Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2017 Exécuté par MoMo_TV (administrateur) sur MOMO_TV-PC (01-11-2017 18:16:13) Exécuté depuis C:\Users\MoMo_TV\Desktop Profils chargés: MoMo_TV (Profils disponibles: MoMo_TV) Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Opera) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe (Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe (The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (SplitCam Co.) C:\Program Files (x86)\SplitCam\SplitCamService.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.) HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3911248 2015-11-09] (Tonec Inc.) HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {2bccf213-9c34-11e5-9ef6-d02788b46033} - F:\autorun.exe HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {39eb17fd-84c7-11e7-89ea-d02788b46335} - F:\Setup.exe /s HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {6f105994-2d98-11e6-bff8-d02788b46335} - F:\autorun.exe HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {914e74f6-84e0-11e7-821f-d02788b46335} - F:\Setup.exe /s ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{04D47407-3549-4ED7-B40A-5563BCA3E94F}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{1229D543-0C77-431A-995A-55806F796ABD}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3A720E87-AD60-4F8B-A728-8C8B607DA19F}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{3A9B356A-814F-4976-AF19-253AAA5AD34F}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8AE39389-469A-43CA-B92B-F58A01B15175}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{CD0F0A47-F5FF-4006-B946-827660437816}: [DhcpNameServer] 192.168.42.129 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q= HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-09-28] (Internet Download Manager, Tonec Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-02] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-02] (Oracle Corporation) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-09-28] (Internet Download Manager, Tonec Inc.) FireFox: ======== FF DefaultProfile: dvpmjiao.default FF ProfilePath: C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default [2017-10-28] FF Extension: (IDM integration) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\mozilla_cc2@internetdownloadmanager.com [2017-02-12] FF Extension: (iMacros for Firefox) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-07-16] FF Extension: (NeoBux AdAlert) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\{eb80b076-a444-444c-a590-5aee5d977d80}.xpi [2017-10-24] FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-11-09] FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MoMo_TV\AppData\Roaming\IDM\idmmzcc5 FF Extension: (IDM CC) - C:\Users\MoMo_TV\AppData\Roaming\IDM\idmmzcc5 [2017-11-01] [non signé] FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_170.dll [2017-10-16] () FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-02] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-02] (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_170.dll [2017-10-16] () FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN) Chrome: ======= CHR Profile: C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default [2017-11-01] CHR Extension: (IDM Integration Module) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-11-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-01] CHR Extension: (Chrome Media Router) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-01] CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09] Opera: ======= StartMenuInternet: (HKLM) Operadeveloper - C:\Program Files (x86)\Opera developer\Launcher.exe ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [441880 2016-06-30] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [421400 2016-06-30] (BlueStack Systems, Inc.) S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [458264 2016-06-30] (BlueStack Systems, Inc.) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [409128 2017-03-11] (EasyAntiCheat Ltd) U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-03-28] (Hi-Rez Studios) [Fichier non signé] R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.) R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Fichier non signé] R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72320 2017-03-22] (The OpenVPN Project) S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72320 2017-03-22] (The OpenVPN Project) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Fichier non signé] R2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [312616 2015-11-03] (SplitCam Co.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-06-30] (BlueStack Systems) S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-06-30] (Bluestack System Inc. ) S3 cmusbser; C:\Windows\System32\DRIVERS\cmusbser.sys [118144 2008-08-29] (Mobile Connector) S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2017-06-19] (Windows (R) Win 7 DDK provider) S3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [29688 2017-06-19] (Windows (R) Win 7 DDK provider) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation) R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [183144 2012-05-23] (Marvell Semiconductor, Inc.) S3 netr28ux; C:\Windows\System32\DRIVERS\netr28ux.sys [2245456 2015-10-14] (MediaTek Inc.) R3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2015-08-06] (Windows (R) Win 7 DDK provider) R3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37088 2015-10-15] (Windows (R) Win 7 DDK provider) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-03-21] (Anchorfree Inc.) S3 TSVAD_PCM; C:\Windows\System32\drivers\tsvadpcm.sys [33552 2016-08-11] (Windows (R) Win 7 DDK provider) R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation) S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB) R1 XQHDrv; C:\Windows\System32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation) R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation) S3 MSICDSetup; \??\E:\CDriver64.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-11-01 18:16 - 2017-11-01 18:16 - 000015203 _____ C:\Users\MoMo_TV\Desktop\FRST.txt 2017-11-01 18:16 - 2017-11-01 18:16 - 000000000 ____D C:\FRST 2017-11-01 18:15 - 2017-11-01 18:15 - 002403328 _____ (Farbar) C:\Users\MoMo_TV\Desktop\FRST64.exe 2017-11-01 14:41 - 2017-11-01 14:41 - 000005248 _____ C:\Users\MoMo_TV\Downloads\rogue.txt 2017-11-01 14:34 - 2017-11-01 14:34 - 000002198 _____ C:\Users\MoMo_TV\Desktop\ZHPCleaner.txt 2017-11-01 14:26 - 2017-11-01 14:26 - 000005296 _____ C:\Users\MoMo_TV\Desktop\rogue killer.txt 2017-11-01 14:26 - 2017-11-01 14:26 - 000005248 _____ C:\Users\MoMo_TV\Desktop\rogue.txt 2017-11-01 13:08 - 2017-11-01 13:08 - 002964864 _____ C:\Users\MoMo_TV\Desktop\ZHPCleaner.exe 2017-11-01 12:54 - 2017-11-01 12:54 - 000000858 _____ C:\Users\Public\Desktop\RogueKiller.lnk 2017-11-01 12:54 - 2017-11-01 12:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2017-11-01 12:54 - 2017-11-01 12:54 - 000000000 ____D C:\Program Files\RogueKiller 2017-11-01 12:49 - 2017-11-01 12:52 - 036097984 _____ (Adlice Software ) C:\Users\MoMo_TV\Desktop\RogueKiller_setup_ref3.exe 2017-11-01 11:38 - 2017-11-01 11:38 - 000004476 _____ C:\Users\MoMo_TV\Desktop\eset.txt 2017-11-01 11:09 - 2017-11-01 11:09 - 002870984 _____ (ESET) C:\Users\MoMo_TV\Desktop\esetsmartinstaller_fra.exe 2017-11-01 11:09 - 2017-11-01 11:09 - 000000000 ____D C:\Program Files (x86)\ESET 2017-11-01 10:41 - 2017-11-01 10:41 - 000145872 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.txt 2017-11-01 10:39 - 2017-11-01 10:39 - 000000824 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.lnk 2017-11-01 10:38 - 2017-11-01 14:28 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\ZHP 2017-11-01 10:37 - 2017-11-01 10:37 - 002924416 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.exe 2017-11-01 09:35 - 2017-11-01 09:36 - 000002602 _____ C:\Users\MoMo_TV\Desktop\Rkill.txt 2017-11-01 09:35 - 2017-11-01 09:35 - 001780224 _____ (Bleeping Computer, LLC) C:\Users\MoMo_TV\Desktop\rkill-unsigned.exe 2017-10-30 22:36 - 2017-10-30 22:36 - 000000000 ____D C:\Users\MoMo_TV\Documents\CPY_SAVES 2017-10-29 19:10 - 2017-10-29 19:10 - 000000000 _____ C:\Users\MoMo_TV\Desktop\Sp.LeBatondelaverite-Zone-Telechargement.ws.part1.htm 2017-10-28 22:18 - 2017-11-01 09:26 - 000000000 ____D C:\Program Files\theHunter - Call of the Wild 2017-10-28 22:18 - 2017-10-28 22:18 - 000001689 _____ C:\Users\Public\Desktop\theHunter - Call of the Wild.lnk 2017-10-28 12:05 - 2017-10-28 12:05 - 000000000 ____D C:\Users\Public\Documents\Steam 2017-10-28 12:05 - 2017-10-28 12:05 - 000000000 ____D C:\Users\MoMo_TV\Documents\Avalanche Studios 2017-10-26 20:25 - 2017-10-29 22:15 - 000000213 _____ C:\Users\MoMo_TV\Desktop\jeux chase .txt 2017-10-26 18:27 - 2017-10-26 18:27 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\ElevatedDiagnostics 2017-10-26 00:23 - 2017-10-24 07:05 - 1470612832 ____N C:\Users\MoMo_TV\Desktop\[nextorrent.pw] Shot.Caller.2017.FRENCH.BDRip.XviD-GZR.avi 2017-10-24 23:04 - 2017-10-24 23:06 - 009784448 _____ C:\Users\MoMo_TV\Downloads\22798086_125881324728006_6338459877274288128_n.mp4 2017-10-21 17:04 - 2017-10-21 17:15 - 000000000 ____D C:\ProgramData\Epic 2017-10-21 17:04 - 2017-10-21 17:04 - 000001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2017-10-21 17:04 - 2017-10-21 17:04 - 000001230 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk 2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\UnrealEngineLauncher 2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\UnrealEngine 2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\EpicGamesLauncher 2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Program Files (x86)\Epic Games 2017-10-21 12:34 - 2017-10-21 12:55 - 000000000 ____D C:\Users\MoMo_TV\Desktop\p48 2 am 2017-10-21 12:04 - 2017-10-21 12:26 - 000000000 ____D C:\Users\MoMo_TV\Desktop\p48 4 am 2017-10-21 11:55 - 2017-10-21 12:57 - 000000108 _____ C:\usbfix-debug.txt 2017-10-10 21:39 - 2017-10-10 21:39 - 001031316 _____ C:\Users\MoMo_TV\Downloads\22267924_135444100532169_5473992340521615360_n.mp4 2017-10-06 20:02 - 2017-10-06 20:02 - 000002033 _____ C:\Users\MoMo_TV\Downloads\PlayerLite.swf ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-11-01 17:16 - 2016-06-20 19:31 - 000003896 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1466447470 2017-11-01 17:16 - 2016-06-20 19:27 - 000000000 ____D C:\Program Files (x86)\Opera developer 2017-11-01 14:45 - 2009-07-14 05:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-11-01 14:45 - 2009-07-14 05:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-11-01 14:44 - 2011-04-12 10:16 - 000762620 _____ C:\Windows\system32\perfh00C.dat 2017-11-01 14:44 - 2011-04-12 10:16 - 000155046 _____ C:\Windows\system32\perfc00C.dat 2017-11-01 14:44 - 2009-07-14 06:13 - 001699590 _____ C:\Windows\system32\PerfStringBackup.INI 2017-11-01 14:44 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2017-11-01 14:38 - 2017-03-11 09:04 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2017-11-01 14:38 - 2016-03-25 19:14 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\HTC MediaHub 2017-11-01 14:38 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-11-01 14:36 - 2015-11-20 18:51 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\DMCache 2017-11-01 14:34 - 2015-12-18 19:41 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\ZHP 2017-11-01 12:54 - 2015-12-18 19:11 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys 2017-11-01 11:01 - 2015-11-20 18:51 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\IDM 2017-11-01 09:40 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF 2017-11-01 09:38 - 2015-12-07 22:12 - 000004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-11-01 09:38 - 2015-11-20 20:44 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-11-01 09:38 - 2015-11-20 20:44 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-11-01 09:38 - 2015-11-20 20:44 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-11-01 09:38 - 2015-11-20 20:44 - 000000000 ____D C:\Windows\system32\Macromed 2017-11-01 09:37 - 2015-11-21 17:47 - 000000000 ____D C:\Program Files (x86)\Opera 2017-11-01 09:26 - 2016-02-20 00:07 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\vlc 2017-11-01 09:26 - 2016-01-16 17:59 - 000000000 ____D C:\Program Files\Common Files\logishrd 2017-11-01 09:26 - 2015-11-20 19:48 - 000000000 ____D C:\ProgramData\Package Cache 2017-11-01 09:26 - 2015-11-20 17:08 - 000000000 ____D C:\Users\MoMo_TV 2017-11-01 09:26 - 2009-07-14 05:45 - 000275768 _____ C:\Windows\system32\FNTCACHE.DAT 2017-11-01 09:26 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration 2017-11-01 09:26 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\AppCompat 2017-10-29 18:14 - 2016-07-06 09:48 - 000000000 ____D C:\Users\MoMo_TV\Documents\ViberDownloads 2017-10-28 22:36 - 2016-05-01 21:14 - 000000000 ____D C:\Windows\SysWOW64\directx 2017-10-28 22:05 - 2016-03-18 15:59 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\CrashDumps 2017-10-28 20:23 - 2015-11-20 18:01 - 000057944 _____ C:\Users\MoMo_TV\AppData\Local\GDIPFONTCACHEV1.DAT 2017-10-28 19:22 - 2017-10-01 13:17 - 000000000 ____D C:\Program Files (x86)\KolotibabloWorker 2017-10-28 19:21 - 2016-12-03 20:36 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\Yandex 2017-10-28 19:21 - 2016-03-24 21:53 - 000000000 ____D C:\Program Files (x86)\Pure APK Install 2017-10-28 19:13 - 2015-11-20 18:30 - 000000000 ____D C:\Program Files (x86)\Steam 2017-10-28 16:22 - 2009-07-14 06:08 - 000032482 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2017-10-28 10:39 - 2015-11-21 17:47 - 000003876 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1448124459 2017-10-28 02:00 - 2017-01-03 23:22 - 000000000 ____D C:\Users\MoMo_TV\AppData\LocalLow\Mozilla 2017-10-27 11:50 - 2016-02-19 14:40 - 000000000 ____D C:\Users\MoMo_TV\.android 2017-10-27 00:16 - 2016-06-11 01:21 - 000000348 _____ C:\Users\MoMo_TV\Desktop\free cccam.cfg 2017-10-26 18:41 - 2016-08-13 00:06 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\Nox 2017-10-26 18:40 - 2017-09-18 19:24 - 000000000 ____D C:\Users\MoMo_TV\vmlogs 2017-10-26 18:40 - 2016-08-13 00:07 - 000000000 ____D C:\Users\MoMo_TV\.BigNox 2017-10-25 20:31 - 2017-01-01 17:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-10-25 20:31 - 2015-12-20 00:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\Invité 2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\HomeGroupUser$ 2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\Administrateur 2017-10-21 17:22 - 2016-07-08 14:15 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2017-10-21 12:56 - 2016-07-06 22:46 - 000000000 ____D C:\UsbFix 2017-10-21 12:34 - 2016-03-18 14:40 - 000000000 ___SD C:\Users\MoMo_TV\AppData\LocalLow\Temp 2017-10-16 21:54 - 2015-11-28 18:59 - 000004630 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier ==================== Fichiers à la racine de certains dossiers ======= 2017-04-28 22:58 - 2017-04-28 23:40 - 000001599 _____ () C:\Users\MoMo_TV\AppData\Roaming\droid4xinstaller.log 2016-10-15 00:37 - 2016-10-15 01:02 - 000135091 _____ () C:\Users\MoMo_TV\AppData\Roaming\net.telestream.wirecast.xml 2016-10-15 00:37 - 2016-10-15 00:37 - 000004755 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_BAMBUSER_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000004935 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_CHURCHSTREAMING_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000003931 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_DAILYMOTION_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000005919 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_LIGHTCAST_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000004356 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MAKETV_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000003439 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000003825 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFILIATE_ID_brandingimage_main.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000016357 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_ONSTREAM_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000010088 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMINGCHURCH_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000004482 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMINGCHURCH_AFFILIATE_ID_brandingimage_main.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000007122 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMING_MEDIA_HOSTING_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000008261 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMSHARK_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000010619 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMVU_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000005241 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAM_SPOT_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000008986 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_SUNDAY_STREAMS_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000003213 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_THE_CUBE_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000022670 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_TILTEDGLOBE_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000003302 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_TULIX_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000008949 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_VERIZON_AFFILIATE_ID_brandingimage_destination.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000008949 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_VERIZON_AFFILIATE_ID_brandingimage_main.png 2016-10-15 00:37 - 2016-10-15 00:37 - 000008683 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_ZIXI_AFFILIATE_ID_brandingimage_destination.png 2017-03-01 00:46 - 2017-03-01 00:51 - 000011264 ___SH () C:\Users\MoMo_TV\AppData\Roaming\Thumbs.db 2016-08-15 19:40 - 2016-08-15 19:40 - 000000553 _____ () C:\Users\MoMo_TV\AppData\Local\Nox_crash.log 2017-03-03 03:19 - 2017-03-03 03:19 - 000000218 _____ () C:\Users\MoMo_TV\AppData\Local\recently-used.xbel Certains fichiers dans TEMP: ==================== 2017-11-01 12:54 - 2016-09-23 19:29 - 001732032 _____ (Microsoft Corporation) C:\Users\MoMo_TV\AppData\Local\Temp\dllnt_dump.dll ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-10-30 00:21 ==================== Fin de FRST.txt ============================