Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2017 01
Ran by VURRY (administrator) on VURRY-PC (02-11-2017 19:58:00)
Running from C:\Users\VURRY\Downloads
Loaded Profiles: VURRY (Available Profiles: VURRY)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: "C:\Users\VURRY\AppData\Local\Chromium\Application\chrome.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Guillemot Corporation) C:\Windows\System32\HerculesWiFiService.exe
(AVG Netherlands B.V) C:\Program Files\AVG Driver Updater\AVG Driver Updater.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Olivetti) C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
(TeamViewer GmbH) C:\Users\VURRY\AppData\Local\Temp\TeamViewer\TVFile2.bak_2017-11-02-19-41-17.tmp
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
() C:\Program Files\Hercules\WiFi Station N\WiFiN.exe
(Hercules) C:\Program Files\Hercules\WiFi Station\WiFiStation.exe
(TeamViewer GmbH) C:\Users\VURRY\AppData\Local\Temp\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Users\VURRY\AppData\Local\Temp\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Users\VURRY\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NPSStartup] => [X]
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220944 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\RunOnce: [Barecatare] => C:\Windows\system32\wscript.exe /E:vbscript /B "C:\Users\VURRY\AppData\Local\Legofaba\Mabur.dat"
HKU\S-1-5-21-2197174252-4146362831-129665958-1000\...\Run: [Google Update] => C:\Users\VURRY\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-05-01] (Google Inc.)
HKU\S-1-5-21-2197174252-4146362831-129665958-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil32_22_0_0_210_ActiveX.exe [1210560 2016-07-15] (Adobe Systems Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station N.lnk [2011-07-01]
ShortcutTarget: WiFi Station N.lnk -> C:\Program Files\Hercules\WiFi Station N\WiFiN.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station.lnk [2010-05-29]
ShortcutTarget: WiFi Station.lnk -> C:\Program Files\Hercules\WiFi Station\WiFiStation.exe (Hercules)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{0727A262-C3F5-4FE9-84B9-6F5224809214}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{46F70DE9-DFAF-49FF-B043-53FF39A74B51}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{47EF28BA-2DAB-46A5-A3CD-413A87323FC7}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{7F049E9C-EB25-4474-B185-F11A3C1EA953}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{91395066-D497-49AB-BEFF-F975BC19B91B}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{B494EA1F-788B-46D7-A170-5A2F06B817A1}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{CE019027-3743-404A-9C60-5AF9C7BD4AC8}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{FAB52B3F-2BA9-4D6A-8120-2125B64E1928}: [DhcpNameServer] 212.27.40.241 212.27.40.240

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKLM -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2197174252-4146362831-129665958-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://mysearch.avg.com/search?cid={7C799F76-AFF7-47DF-BF14-54D92B566D24}&mid=730ef75254d447ccbd97d16e48fd2a33-51a8e8921d85620c3bf12903cbd3b793ddd53638&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1216avz&pr=fr&d=2016-12-06 14:49:58&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2197174252-4146362831-129665958-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\S-1-5-21-2197174252-4146362831-129665958-1000 -> {F2419B62-BDA3-4B68-8DC7-31ACAFC943DB} URL = 
SearchScopes: HKU\S-1-5-21-2197174252-4146362831-129665958-1000 -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-02] (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-02] (Google Inc.)
Toolbar: HKU\S-1-5-21-2197174252-4146362831-129665958-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-02] (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-08-12] [not signed]
FF HKU\S-1-5-21-2197174252-4146362831-129665958-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-06-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2012-11-02] (GARMIN Corp.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2197174252-4146362831-129665958-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-06-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2197174252-4146362831-129665958-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\VURRY\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-18] (RocketLife, LLP)
FF Plugin HKU\S-1-5-21-2197174252-4146362831-129665958-1000: @squareclock.com/SQ3DPlayer_Production_Castorama_Bathroom_Internet -> C:\Users\VURRY\AppData\Local\SquareClock.Production_Castorama_Bathroom_Internet\NPSQ3D.dll [2015-05-08] (SquareClock SAS)
FF Plugin HKU\S-1-5-21-2197174252-4146362831-129665958-1000: @tools.google.com/Google Update;version=3 -> C:\Users\VURRY\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin HKU\S-1-5-21-2197174252-4146362831-129665958-1000: @tools.google.com/Google Update;version=9 -> C:\Users\VURRY\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 4
CHR HomePage: Profile 4 -> hxxp://www.google.com/
CHR StartupUrls: Profile 4 -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Profile 4 -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Profile 4 -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default [2017-11-02]
CHR Extension: (Google Drive) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-05]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (Chuck Anderson) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegkoiakifeoejnjkbnnojkkdoegeofp [2014-01-03]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-22]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-08-23]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1 [2015-08-23]
CHR Extension: (Google Drive) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-18]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-18]
CHR Extension: (Avast Online Security) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-18]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-18]
CHR Extension: (Google Wallet) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-18]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-18]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3 [2015-08-23]
CHR Extension: (Google Docs) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-18]
CHR Extension: (Google Drive) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-18]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-18]
CHR Extension: (Avast Online Security) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-18]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-18]
CHR Extension: (Google Wallet) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-18]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-18]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4 [2017-11-02]
CHR Extension: (Slides) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (uTab) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\bpmmandcadflhnnaiclipadomfmdbjbp [2017-07-06]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-31]
CHR Extension: (Hermes Tab) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ehlceeijggpdgfcefmipcmdelickjgfg [2017-10-02]
CHR Extension: (hTab) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\elmkjjfkkchohaaoljobaffjeedcoocj [2017-10-02]
CHR Extension: (Sheets) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-22]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-10-11]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-27]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-17]
CHR Extension: (Chrome Media Router) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-29]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5 [2017-07-31]
CHR Extension: (Google Traduction) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-07-31]
CHR Extension: (Google Slides) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-17]
CHR Extension: (Google Docs) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-22]
CHR Extension: (Google Drive) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-31]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-31]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-22]
CHR Extension: (hTab) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\elmkjjfkkchohaaoljobaffjeedcoocj [2017-07-31]
CHR Extension: (Google Sheets) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-31]
CHR Extension: (Vysor) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2017-07-31]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-07-31]
CHR Extension: (Extension Google Keep pour Chrome) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2017-07-31]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-31]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-31]
CHR Profile: C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile [2016-02-22]
CHR Extension: (Google Slides) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-18]
CHR Extension: (Google Docs) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-18]
CHR Extension: (YouTube) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-18]
CHR Extension: (Recherche Google) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-18]
CHR Extension: (Google Sheets) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-18]
CHR Extension: (Gmail) - C:\Users\VURRY\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-18]
CHR HKLM\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [elmkjjfkkchohaaoljobaffjeedcoocj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2197174252-4146362831-129665958-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\VURRY\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-08-16]
CHR HKU\S-1-5-21-2197174252-4146362831-129665958-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2197174252-4146362831-129665958-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2197174252-4146362831-129665958-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [elmkjjfkkchohaaoljobaffjeedcoocj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2197174252-4146362831-129665958-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [935184 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [437224 2016-10-27] (Digital Wave Ltd.)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2009-04-07] (Teruten) [File not signed]
R2 HerculesWiFi; C:\Windows\system32\\HerculesWiFiService.exe [72488 2010-11-17] (Guillemot Corporation)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [694784 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 InstallerWrapperService; C:\Program Files\TrueKey\InstallerWrapperService.exe [47688 2016-07-19] (McAfee, Inc.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R2 olMntrService; C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe [86016 2006-09-22] (Olivetti) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 TeamViewer; c:\users\vurry\appdata\local\temp\teamviewer\TeamViewer_Service.exe [10803440 2017-08-29] (TeamViewer GmbH) <==== ATTENTION
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2011-12-26] (DT Soft Ltd)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-04-07] () [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [636008 2010-07-13] (Realtek Semiconductor Corporation )
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [22728 2017-11-02] (SlimWare Utilities, Inc.)
S3 USBPNPA; C:\Windows\System32\drivers\CM108.sys [1310720 2007-06-28] (C-Media Inc)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-02 19:58 - 2017-11-02 19:59 - 000024824 _____ C:\Users\VURRY\Downloads\FRST.txt
2017-11-02 19:57 - 2017-11-02 19:58 - 000000000 ____D C:\FRST
2017-11-02 19:56 - 2017-11-02 19:57 - 001799680 _____ (Farbar) C:\Users\VURRY\Downloads\FRST.exe
2017-11-02 19:52 - 2017-11-02 19:57 - 000000000 ____D C:\Users\VURRY\AppData\LocalLow\HPAppData
2017-11-02 19:32 - 2017-11-02 19:38 - 000000000 ____D C:\AdwCleaner
2017-11-02 19:32 - 2017-11-02 19:34 - 008261584 _____ (Malwarebytes) C:\Users\VURRY\Downloads\adwcleaner_7.0.4.0.exe
2017-11-02 19:06 - 2017-11-02 19:06 - 000000000 ____D C:\Users\VURRY\AppData\Roaming\TeamViewer
2017-11-02 19:04 - 2017-11-02 19:05 - 015756368 _____ (TeamViewer GmbH) C:\Users\VURRY\Downloads\TeamViewer_Setup.exe
2017-10-28 10:07 - 2017-10-28 10:22 - 000000000 ____D C:\Users\VURRY\AppData\Local\MSfree Inc
2017-10-21 18:15 - 2017-10-21 18:15 - 000108387 _____ C:\Users\VURRY\Downloads\telereglement_TF_20171021_191512.pdf
2017-10-21 18:12 - 2017-10-21 18:12 - 000108397 _____ C:\Users\VURRY\Downloads\telereglement_TF_20171021_191149.pdf
2017-10-17 16:41 - 2017-10-17 16:41 - 000140229 _____ C:\Users\VURRY\Downloads\Relev_ n_004 du 13_10_2017_1086000836.pdf
2017-10-11 17:26 - 2017-10-11 17:26 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-10-11 13:43 - 2017-10-11 13:43 - 000004096 ____H C:\Users\VURRY\AppData\Local\keyfile3.drm
2017-10-11 08:13 - 2017-09-13 16:13 - 004001512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-10-11 08:13 - 2017-09-13 16:13 - 003945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-10-11 08:13 - 2017-09-13 16:13 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-10-11 08:13 - 2017-09-13 16:13 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-10-11 08:13 - 2017-09-13 16:10 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-10-11 08:13 - 2017-09-13 16:09 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-10-11 08:13 - 2017-09-13 16:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-10-11 08:13 - 2017-09-13 15:53 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-10-11 08:13 - 2017-09-13 15:50 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-10-11 08:13 - 2017-09-13 15:50 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-10-11 08:13 - 2017-09-13 15:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-10-11 08:13 - 2017-09-13 15:50 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-10-11 08:13 - 2017-09-13 15:50 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-10-11 08:13 - 2017-09-13 15:48 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-10-11 08:13 - 2017-09-13 15:46 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-10-11 08:13 - 2017-09-13 15:46 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-10-11 08:13 - 2017-09-13 15:46 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-10-11 08:13 - 2017-09-13 15:46 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-10-11 08:13 - 2017-09-13 15:46 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-10-11 08:13 - 2017-09-13 15:46 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-10-11 08:13 - 2017-09-13 15:46 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-10-11 08:13 - 2017-09-09 00:47 - 000347344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-10-11 08:13 - 2017-09-08 16:14 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-10-11 08:13 - 2017-09-08 16:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-10-11 08:13 - 2017-09-08 16:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-10-11 08:13 - 2017-09-08 16:10 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-10-11 08:13 - 2017-09-08 16:09 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-10-11 08:13 - 2017-09-08 16:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-10-11 08:13 - 2017-09-08 16:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-10-11 08:13 - 2017-09-08 15:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-10-11 08:13 - 2017-09-08 15:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-10-11 08:13 - 2017-09-08 15:50 - 002402304 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-10-11 08:13 - 2017-09-08 15:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2017-10-11 08:13 - 2017-09-08 15:20 - 000345088 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2017-10-11 08:13 - 2017-09-08 15:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2017-10-11 08:13 - 2017-09-07 20:27 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-10-11 08:13 - 2017-09-07 20:26 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-10-11 08:13 - 2017-09-07 20:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-10-11 08:13 - 2017-09-07 20:10 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-10-11 08:13 - 2017-09-07 20:10 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-10-11 08:13 - 2017-09-07 20:10 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-10-11 08:13 - 2017-09-07 20:09 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-10-11 08:13 - 2017-09-07 20:04 - 020267008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-10-11 08:13 - 2017-09-07 20:03 - 002292736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-10-11 08:13 - 2017-09-07 20:03 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-10-11 08:13 - 2017-09-07 20:02 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-10-11 08:13 - 2017-09-07 19:59 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-10-11 08:13 - 2017-09-07 19:58 - 000663040 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-10-11 08:13 - 2017-09-07 19:58 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-10-11 08:13 - 2017-09-07 19:58 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-10-11 08:13 - 2017-09-07 19:58 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-10-11 08:13 - 2017-09-07 19:52 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-11 08:13 - 2017-09-07 19:49 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-10-11 08:13 - 2017-09-07 19:44 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-10-11 08:13 - 2017-09-07 19:44 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-11 08:13 - 2017-09-07 19:43 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-10-11 08:13 - 2017-09-07 19:40 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-10-11 08:13 - 2017-09-07 19:39 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-10-11 08:13 - 2017-09-07 19:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-10-11 08:13 - 2017-09-07 19:36 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-10-11 08:13 - 2017-09-07 19:29 - 004547072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-10-11 08:13 - 2017-09-07 19:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-10-11 08:13 - 2017-09-07 19:26 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-10-11 08:13 - 2017-09-07 19:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-10-11 08:13 - 2017-09-07 19:25 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-10-11 08:13 - 2017-09-07 19:25 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-10-11 08:13 - 2017-09-07 19:17 - 013677568 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-10-11 08:13 - 2017-09-07 19:01 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-10-11 08:13 - 2017-09-07 18:57 - 001316864 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-10-11 08:13 - 2017-09-07 18:57 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-10-11 08:13 - 2017-09-07 16:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-10-11 08:13 - 2017-09-07 15:48 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-10-11 08:13 - 2017-09-07 15:48 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-10-11 08:13 - 2017-09-07 15:48 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-10-11 08:13 - 2017-08-19 16:10 - 003209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-10-11 08:13 - 2017-08-19 16:10 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-10-11 08:13 - 2017-08-19 16:10 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2017-10-11 08:13 - 2017-08-19 15:57 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2017-10-11 08:13 - 2017-08-19 15:57 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-10-11 08:13 - 2017-08-14 18:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-10-11 08:13 - 2017-08-14 18:35 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2017-10-11 08:13 - 2017-08-13 22:36 - 000920064 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-10-11 08:13 - 2017-08-13 22:36 - 000134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-10-11 08:13 - 2017-08-13 22:35 - 000031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2017-10-11 08:13 - 2017-08-13 22:35 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-02 19:54 - 2017-04-09 18:55 - 000000268 _____ C:\Windows\Tasks\{356A7962-A986-7CE0-B498-74E3F70027B0}.job
2017-11-02 19:54 - 2016-12-29 18:12 - 000000256 _____ C:\Windows\Tasks\{AA85B11C-9300-44C6-A4F0-E99A530575DF}.job
2017-11-02 19:44 - 2010-05-30 13:52 - 000702584 _____ C:\Windows\system32\perfh00C.dat
2017-11-02 19:44 - 2010-05-30 13:52 - 000130290 _____ C:\Windows\system32\perfc00C.dat
2017-11-02 19:44 - 2010-05-16 13:27 - 001549936 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-02 19:44 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2017-11-02 19:42 - 2017-01-09 10:44 - 000000262 _____ C:\Windows\Tasks\{5054EF08-3A62-C86B-FA4E-4C8A1146E3A5}.job
2017-11-02 19:40 - 2016-09-06 19:23 - 000000442 _____ C:\Windows\Tasks\AVG Driver Updater Startup.job
2017-11-02 19:39 - 2016-09-06 19:23 - 000022728 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2017-11-02 19:39 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-02 19:38 - 2010-08-12 12:33 - 000000000 ____D C:\Users\VURRY\AppData\Roaming\Yahoo!
2017-11-02 19:38 - 2009-07-14 05:34 - 000010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-02 19:38 - 2009-07-14 05:34 - 000010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-02 19:37 - 2016-01-14 13:43 - 000000402 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2017-11-02 19:28 - 2012-04-18 09:40 - 000001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-11-02 19:23 - 2009-07-14 05:52 - 000000000 ____D C:\Windows\addins
2017-11-02 19:18 - 2017-01-17 18:18 - 000000274 _____ C:\Windows\Tasks\{1AEE7F0E-D93F-17C2-AF86-257CA6B4B60F}.job
2017-11-02 19:11 - 2015-08-23 09:36 - 000098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-11-01 18:34 - 2010-06-01 12:57 - 000000000 ____D C:\Windows\Msagent
2017-10-28 11:36 - 2016-12-24 10:12 - 000001836 __RSH C:\ProgramData\ntuser.pol
2017-10-28 11:01 - 2017-04-27 07:54 - 000000000 ____D C:\Users\VURRY\AppData\Roaming\Kuses
2017-10-28 10:43 - 2017-01-17 18:17 - 000000000 ____D C:\Users\VURRY\AppData\Local\{DC32EA6E-F89A-86D6-9502-A33EB16A5FA6}
2017-10-27 08:58 - 2016-12-30 18:54 - 000000451 _____ C:\Users\VURRY\AppData\Roaming\WB.CFG
2017-10-22 19:24 - 2016-09-06 19:23 - 000000496 _____ C:\Windows\Tasks\AVG Driver Updater Scan.job
2017-10-20 09:56 - 2013-08-16 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-10-13 09:29 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache
2017-10-13 08:31 - 2009-07-14 05:33 - 000407520 _____ C:\Windows\system32\FNTCACHE.DAT
2017-10-11 17:31 - 2013-08-15 21:17 - 000000000 ____D C:\Windows\system32\MRT
2017-10-11 17:25 - 2010-05-30 13:53 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2017-01-17 18:16 - 2017-01-17 18:16 - 000678400 _____ () C:\Users\VURRY\AppData\Roaming\Dosimufa.exe
2016-12-29 18:12 - 2016-12-24 10:12 - 000000492 _____ () C:\Users\VURRY\AppData\Roaming\install.log
2017-03-13 10:31 - 2017-03-13 10:31 - 000780288 _____ () C:\Users\VURRY\AppData\Roaming\Popefuc.exe
2016-12-30 18:54 - 2017-10-27 08:58 - 000000451 _____ () C:\Users\VURRY\AppData\Roaming\WB.CFG
2017-10-11 13:43 - 2017-10-11 13:43 - 000004096 ____H () C:\Users\VURRY\AppData\Local\keyfile3.drm
2011-06-05 11:52 - 2011-06-05 11:52 - 000000000 _____ () C:\Users\VURRY\AppData\Local\{7C0D01DF-AA7B-4BC0-AEA7-BBB918A220DE}
2011-06-05 11:59 - 2011-06-05 12:00 - 000000000 _____ () C:\Users\VURRY\AppData\Local\{B4A88D79-2672-4597-9507-02A67AE6F4F3}
2011-06-21 10:18 - 2011-06-21 10:18 - 000000000 _____ () C:\Users\VURRY\AppData\Local\{FA118213-E951-4A19-87C0-EEA4FD1F2D10}
2014-12-27 11:45 - 2014-12-27 11:45 - 000000057 _____ () C:\ProgramData\Ament.ini
2010-12-26 19:10 - 2010-12-26 19:10 - 000000056 ____H () C:\ProgramData\ezsidmv.dat
2010-08-12 09:37 - 2010-08-12 12:48 - 000003208 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Windows\Tasks\{1AEE7F0E-D93F-17C2-AF86-257CA6B4B60F}.job
C:\Windows\Tasks\{356A7962-A986-7CE0-B498-74E3F70027B0}.job
C:\Windows\Tasks\{5054EF08-3A62-C86B-FA4E-4C8A1146E3A5}.job
C:\Windows\Tasks\{AA85B11C-9300-44C6-A4F0-E99A530575DF}.job


Some files in TEMP:
====================
2016-09-03 09:50 - 2016-07-20 13:01 - 000186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\VURRY\AppData\Local\Temp\avguirn_081024567502.exe
2015-11-29 10:48 - 2015-11-29 10:48 - 000000000 _____ () C:\Users\VURRY\AppData\Local\Temp\GUR1512.exe
2017-10-28 10:46 - 2017-10-28 10:46 - 000151040 ___SH () C:\Users\VURRY\AppData\Local\Temp\w2bhlp.dll
2017-10-28 10:46 - 2017-10-28 10:46 - 000110832 ___SH (Microsoft Corporation) C:\Users\VURRY\AppData\Local\Temp\WiNToBootic.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-01 19:20

==================== End of FRST.txt ============================