users\clips\Downloads\DaneJones Sofi Goldfinger - Anal creampie for gorgeous blonde 05 09 2017 rq 2017-09-08 19:10 - 2017-09-08 19:35 - 000000000 ____D C:\Users\clips\Downloads\BigButtsLikeItBig Lena Paul - Lay Her Over 07 09 2017 rq 1k 2017-09-08 18:53 - 2017-09-08 19:23 - 000000000 ____D C:\Users\clips\Downloads\MassiveBootyAnalCutie s01 MickBlue DaisyStone 480p 2017-09-08 18:18 - 2017-09-12 12:54 - 000000000 ____D C:\Users\clips\Downloads\Legal Curvy spanish slut Nekane Sweet anal POV SZ1389 29 08 2017 rq 2017-09-08 18:18 - 2017-09-12 12:54 - 000000000 ____D C:\Users\clips\Downloads\JacquieEtMichelTV Kate 29 08 2017 rq 2017-09-08 18:18 - 2017-09-08 19:16 - 000000000 ____D C:\Users\clips\Downloads\Legal Adelle Booty ass banged creampied NR361 01 09 2017 rq 2017-09-08 18:18 - 2017-09-08 19:10 - 000000000 ____D C:\Users\clips\Downloads\Analized Maxim Law Is A Submissive Anal Whore 27 08 2017 rq 2017-09-08 18:13 - 2017-09-08 18:53 - 000000000 ____D C:\Users\clips\Downloads\AmateurAllure Ashly Anderson Returns 01 09 2017 rq 2017-09-08 17:54 - 2017-09-08 17:54 - 000547291 _____ C:\Users\clips\Desktop\PJ 1 TG 1378 - TABLE POSTES.pdf 2017-09-08 17:54 - 2017-09-08 17:54 - 000547291 _____ C:\Users\clips\Desktop\PJ 1 TG 1378 - TABLE POSTES(1).pdf 2017-09-08 17:48 - 2017-09-08 17:48 - 000536315 _____ ( ) C:\Users\clips\Downloads\file (1).exe 2017-09-08 17:48 - 2017-09-08 17:48 - 000000290 __RSH C:\ProgramData\ntuser.pol 2017-09-08 17:47 - 2017-09-08 17:47 - 000536315 _____ ( ) C:\Users\clips\Downloads\file.exe 2017-09-08 17:46 - 2017-09-08 17:46 - 000536315 _____ ( ) C:\Users\clips\Downloads\McAfee_Total_Protection_2017_Crack.exe 2017-09-07 01:59 - 2017-09-08 18:37 - 000000000 ____D C:\Users\clips\Downloads\Assholefever Lilu Moon - Wonder Ass 02 09 2017 rq 2017-09-05 02:29 - 2017-09-08 18:13 - 000000000 ____D C:\Users\clips\Downloads\AmateurAllure Nina Skye 25 08 2017 rq 2017-09-05 02:16 - 2017-09-07 01:59 - 000000000 ____D C:\Users\clips\Downloads\ATKGirlfriends Lyra Law - Her asshole felt good but you came in her pussy instead 27 08 2017 rq 2017-09-05 02:04 - 2017-09-05 02:29 - 000000000 ____D C:\Users\clips\Downloads\AssParade 17 08 28 Mia Malkova 2017-09-05 02:03 - 2017-09-08 18:16 - 000000000 ____D C:\Users\clips\Downloads\PornDoePedia - Nekane 720p 2017-09-05 01:43 - 2017-09-05 02:16 - 000000000 ____D C:\Users\clips\Downloads\AnalTeenAngels Michelle Carr - Plug My Asshole 29 08 2017 rq 2017-09-05 01:26 - 2017-09-05 01:27 - 000047400 _____ C:\Users\clips\Documents\cc_20170905_012655.reg 2017-09-05 01:17 - 2017-09-05 01:18 - 009791816 _____ (Piriform Ltd) C:\Users\clips\Downloads\ccsetup533.exe 2017-09-03 01:24 - 2017-09-05 02:04 - 000000000 ____D C:\Users\clips\Downloads\Holed Kira Thorn - Backdoor Blonde 29 08 2017 rq 2017-09-03 00:56 - 2017-09-05 02:03 - 000000000 ____D C:\Users\clips\Downloads\WakeUpNFuck Alexa Nova WUNF 224 - 14 08 2017 rq 2017-09-03 00:56 - 2017-09-05 01:43 - 000000000 ____D C:\Users\clips\Downloads\FirstAnalQuest First anal sex with sexy Cassie Fire 28 08 2017 rq 2017-09-03 00:39 - 2017-09-03 00:51 - 000000000 ____D C:\Users\clips\Downloads\DollsPorn Anita - Passionate Anal Fucking 29 08 2017 rq 2017-09-03 00:27 - 2017-09-03 00:44 - 000000000 ____D C:\Users\clips\Downloads\Alex Harper 2017-09-03 00:16 - 2017-09-03 01:24 - 000000000 ____D C:\Users\clips\Downloads\Analized JamesDeen Jojo Kiss Anal Schoolgirl Slave 05 09 2017 rq 2017-09-01 02:05 - 2017-09-01 02:05 - 000640252 _____ C:\Users\clips\Downloads\2016_12_13_fichetechnique_gpbi.pdf 2017-08-29 10:41 - 2017-08-29 10:41 - 000084130 _____ C:\Users\clips\Downloads\Relevￃﾩ d'informations (1).pdf 2017-08-29 10:38 - 2017-08-29 10:38 - 000084130 _____ C:\Users\clips\Downloads\Relevￃﾩ d'informations.pdf ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-12 16:37 - 2017-04-03 11:38 - 000000000 ____D C:\Users\clips\AppData\Roaming\WhatsApp 2017-09-12 16:37 - 2016-03-25 02:47 - 000000000 ____D C:\Users\clips\AppData\Local\JDownloader v2.0 2017-09-12 16:37 - 2016-03-25 02:18 - 000000000 ____D C:\Users\clips\AppData\Roaming\vlc 2017-09-12 16:32 - 2016-03-24 21:07 - 000000165 _____ C:\Users\clips\AppData\Roaming\sp_data.sys 2017-09-12 15:55 - 2017-06-05 02:13 - 000004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{45A5A744-D4A7-45CE-B814-DB8E59DEB89C} 2017-09-12 15:11 - 2017-06-05 01:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-09-12 13:01 - 2016-03-25 01:03 - 000000000 ____D C:\Users\clips\AppData\Local\Spotify 2017-09-12 12:58 - 2016-03-25 01:02 - 000000000 ____D C:\Users\clips\AppData\Roaming\Spotify 2017-09-12 01:05 - 2017-06-05 02:13 - 000003126 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon 2017-09-12 01:05 - 2015-09-01 10:12 - 000000000 ____D C:\Program Files\Common Files\McAfee 2017-09-12 01:02 - 2017-03-18 23:03 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2017-09-12 01:01 - 2017-06-05 02:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\McAfee 2017-09-12 00:50 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps 2017-09-12 00:50 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-09-12 00:46 - 2017-08-09 13:49 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture 2017-09-12 00:46 - 2017-06-05 01:54 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-09-12 00:46 - 2016-03-24 21:10 - 000000000 ___RD C:\Users\clips\OneDrive 2017-09-12 00:46 - 2016-03-24 21:07 - 000000000 __SHD C:\Users\clips\IntelGraphicsProfiles 2017-09-08 19:46 - 2015-09-01 10:12 - 000000000 ____D C:\ProgramData\McAfee 2017-09-08 19:42 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache 2017-09-08 17:48 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-09-08 17:48 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF 2017-09-08 17:48 - 2015-07-10 13:04 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-09-08 17:34 - 2017-07-27 00:39 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1086667615-2688694175-826190078-1001 2017-09-08 17:34 - 2016-03-24 21:10 - 000002409 _____ C:\Users\clips\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-09-07 01:39 - 2017-04-03 11:38 - 000000000 ____D C:\Users\clips\AppData\Local\WhatsApp 2017-09-07 01:38 - 2017-04-03 11:38 - 000002240 _____ C:\Users\clips\Desktop\WhatsApp.lnk 2017-09-07 01:38 - 2017-04-03 11:38 - 000000000 ____D C:\Users\clips\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2017-09-07 01:38 - 2017-04-03 11:38 - 000000000 ____D C:\Users\clips\AppData\Local\SquirrelTemp 2017-09-05 01:28 - 2016-03-24 21:07 - 000000000 ____D C:\Users\clips\AppData\Local\Packages 2017-09-05 01:19 - 2017-05-12 00:38 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-09-01 02:07 - 2017-06-05 02:13 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-09-01 02:07 - 2017-04-18 00:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-09-01 02:07 - 2017-04-18 00:24 - 000002126 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2017-08-30 03:29 - 2017-06-05 01:50 - 000415432 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-08-30 03:28 - 2017-06-05 02:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-08-29 10:48 - 2017-03-18 13:40 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2017-08-29 10:43 - 2017-06-05 01:56 - 000000000 ____D C:\Users\clips 2017-08-29 10:42 - 2016-09-28 16:37 - 000000000 ____D C:\Users\clips\Desktop\chloé 2017-08-29 10:42 - 2016-03-24 21:13 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-08-27 01:15 - 2016-03-30 01:08 - 000000000 ____D C:\Users\clips\AppData\Roaming\Skype 2017-08-27 00:24 - 2017-08-06 16:43 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe ==================== Fichiers à la racine de certains dossiers ======= 2016-03-24 21:07 - 2017-09-12 16:32 - 000000165 _____ () C:\Users\clips\AppData\Roaming\sp_data.sys 2017-06-05 01:54 - 2017-06-05 01:54 - 000000000 ____H () C:\ProgramData\DP45977C.lfl 2016-07-11 00:34 - 2017-07-02 23:06 - 000001347 _____ () C:\ProgramData\hpzinstall.log Certains fichiers dans TEMP: ==================== 2017-09-12 01:12 - 2017-09-12 01:12 - 000040448 ____N () C:\Users\clips\AppData\Local\Temp\proxy_vole7765123168898697648.dll ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-09-08 19:36 ==================== Fin de FRST.txt ============================