Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 04.03.2018 Exécuté par Utilisateur (administrateur) sur UTILISATEUR-PC (04-03-2018 17:37:12) Exécuté depuis C:\Users\Utilisateur\Desktop Profils chargés: Utilisateur (Profils disponibles: Utilisateur & LogMeInRemoteUser & Administrateur & DefaultAppPool) Platform: Windows 10 Pro Version 1709 16299.192 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe (Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (Hilti Corporation) C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Dassault Systèmes) C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Flexera Software LLC) C:\TeklaStructures\License\Server\lmgrd.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Flexera Software LLC) C:\TeklaStructures\License\Server\lmgrd.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Tekla Corporation) C:\TeklaStructures\License\Server\tekla.exe (Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe (NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe () C:\Users\Utilisateur\Downloads\ob_92a506_cci-auto-2016.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (BayHubTech/O2Micro International) C:\Windows\System32\drivers\o2flash.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.188_none_16c3dcde323064d9\TiWorker.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\MsMpEng.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\NisSrv.exe (Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8538872 2016-03-01] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1415928 2016-03-01] (Realtek Semiconductor) HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [773760 2016-10-20] (Alps Electric Co., Ltd.) HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [401888 2017-11-07] () HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [8918528 2015-02-25] (Dell Inc.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation) HKLM\...\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [423424 2017-04-06] (LogMeIn, Inc.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [462974 2011-12-16] (Creative Technology Ltd) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.) HKLM-x32\...\Run: [PROFIS AutoUpdate] => C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Tray.exe [476672 2017-07-28] (Hilti Corporation) HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-08] (Autodesk, Inc.) HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe [1216416 2010-10-25] (Adobe Systems Incorporated) HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10290608 2018-02-07] (Piriform Ltd) HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\Policies\Explorer: [] HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\MountPoints2: {8d43b5fe-1afe-11e8-932f-acb57d6c6a0b} - "F:\SETUP.EXE" HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\...\MountPoints2: {9a12a69c-930a-11e7-9238-acb57d6c6a0b} - "F:\SETUP.EXE" Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2018-02-26] ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QTray.lnk [2017-06-27] ShortcutTarget: QTray.lnk -> C:\Program Files (x86)\Qstarz PC Suite\QTray.exe () Startup: C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ob_92a506_cci-auto-2016.lnk [2018-02-16] ShortcutTarget: ob_92a506_cci-auto-2016.lnk -> C:\Users\Utilisateur\Downloads\ob_92a506_cci-auto-2016.exe () ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{43f0e5be-5344-4da9-bd9e-a0f75bdea646}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{90af314a-29ae-4372-8052-33d8ec26241a}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{f140daa8-283f-4714-9dae-08dea15b021a}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-4168484825-1236657811-1665887147-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKU\S-1-5-21-4168484825-1236657811-1665887147-1000 -> DefaultScope {D1A41702-317F-4E35-861B-570FAA5CA910} URL = SearchScopes: HKU\S-1-5-21-4168484825-1236657811-1665887147-1000 -> {D1A41702-317F-4E35-861B-570FAA5CA910} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-03] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-03] (Oracle Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-10-25] (Adobe Systems Incorporated) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-03-01] (Microsoft Corporation) BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-03] (Oracle Corporation) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-03] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-08-05] (pdfforge GmbH) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-03-01] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 2zetsk8p.default FF ProfilePath: C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\2zetsk8p.default [2018-03-04] FF Homepage: Mozilla\Firefox\Profiles\2zetsk8p.default -> hxxps://www.ecosia.org/ FF Session Restore: Mozilla\Firefox\Profiles\2zetsk8p.default -> est activé. FF Extension: (Protection Web Avira) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\2zetsk8p.default\Extensions\abs@avira.com.xpi [2017-12-13] FF Extension: (NoScript) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\2zetsk8p.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2018-02-09] FF Extension: (Video DownloadHelper) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\2zetsk8p.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-02-23] FF Extension: (Adblock Plus) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\2zetsk8p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-12] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-09-06] [Legacy] [non signé] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2017-06-21] [Legacy] [non signé] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => non trouvé(e) FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-06] () FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-03] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-03] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-01] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-29] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-29] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-03] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-03] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-03-01] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-09] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-09] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\21640140.js [2018-02-26] <==== ATTENTION (Pointe vers un fichier *.cfg) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\21640140.cfg [2018-02-26] <==== ATTENTION Chrome: ======= CHR Profile: C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default [2018-03-04] CHR Extension: (Google Slides) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-06] CHR Extension: (Google Docs) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-06] CHR Extension: (Google Drive) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-25] CHR Extension: (YouTube) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-06] CHR Extension: (Recherche Google) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-05-25] CHR Extension: (Google Sheets) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-06] CHR Extension: (Google Docs hors connexion) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-28] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-13] CHR Extension: (Gmail) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-06] CHR Extension: (Chrome Media Router) - C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-13] ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.) R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [104744 2016-10-20] (Alps Electric Co., Ltd.) S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) R2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7962800 2018-02-22] (Microsoft Corporation) S3 CoordinatorServiceHost; C:\Program Files\SolidWorks\swScheduler\DTSCoordinatorService.exe [87336 2010-11-24] (Dassault Systèmes SolidWorks Corp.) R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell) S4 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2571352 2016-01-05] (Dell Inc.) S4 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201816 2016-01-05] (Dell Inc.) R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [121344 2016-11-10] (Dassault Systèmes) [Fichier non signé] R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2625368 2017-06-13] (ESET) R2 Hilti PROFIS AutoUpdate Service; C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe [210944 2017-07-28] (Hilti Corporation) [Fichier non signé] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2017-11-07] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation) S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2672328 2014-07-30] (Invincea, Inc.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-29] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [419304 2017-08-03] (LogMeIn, Inc.) S4 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [525288 2017-08-03] (LogMeIn, Inc.) S4 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2015-06-15] (LogMeIn, Inc.) R2 NVWMI; C:\WINDOWS\system32\nvwmi64.exe [4253592 2017-06-02] (NVIDIA Corporation) R2 O2FLASH; C:\WINDOWS\System32\drivers\o2flash.exe [65536 2014-03-07] (BayHubTech/O2Micro International) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH) S4 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH) S4 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (© pdfforge GmbH.) R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3446224 2015-02-23] (Paramount Software UK Ltd) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [316152 2016-03-01] (Realtek Semiconductor) S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [173256 2014-07-30] (Invincea, Inc.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-11-26] (Microsoft Corporation) S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2017-09-06] (SolidWorks) [Fichier non signé] S4 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31928 2016-03-14] (Dell Inc.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH) R2 Tekla Structures Licensing Service; C:\TeklaStructures\License\Server\lmgrd.exe [1501488 2014-03-13] (Flexera Software LLC) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe [356152 2018-03-01] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe [106280 2018-03-01] (Microsoft Corporation) S4 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6169600 2015-02-25] (Dell Inc.) [Fichier non signé] S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [252816 2015-04-30] (Wondershare) S3 Dell.CommandPowerManager.Service; C:\Windows\SysWOW64\dllhost.exe /Processid:{551DE49A-4142-4643-A7E1-543F01D78DEB} R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 bcbtums; C:\WINDOWS\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.) R3 BCMWL63A; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [11794352 2017-06-21] (Broadcom Corp) R3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [32464 2015-09-11] (Dell Computer Corporation) R3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation) R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [19440 2015-05-08] (OSR Open Systems Resources, Inc.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.) R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d65x64.sys [547840 2015-09-11] (Intel Corporation) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132824 2017-06-22] (ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14880 2017-05-04] (ESET) R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [178056 2017-05-04] (ESET) R1 epfwwfpr; C:\WINDOWS\System32\DRIVERS\epfwwfpr.sys [77224 2017-05-04] (ESET) R3 IntcAzAudAddService; C:\WINDOWS\system32\drivers\RTDVHD64.sys [2602744 2016-03-01] (Realtek Semiconductor Corp.) S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [50696 2014-07-30] (Invincea, Inc.) R2 LMIInfo; C:\WINDOWS\system32\drivers\LMIInfo.sys [30432 2017-01-11] (LogMeIn, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_d7a8661bc29bbf05\nvlddmkm.sys [14462872 2017-06-02] (NVIDIA Corporation) R3 O2FJ2RDR; C:\WINDOWS\System32\drivers\O2FJ2w7x64.sys [210592 2014-05-14] (BayHubTech/O2Micro ) S3 PSMounterEx; C:\Windows\system32\drivers\psmounterex.sys [169480 2015-02-23] (Windows (R) Win 7 DDK provider) S3 PSVolAcc; C:\Windows\System32\Drivers\PSVolAcc.sys [12760 2014-07-21] (Paramount Software UK Ltd) S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [183304 2014-07-30] (Invincea, Inc.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.) R3 ST_Accel; C:\WINDOWS\system32\DRIVERS\ST_Accel.sys [154280 2016-10-12] (STMicroelectronics) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-03-01] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288296 2018-03-01] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129568 2018-03-01] (Microsoft Corporation) U3 idsvc; pas de ImagePath ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-03-04 17:37 - 2018-03-04 17:37 - 000029017 _____ C:\Users\Utilisateur\Desktop\FRST.txt 2018-03-04 17:36 - 2018-03-04 17:37 - 000000000 ____D C:\FRST 2018-03-04 17:35 - 2018-03-04 17:35 - 002403328 _____ (Farbar) C:\Users\Utilisateur\Desktop\FRST64.exe 2018-03-04 17:06 - 2018-03-04 17:06 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2018-03-04 16:58 - 2018-03-04 16:58 - 000000020 ___SH C:\Users\Administrateur.Utilisateur-PC\ntuser.ini 2018-03-04 16:56 - 2018-03-04 17:15 - 000934622 _____ C:\WINDOWS\ntbtlog.txt 2018-03-04 16:49 - 2018-03-04 16:50 - 004586658 _____ C:\Users\Utilisateur\Downloads\CrystalDiskInfo7_5_2(1).zip 2018-03-04 16:40 - 2018-03-04 16:40 - 000000000 ____D C:\Users\Utilisateur\Desktop\test disc 2018-03-04 16:37 - 2018-03-04 16:37 - 004586688 _____ C:\Users\Utilisateur\Downloads\CrystalDiskInfo7_5_2.zip 2018-03-04 16:25 - 2018-03-04 16:25 - 000220218 _____ C:\Users\Utilisateur\Desktop\ZHPDiag.txt 2018-03-04 16:19 - 2018-03-04 16:19 - 000001208 _____ C:\Users\Utilisateur\Desktop\AdwCleaner[S3].txt 2018-03-04 16:13 - 2018-03-04 16:14 - 000020570 _____ C:\Users\Utilisateur\Desktop\ZHPCleaner.html 2018-03-04 16:13 - 2018-03-04 16:14 - 000004070 _____ C:\Users\Utilisateur\Desktop\ZHPCleaner.txt 2018-03-04 16:08 - 2018-03-01 06:53 - 008222496 _____ (Malwarebytes) C:\Users\Utilisateur\Desktop\adwcleaner_7.0.8.0.exe 2018-03-04 16:06 - 2018-03-04 16:06 - 000000883 _____ C:\Users\Utilisateur\Desktop\ZHPCleaner.lnk 2018-03-04 16:05 - 2018-03-04 16:05 - 003094400 _____ C:\Users\Utilisateur\Downloads\ZHPCleaner.exe 2018-03-04 16:05 - 2018-03-04 16:05 - 003094400 _____ C:\Users\Utilisateur\Desktop\ZHPCleaner.exe 2018-03-04 11:08 - 2018-03-02 15:30 - 003030400 _____ C:\Users\Utilisateur\Desktop\ZHPDiag3.exe 2018-03-04 10:02 - 2018-03-04 10:02 - 004729937 _____ C:\Users\Utilisateur\Downloads\24188615_1932977703622147_3428876210069831680_n.mp4 2018-03-03 12:09 - 2018-03-03 12:09 - 000000000 ____D C:\Users\Utilisateur\Desktop\Photoshop V7.0 FR 2018-03-03 08:56 - 2018-03-03 08:56 - 000380526 _____ C:\Users\Utilisateur\Documents\sav registre 2018-03-03.reg 2018-03-02 16:13 - 2018-03-02 16:20 - 002091194 _____ C:\TDSSKiller.3.1.0.16_02.03.2018_16.13.10_log.txt 2018-03-02 16:11 - 2018-03-02 16:11 - 004944584 _____ (AO Kaspersky Lab) C:\Users\Utilisateur\Downloads\tdsskiller.exe 2018-03-02 16:11 - 2018-03-02 16:11 - 000005980 _____ C:\TDSSKiller.3.1.0.16_02.03.2018_16.11.30_log.txt 2018-03-02 16:07 - 2018-03-02 16:07 - 000000756 _____ C:\Users\Utilisateur\AppData\Local\ZHPFixReport.txt 2018-03-02 16:06 - 2018-03-02 16:06 - 000000578 _____ C:\Users\Utilisateur\Desktop\ZHPFixReport.txt 2018-03-02 16:03 - 2018-03-02 16:03 - 000000000 ____D C:\Users\Utilisateur\Desktop\Quarantine 2018-03-02 15:59 - 2018-03-02 15:59 - 000000666 _____ C:\RstHosts.txt 2018-03-02 15:34 - 2018-03-04 16:25 - 000307567 _____ C:\Users\Utilisateur\Desktop\ZHPDiag.html 2018-03-02 15:34 - 2018-03-04 11:11 - 000222677 _____ C:\Users\Utilisateur\Desktop\ZHPDiag 1.txt 2018-03-02 15:27 - 2018-03-04 16:25 - 000000000 ____D C:\Users\Utilisateur\AppData\Roaming\ZHP 2018-03-02 15:27 - 2018-03-04 16:06 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\ZHP 2018-03-02 15:27 - 2018-03-02 15:29 - 000000873 _____ C:\Users\Utilisateur\Desktop\ZHPDiag.lnk 2018-03-02 15:25 - 2018-03-02 15:25 - 000353632 _____ C:\Users\Utilisateur\Downloads\rsthosts_2.0.exe 2018-03-02 15:24 - 2018-03-02 15:24 - 003061760 _____ (Nicolas Coolman) C:\Users\Utilisateur\Downloads\ZHPFix.exe 2018-03-02 15:22 - 2018-03-02 15:30 - 003030400 _____ C:\Users\Utilisateur\Downloads\ZHPDiag3.exe 2018-03-02 15:22 - 2017-06-21 16:43 - 000007013 _____ C:\WINDOWS\system32\Drivers\etc\hosts - Copie 2018-03-02 10:21 - 2018-03-02 10:21 - 000000000 ____D C:\Program Files (x86)\SMath Studio 2018-03-02 10:17 - 2018-03-02 10:21 - 000001145 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMath Studio Desktop.lnk 2018-03-02 10:17 - 2018-03-02 10:21 - 000001133 _____ C:\Users\Public\Desktop\SMath Studio Desktop.lnk 2018-03-02 10:17 - 2018-03-02 10:21 - 000000000 ____D C:\Users\Utilisateur\AppData\Roaming\SMath 2018-03-02 09:49 - 2018-03-02 09:49 - 000043523 _____ C:\Users\Utilisateur\Downloads\CSSEmerg6619.diagcab 2018-03-01 22:49 - 2018-03-01 22:49 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2018-03-01 19:09 - 2018-03-01 19:09 - 001302924 _____ C:\Users\Utilisateur\Desktop\1216 - DIAG GINKO SUPPORT ESC.pdf 2018-03-01 07:00 - 2018-03-01 07:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-03-01 06:54 - 2018-03-04 16:21 - 000000000 ____D C:\AdwCleaner 2018-03-01 06:53 - 2018-03-01 06:53 - 008222496 _____ (Malwarebytes) C:\Users\Utilisateur\Downloads\adwcleaner_7.0.8.0.exe 2018-02-28 11:43 - 2018-02-28 11:43 - 000019314 _____ C:\Users\Utilisateur\Desktop\tmp1.php 2018-02-28 08:42 - 2018-02-28 08:42 - 000000000 ____D C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell 2018-02-27 14:45 - 2018-02-27 14:50 - 000754431 _____ C:\Users\Utilisateur\Desktop\2018 SUIVI SEMAINE L.M.xlsx 2018-02-26 18:16 - 2018-02-26 18:20 - 000000017 _____ C:\Users\Utilisateur\Documents\Cci auto.ini 2018-02-26 18:11 - 2010-12-06 03:16 - 000090112 _____ (Vestris Inc.) C:\WINDOWS\system32\Vestris.ResourceLib.dll 2018-02-26 18:09 - 2018-02-27 14:34 - 000000000 ____D C:\Users\Utilisateur\Downloads\MO16 2018-02-26 18:02 - 2018-02-26 18:02 - 001937408 _____ C:\Users\Utilisateur\Downloads\Microsoft Office 2016 Product Key Generator.iso 2018-02-26 17:45 - 2018-02-26 17:45 - 000002474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000002397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2018-02-26 17:45 - 2018-02-26 17:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016 2018-02-26 17:45 - 2018-02-26 17:45 - 000000000 ____D C:\Program Files\Microsoft Office 15 2018-02-26 17:35 - 2018-03-01 22:49 - 000000000 ____D C:\Program Files\Microsoft Office 2018-02-26 16:48 - 2003-04-18 19:06 - 000008192 _____ C:\WINDOWS\SysWOW64\srvany.exe 2018-02-26 16:36 - 2018-02-26 16:36 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2018-02-26 16:36 - 2018-02-26 16:36 - 000002880 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2018-02-26 16:36 - 2018-02-26 16:36 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2018-02-26 16:36 - 2018-02-26 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2018-02-26 16:36 - 2018-02-26 16:36 - 000000000 ____D C:\Program Files\CCleaner 2018-02-26 16:33 - 2018-02-26 16:33 - 000000000 ___HD C:\Users\Utilisateur\MicrosoftEdgeBackups 2018-02-26 16:29 - 2018-02-26 16:33 - 699004928 _____ C:\Users\Utilisateur\Downloads\OfficeProfessionalPlus_x86_en-us.img 2018-02-26 15:30 - 2018-02-26 15:51 - 1210429440 _____ C:\Users\Utilisateur\Downloads\en_microsoft_office_2013_64bit_dvd.iso 2018-02-26 15:23 - 2018-02-26 15:30 - 806676480 _____ C:\Users\Utilisateur\Downloads\OfficeProfessionalPlus_x64_en-us.img 2018-02-26 14:21 - 2018-03-04 17:14 - 000000090 _____ C:\Users\Utilisateur\Downloads\Cci auto.ini 2018-02-26 13:58 - 2018-02-26 13:58 - 000001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady 7.0.1.lnk 2018-02-26 13:58 - 2018-02-26 13:58 - 000001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 7.0.1.lnk 2018-02-26 13:57 - 1998-11-05 11:08 - 000087392 _____ (Twain Working Group) C:\WINDOWS\twain.dll 2018-02-25 18:07 - 2018-02-25 18:07 - 000000000 ____D C:\Users\Utilisateur\Desktop\diag ingeba 2018-02-23 17:21 - 2018-02-23 17:21 - 000000000 ____D C:\Users\Utilisateur\Desktop\ROVIARO 2018-02-21 10:26 - 2018-02-21 10:43 - 003103248 _____ C:\Users\Utilisateur\Desktop\pro-COACH EC5-v3.xlsx 2018-02-21 10:25 - 2018-02-21 10:26 - 004792562 _____ C:\Users\Utilisateur\Desktop\pro-sollicitations EC1.xlsx 2018-02-21 09:26 - 2018-02-21 09:26 - 000096969 _____ C:\Users\Utilisateur\Desktop\tmp.pdf 2018-02-17 10:28 - 2018-02-21 09:18 - 000868352 _____ C:\Users\Utilisateur\Desktop\CIAP - poutre 4.rtd 2018-02-17 10:06 - 2018-02-17 10:06 - 000000982 _____ C:\Users\Utilisateur\Documents\teste macro outlook.txt 2018-02-16 12:22 - 2018-02-16 12:22 - 000979968 _____ C:\Users\Utilisateur\Downloads\ob_92a506_cci-auto-2016.exe 2018-02-14 12:05 - 2018-02-14 12:05 - 000002126 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2018-02-09 17:40 - 2018-02-09 17:41 - 000000000 ____D C:\Users\Utilisateur\Desktop\A18-1457 SUPPORT PILE PI 133 - Béziers (34) 2018-02-09 12:58 - 2018-02-09 12:58 - 000002289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk 2018-02-09 12:58 - 2018-02-09 12:58 - 000002251 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk 2018-02-07 10:57 - 2018-02-07 10:57 - 000246115 _____ C:\Users\Utilisateur\Desktop\DEVIS 2018-02-04.pdf 2018-02-07 10:53 - 2018-02-07 10:53 - 000334886 _____ C:\Users\Utilisateur\Desktop\1444 - cable support ligne NC 2 pre-tension.pdf 2018-02-07 09:37 - 2018-02-07 09:37 - 000265129 _____ C:\Users\Utilisateur\Desktop\1444 - cable support ligne.pdf 2018-02-06 11:18 - 2018-02-06 11:23 - 000001508 _____ C:\Users\Public\Desktop\Crane Runway Designer.lnk 2018-02-06 11:18 - 2018-02-06 11:23 - 000001260 _____ C:\WINDOWS\csi.ini 2018-02-06 11:18 - 2018-02-06 11:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graitec 2018-02-06 11:18 - 2018-02-06 11:18 - 000000000 ____D C:\ProgramData\Graitec 2018-02-06 11:18 - 2018-02-06 11:18 - 000000000 ____D C:\Program Files (x86)\Graitec 2018-02-06 11:18 - 2018-02-06 11:18 - 000000000 ____D C:\Graitec 2018-02-06 10:43 - 2018-02-06 13:26 - 000374784 _____ C:\Users\Utilisateur\Desktop\CTICM - chemin de roulement-12Tx9m-et4.4.xls 2018-02-02 14:16 - 2018-02-02 14:16 - 024979349 _____ C:\Users\Utilisateur\Desktop\plaque amoto.psd 2018-02-02 14:16 - 2018-02-02 14:16 - 017772510 _____ C:\Users\Utilisateur\Desktop\2 plaque moto B.pdf 2018-02-02 14:07 - 2018-02-02 14:07 - 018591546 _____ C:\Users\Utilisateur\Desktop\2 plaque moto.pdf 2018-02-02 13:34 - 2018-02-02 13:34 - 037723672 _____ C:\Users\Utilisateur\Desktop\8 plaque auto.pdf 2018-02-02 13:33 - 2018-02-02 13:33 - 049223538 _____ C:\Users\Utilisateur\Desktop\plaque auto.psd ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-03-04 17:30 - 2018-01-01 11:54 - 005381676 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-03-04 17:30 - 2017-09-30 15:39 - 002675154 _____ C:\WINDOWS\system32\perfh00C.dat 2018-03-04 17:30 - 2017-09-30 15:39 - 000707910 _____ C:\WINDOWS\system32\perfc00C.dat 2018-03-04 17:26 - 2018-01-01 12:03 - 000004188 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{74B65537-9B47-4E7A-931C-9BB6B749ADD5} 2018-03-04 17:23 - 2018-01-01 12:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-03-04 17:23 - 2017-09-29 09:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-03-04 17:23 - 2017-06-26 07:27 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2018-03-04 17:23 - 2016-11-17 09:44 - 000000000 ____D C:\Users\Utilisateur\AppData\LocalLow\Mozilla 2018-03-04 17:23 - 2016-10-20 07:31 - 000000000 ____D C:\ProgramData\NVIDIA 2018-03-04 17:23 - 2016-05-30 08:09 - 000000000 __SHD C:\Users\Utilisateur\IntelGraphicsProfiles 2018-03-04 16:58 - 2018-01-01 11:58 - 000000000 ____D C:\Users\Administrateur.Utilisateur-PC 2018-03-04 16:28 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2018-03-03 20:09 - 2017-12-01 11:34 - 000000000 ____D C:\Users\Utilisateur\Documents\achat maison 2018-03-03 17:29 - 2018-01-01 11:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-03-03 08:55 - 2017-12-19 08:44 - 000000000 ___DC C:\WINDOWS\Panther 2018-03-03 08:55 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF 2018-03-03 08:55 - 2016-09-06 13:05 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\PDFCreator 2018-03-03 08:55 - 2016-09-06 13:04 - 000000000 ____D C:\Program Files\PDFCreator 2018-03-03 08:55 - 2015-10-20 15:51 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\CrashDumps 2018-03-03 08:55 - 2015-10-06 07:43 - 000000000 ____D C:\ProgramData\LogMeIn 2018-03-03 08:52 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps 2018-03-03 08:52 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-03-02 18:52 - 2017-06-01 07:36 - 000000000 ____D C:\Users\Utilisateur\Documents\Fichiers Outlook 2018-03-02 12:14 - 2018-01-01 11:59 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\Packages 2018-03-02 10:20 - 2016-07-03 09:01 - 000000000 ____D C:\Users\Utilisateur\AppData\Roaming\vlc 2018-03-02 10:03 - 2017-06-01 14:58 - 000000000 ____D C:\Users\Utilisateur\Documents\OUTILS DE CALCUL 2018-03-02 09:51 - 2017-01-02 10:57 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\ElevatedDiagnostics 2018-03-01 22:49 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-03-01 22:49 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2018-03-01 10:25 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache 2018-03-01 09:10 - 2017-07-17 17:05 - 000000000 ____D C:\ProgramData\ArcelorMittal ABC 2018-03-01 07:10 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender 2018-02-28 19:25 - 2018-01-01 12:03 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2018-02-28 12:27 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-02-27 14:34 - 2017-09-06 14:59 - 000000000 ____D C:\Program Files\SolidWorks 2018-02-27 07:18 - 2015-10-05 18:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-02-26 17:55 - 2018-01-01 11:51 - 000538440 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-02-26 17:40 - 2017-09-29 15:08 - 000001954 _____ C:\Users\Utilisateur\Desktop\PDFsam Basic.lnk 2018-02-26 17:40 - 2017-09-19 08:20 - 000001119 _____ C:\Users\Utilisateur\Desktop\PotFire v3.2.2.lnk 2018-02-26 17:40 - 2017-09-19 07:41 - 000001968 _____ C:\Users\Utilisateur\Desktop\R15.lnk 2018-02-26 17:40 - 2017-07-17 17:05 - 000001035 _____ C:\Users\Utilisateur\Desktop\ABC v3.21.lnk 2018-02-26 17:40 - 2017-07-12 10:05 - 000002386 _____ C:\Users\Utilisateur\Desktop\SPIT i-Expert.lnk 2018-02-26 17:40 - 2017-07-11 15:25 - 000001882 _____ C:\Users\Utilisateur\Desktop\Bemessung KLH V17.lnk 2018-02-26 17:40 - 2017-07-11 14:51 - 000001709 _____ C:\Users\Utilisateur\Desktop\Photoshop.lnk 2018-02-26 17:20 - 2015-02-25 08:16 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-02-26 17:19 - 2018-01-01 11:44 - 000000000 ____D C:\Program Files (x86)\MSBuild 2018-02-26 17:19 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\system 2018-02-26 17:19 - 2009-07-14 03:34 - 000000419 _____ C:\WINDOWS\win.ini 2018-02-26 16:33 - 2018-01-01 11:58 - 000000000 ____D C:\Users\Utilisateur 2018-02-26 16:00 - 2017-07-11 09:11 - 000000684 ____H C:\os110921.bin 2018-02-26 15:38 - 2015-10-06 07:46 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\ESET 2018-02-26 14:14 - 2016-11-17 09:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-02-25 17:47 - 2017-04-13 13:48 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-02-21 10:19 - 2017-12-01 15:29 - 000000000 ____D C:\Users\Utilisateur\Documents\Modèles Office personnalisés 2018-02-13 21:22 - 2015-10-05 17:00 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-02-13 21:10 - 2017-10-16 16:26 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2018-02-13 21:10 - 2015-10-05 17:00 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-02-12 08:13 - 2015-10-05 18:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-02-10 17:29 - 2015-10-05 18:25 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-02-09 12:58 - 2015-10-05 18:27 - 000000000 ____D C:\Program Files (x86)\Google 2018-02-07 14:27 - 2017-06-02 14:07 - 000000000 ____D C:\Users\Utilisateur\Documents\mecanique 2018-02-06 14:00 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-02-06 14:00 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-02-06 11:51 - 2015-10-06 00:02 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\VirtualStore 2018-02-06 11:19 - 2015-10-08 09:29 - 000000000 ____D C:\ProgramData\FLEXnet 2018-02-04 15:12 - 2017-08-23 12:27 - 000000000 ____D C:\Users\Utilisateur\Documents\association VELOCE team ==================== Fichiers à la racine de certains dossiers ======= 2014-06-25 10:34 - 2014-06-25 10:34 - 000079615 _____ () C:\ProgramData\RemoveCS_fr.exe 2017-10-18 14:46 - 2017-10-18 14:46 - 000003584 _____ () C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-08-23 10:05 - 2016-08-23 10:05 - 000007609 _____ () C:\Users\Utilisateur\AppData\Local\Resmon.ResmonCfg 2018-03-02 16:07 - 2018-03-02 16:07 - 000000756 _____ () C:\Users\Utilisateur\AppData\Local\ZHPFixReport.txt 2017-03-03 09:05 - 2017-03-03 09:05 - 000000000 _____ () C:\Users\Utilisateur\AppData\Local\{1069E728-021B-4A43-A03D-5C4B4F5BE3AA} 2017-08-04 18:44 - 2017-08-04 18:44 - 000000000 _____ () C:\Users\Utilisateur\AppData\Local\{160F7C4A-2019-4FF5-AAE6-E6BAC4E9DC36} ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2018-02-22 10:52 ==================== Fin de FRST.txt ============================