Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30.01.2019 Exécuté par juju (administrateur) sur JULIETTE (03-02-2019 12:18:37) Exécuté depuis C:\Users\juju\Downloads Profils chargés: juju (Profils disponibles: juju & Administrateur & Invité) Platform: Windows 8.1 (Update) (X64) Langue: Français (France) Navigateur par défaut: Chrome Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (McAfee, LLC) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\ModuleCore\ModuleCoreService.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\MMSSHost\MMSSHOST.exe (McAfee, LLC) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\ModuleCore\ProtectedModuleHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\PEF\CORE\PEFService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (McAfee, LLC) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\3.0.127.0\McCSPServiceHost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (McAfee, LLC) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\VSCore_18_9\mcapexe.exe (McAfee, Inc.) C:\Program Files\mcafee\MfeAV\MfeAVSvc.exe (McAfee LLC.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (McAfee Inc.) C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.895\SSScheduler.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\ModuleCore\ModuleCoreService.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe () C:\Users\juju\Downloads\saSetup.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\Temp3537703993\saInst.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Update\1.3.33.23\GoogleCrashHandler.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Update\1.3.33.23\GoogleCrashHandler64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\juju\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor) HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-25] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare) HKU\S-1-5-21-1004118014-869145512-2121120529-1001\...\Run: [Google Update] => C:\Users\juju\AppData\Local\Google\Update\1.3.33.23\GoogleUpdateCore.exe [605992 2018-12-19] (Google Inc.) HKU\S-1-5-21-1004118014-869145512-2121120529-1001\...\Run: [McAfeeSafeConnect] => C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe [1112960 2018-03-14] (McAfee Inc.) HKU\S-1-5-21-1004118014-869145512-2121120529-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-01-10] (Piriform Software Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2019-02-03] ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2018-12-16] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.895\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: 0.0.0.1 mssplus.mcafee.com Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{2D40DA36-2D15-4FC6-AB9C-0A1824C19B36}: [DhcpNameServer] 40.54.1.18 Tcpip\..\Interfaces\{7CF15728-24AF-42AA-BB47-551D3A073DA4}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{C6EDBEF4-4A4E-4E4D-B1DD-F23FBFF85DE1}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-1004118014-869145512-2121120529-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/ HKU\S-1-5-21-1004118014-869145512-2121120529-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKU\S-1-5-21-1004118014-869145512-2121120529-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1004118014-869145512-2121120529-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-01-11] (Microsoft Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Pas de fichier Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-11] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-11] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-11] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-11] (Microsoft Corporation) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Pas de fichier Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2018-09-28] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2018-09-28] (McAfee, Inc.) FireFox: ======== FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => non trouvé(e) FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2018-11-20] [Legacy] [non signé] FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2018-09-28] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2018-09-28] () FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-12-02] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1004118014-869145512-2121120529-1001: @tools.google.com/Google Update;version=3 -> C:\Users\juju\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.) FF Plugin HKU\S-1-5-21-1004118014-869145512-2121120529-1001: @tools.google.com/Google Update;version=9 -> C:\Users\juju\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.) Chrome: ======= CHR NewTab: Default -> Not-active:"chrome-extension://iekdaegkmghillhfecnncgepaapdfcgf/newtabproduct.html" CHR DefaultSearchURL: Default -> hxxps://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&enableSearch=true&rdrct=no&redirect=CPC CHR DefaultSearchKeyword: Default -> askws CHR DefaultSuggestURL: Default -> hxxps://ss.search.ask.com/ss?li=ff&sstype=prefix&limit=10&hl=en&q={searchTerms}&enableSearch=true&rdrct=no CHR Profile: C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default [2019-02-03] CHR Extension: (Slides) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-17] CHR Extension: (Docs) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-17] CHR Extension: (Google Drive) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-17] CHR Extension: (YouTube) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-17] CHR Extension: (Adobe Acrobat) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-11-24] CHR Extension: (Sheets) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-17] CHR Extension: (Google Docs hors connexion) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-17] CHR Extension: (AdBlock) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-01-30] CHR Extension: (LearnTheLyrics) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\iekdaegkmghillhfecnncgepaapdfcgf [2018-11-24] CHR Extension: (Ask Web Search) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2019-01-28] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-17] CHR Extension: (Gmail) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-17] CHR Extension: (Chrome Media Router) - C:\Users\juju\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-19] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUS) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [Fichier non signé] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9619816 2019-01-04] (Microsoft Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 LPDSVC; C:\WINDOWS\system32\lpdsvc.dll [48128 2018-11-20] (Microsoft Corporation) S3 McAfee Vpn Service; C:\Program Files (x86)\McAfee Safe Connect\service\VpnService.exe [314368 2018-03-06] (AnchorFree Inc.) [Fichier non signé] R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_18_9\McApExe.exe [736048 2018-10-26] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334760 2012-12-21] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.895\McCHSvc.exe [405392 2018-12-11] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\\McCSPServiceHost.exe [2159464 2018-06-29] (McAfee, Inc.) S2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [695240 2018-07-13] (McAfee, Inc.) S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [366960 2018-08-27] (McAfee, LLC) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [590712 2018-08-27] (McAfee, LLC) R3 mfevtp; C:\windows\system32\mfevtps.exe [499576 2018-08-27] (McAfee, LLC) R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1690976 2018-09-25] (McAfee, Inc.) R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [1316024 2018-07-25] (McAfee, Inc.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2018-11-20] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2018-11-20] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 aftap0901; C:\WINDOWS\system32\DRIVERS\aftap0901.sys [48624 2018-03-06] (The OpenVPN Project) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [70928 2013-11-08] (ASUS Corporation) R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [77120 2018-10-04] (McAfee, LLC) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.) S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [235784 2018-10-03] (McAfee, Inc.) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-01] ( ) R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [508736 2018-10-04] (McAfee, LLC) R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [371520 2018-10-04] (McAfee, LLC) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85632 2018-10-04] (McAfee, LLC) R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [515392 2018-10-04] (McAfee, LLC) R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [975168 2018-10-04] (McAfee, LLC) R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [560944 2018-10-02] (McAfee LLC.) S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [108840 2018-10-02] (McAfee LLC.) R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [117568 2018-10-04] (McAfee, LLC) R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [253760 2018-10-04] (McAfee, LLC) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46600 2018-11-20] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [274776 2018-11-20] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2018-11-20] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2019-02-03 12:12 - 2019-02-03 12:13 - 000035391 _____ C:\Users\juju\Downloads\Addition.txt 2019-02-03 12:10 - 2019-02-03 12:18 - 000022056 _____ C:\Users\juju\Downloads\FRST.txt 2019-02-03 12:08 - 2019-02-03 12:18 - 000000000 ____D C:\FRST 2019-02-03 12:07 - 2019-02-03 12:07 - 002428928 _____ (Farbar) C:\Users\juju\Downloads\FRST64.exe 2019-02-03 12:04 - 2019-02-03 12:04 - 001788416 _____ (Farbar) C:\Users\juju\Downloads\FRST.exe 2019-02-03 11:59 - 2019-02-03 11:59 - 000000600 _____ C:\Users\juju\Desktop\fixlist.txt.txt 2019-02-03 11:52 - 2019-02-03 11:55 - 000000000 ____D C:\Program Files\CCleaner 2019-02-03 11:52 - 2019-02-03 11:52 - 000003870 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2019-02-03 11:52 - 2019-02-03 11:52 - 000002806 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2019-02-03 11:52 - 2019-02-03 11:52 - 000000836 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-02-03 11:52 - 2019-02-03 11:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2019-02-03 11:48 - 2019-02-03 11:51 - 019350312 _____ (Piriform Software Ltd) C:\Users\juju\Downloads\cctrialsetup.exe 2019-02-03 11:45 - 2019-02-03 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2019-02-03 11:35 - 2019-02-03 11:35 - 000000000 ____D C:\Users\juju\AppData\Local\ElevatedDiagnostics 2019-02-03 11:34 - 2019-02-03 11:34 - 000003128 _____ C:\WINDOWS\System32\Tasks\{833ADDB3-E8C5-454A-B46F-6F264F200C6F} 2019-02-03 11:33 - 2019-02-03 11:37 - 014313456 _____ C:\Users\juju\Downloads\saSetup.exe 2019-02-03 11:30 - 2019-02-03 11:30 - 000003096 _____ C:\WINDOWS\System32\Tasks\{1E1DD3F7-5B42-419F-BEC9-23B8D8C46426} 2019-02-02 19:18 - 2019-02-02 19:18 - 000301214 _____ C:\Users\juju\Downloads\Sous marin alistar corr AFS (1).pdf 2019-02-02 18:53 - 2019-02-02 18:53 - 000034467 _____ C:\Users\juju\Downloads\pdfcrack-0.16 (1).tar.gz 2019-02-02 18:51 - 2019-02-02 18:51 - 000034467 _____ C:\Users\juju\Downloads\pdfcrack-0.16.tar.gz 2019-02-02 18:48 - 2019-02-02 19:25 - 000000000 ____D C:\Users\juju\Documents\Wondershare PDF Password Remover 2019-02-02 18:47 - 2019-02-02 18:47 - 000000000 ____D C:\Users\juju\AppData\Local\Wondershare 2019-02-02 18:46 - 2019-02-02 18:46 - 000001297 _____ C:\Users\Public\Desktop\Wondershare PDF Password Remover.lnk 2019-02-02 18:46 - 2019-02-02 18:46 - 000000000 ____D C:\Users\juju\AppData\Roaming\Wondershare 2019-02-02 18:46 - 2019-02-02 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare 2019-02-02 18:46 - 2019-02-02 18:46 - 000000000 ____D C:\Program Files (x86)\Wondershare 2019-02-02 18:42 - 2019-02-02 18:43 - 010429960 _____ (Wondershare Software ) C:\Users\juju\Downloads\pdf-password-remover_full2331.exe 2019-02-02 18:39 - 2019-02-02 18:39 - 000301214 _____ C:\Users\juju\Downloads\Sous marin alistar corr AFS.pdf 2019-01-30 17:57 - 2019-01-30 17:57 - 001008548 _____ C:\Users\juju\Desktop\Document Scannable le 20 janv. 2019 à 13_42_11.pdf 2019-01-29 05:28 - 2019-01-29 05:29 - 000286064 _____ C:\WINDOWS\Minidump\012919-43687-01.dmp 2019-01-28 19:32 - 2019-01-28 19:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flowcode 8 2019-01-28 19:32 - 2019-01-28 19:32 - 000000000 ____D C:\ProgramData\MatrixTSL 2019-01-28 19:31 - 2019-01-28 19:31 - 000000000 ____D C:\Program Files (x86)\Flowcode v8 2019-01-28 19:19 - 2019-01-28 19:29 - 198766592 _____ C:\Users\juju\Downloads\FlowcodeV8_Installer.msi 2019-01-20 18:28 - 2019-01-20 18:28 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2019-01-20 16:07 - 2019-01-20 16:07 - 000000000 _____ C:\Users\juju\Desktop\Nouveau document texte (2).txt 2019-01-20 16:04 - 2019-01-20 16:04 - 000000000 ____D C:\ProgramData\Microsoft SkyDrive 2019-01-20 15:52 - 2019-01-20 15:52 - 000000000 ___RH C:\Users\juju\Desktop\Nouveau document texte.txt 2019-01-20 10:56 - 2019-01-20 10:57 - 025797165 _____ C:\Users\juju\Downloads\[Free-scores.com]_klos-eacute-hyacinthe-elanore-thode-compla-clarinette-klosa-texte-anglais-complete-score-22897.pdf 2019-01-20 10:42 - 2019-01-20 10:43 - 000089628 _____ C:\Users\juju\Desktop\tablature-de-clarinette-sib.pdf 2019-01-19 14:54 - 2019-01-19 14:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2019-01-17 10:44 - 2019-01-17 10:44 - 000052950 _____ C:\Users\juju\Desktop\ci m.dominique.pdf 2019-01-17 10:43 - 2019-01-17 10:43 - 000052950 _____ C:\Users\juju\Downloads\DOC359.pdf 2019-01-16 07:16 - 2019-01-16 07:16 - 000005641 _____ C:\Users\juju\Downloads\Historique de commande (5).xlsx 2019-01-16 07:15 - 2019-01-16 07:15 - 000005641 _____ C:\Users\juju\Downloads\Historique de commande (4).xlsx 2019-01-16 07:15 - 2019-01-16 07:15 - 000005641 _____ C:\Users\juju\Downloads\Historique de commande (3).xlsx 2019-01-16 07:15 - 2019-01-16 07:15 - 000005641 _____ C:\Users\juju\Downloads\Historique de commande (2).xlsx 2019-01-16 07:15 - 2019-01-16 07:15 - 000005641 _____ C:\Users\juju\Downloads\Historique de commande (1).xlsx 2019-01-14 14:15 - 2019-01-14 14:15 - 000030831 _____ C:\Users\juju\Downloads\7200.pdf 2019-01-14 12:29 - 2019-01-14 12:30 - 000141907 _____ C:\Users\juju\Documents\com janv signé.pdf 2019-01-14 12:28 - 2019-01-14 12:28 - 000141907 _____ C:\Users\juju\Documents\com janv.pdf 2019-01-14 12:18 - 2019-01-30 10:38 - 000142822 _____ C:\Users\juju\Desktop\com janv.PDF 2019-01-14 12:17 - 2019-01-14 12:17 - 000023734 _____ C:\Users\juju\Downloads\SD_201812.PDF 2019-01-14 11:47 - 2019-01-14 11:47 - 000130973 _____ C:\Users\juju\Documents\RIB LA POSTE JULIETTEr_rib.pdf 2019-01-14 11:40 - 2019-01-14 11:50 - 000057639 _____ C:\Users\juju\Desktop\ReleveIdentiteBancaire la poste.pdf 2019-01-12 15:07 - 2018-12-10 18:04 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2019-01-11 15:10 - 2019-01-19 14:54 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002420 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2019-01-11 15:10 - 2019-01-19 14:54 - 000002382 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2019-01-09 07:38 - 2019-01-09 07:38 - 000178819 _____ C:\Users\juju\Desktop\demande RBST TVA.pdf 2019-01-09 07:37 - 2019-01-09 07:37 - 000178819 _____ C:\Users\juju\Downloads\JULIDAB RBST TVA.pdf 2019-01-09 07:21 - 2019-01-09 07:21 - 000210047 _____ C:\Users\juju\Desktop\tva_16_ca12.pdf 2019-01-09 07:20 - 2019-01-09 07:20 - 000210047 _____ C:\Users\juju\Downloads\tva_16_ca12.pdf 2019-01-09 07:15 - 2019-01-09 07:16 - 000128645 _____ C:\Users\juju\Downloads\Fwd__DOCS_BILAN_2016_POSITIVE_FORME.zip 2019-01-09 04:10 - 2019-01-02 15:05 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-01-09 04:10 - 2019-01-02 15:05 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-01-09 04:05 - 2019-01-09 04:05 - 000286064 _____ C:\WINDOWS\Minidump\010919-45312-01.dmp 2019-01-08 15:41 - 2018-12-27 22:12 - 000444368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-01-08 15:41 - 2018-12-27 22:12 - 000178128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2019-01-08 15:41 - 2018-12-27 20:24 - 000333768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-01-08 15:41 - 2018-12-27 20:01 - 025738240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-01-08 15:41 - 2018-12-27 19:38 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-01-08 15:41 - 2018-12-27 19:36 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-01-08 15:41 - 2018-12-27 19:31 - 005778944 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-01-08 15:41 - 2018-12-27 19:25 - 020279808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-01-08 15:41 - 2018-12-27 19:25 - 000790016 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2019-01-08 15:41 - 2018-12-27 19:17 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2019-01-08 15:41 - 2018-12-27 19:05 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-01-08 15:41 - 2018-12-27 19:02 - 002295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-01-08 15:41 - 2018-12-27 18:56 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2019-01-08 15:41 - 2018-12-27 18:55 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2019-01-08 15:41 - 2018-12-27 18:50 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2019-01-08 15:41 - 2018-12-27 18:49 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2019-01-08 15:41 - 2018-12-27 18:48 - 015284224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-01-08 15:41 - 2018-12-27 18:48 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2019-01-08 15:41 - 2018-12-27 18:48 - 000728064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2019-01-08 15:41 - 2018-12-27 18:48 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2019-01-08 15:41 - 2018-12-27 18:47 - 001441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-01-08 15:41 - 2018-12-27 18:45 - 002135552 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-01-08 15:41 - 2018-12-27 18:41 - 000963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-01-08 15:41 - 2018-12-27 18:34 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2019-01-08 15:41 - 2018-12-27 18:33 - 004860416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-01-08 15:41 - 2018-12-27 18:33 - 004494848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-01-08 15:41 - 2018-12-27 18:31 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2019-01-08 15:41 - 2018-12-27 18:29 - 013680640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-01-08 15:41 - 2018-12-27 18:29 - 002060288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-01-08 15:41 - 2018-12-27 18:29 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2019-01-08 15:41 - 2018-12-27 18:29 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2019-01-08 15:41 - 2018-12-27 18:24 - 000780800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-01-08 15:41 - 2018-12-27 18:22 - 001555968 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-01-08 15:41 - 2018-12-27 18:11 - 004386816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-01-08 15:41 - 2018-12-27 18:11 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2019-01-08 15:41 - 2018-12-27 18:11 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2019-01-08 15:41 - 2018-12-27 18:07 - 001329664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-01-08 15:41 - 2018-12-27 18:06 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2019-01-08 15:41 - 2018-12-27 18:05 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2019-01-08 15:41 - 2018-12-08 16:22 - 007371720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-01-08 15:41 - 2018-12-08 16:22 - 002014152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-01-08 15:41 - 2018-12-08 15:00 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys 2019-01-08 15:41 - 2018-12-08 07:23 - 000121272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2019-01-08 15:41 - 2018-12-08 04:13 - 002534664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-01-08 15:41 - 2018-12-08 02:25 - 002173040 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2019-01-08 15:41 - 2018-12-08 01:56 - 001901896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-01-08 15:41 - 2018-12-08 01:32 - 001563376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2019-01-08 15:41 - 2018-12-07 23:49 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2019-01-08 15:41 - 2018-12-07 10:24 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-01-08 15:41 - 2018-11-28 04:34 - 000323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2019-01-08 15:41 - 2018-11-28 04:17 - 000200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2019-01-06 22:07 - 2019-01-06 22:07 - 000593408 _____ C:\Users\juju\Downloads\DIPLOME 10 KGS (3).pub 2019-01-04 07:55 - 2019-01-04 07:57 - 032958784 _____ C:\Users\juju\Downloads\C460_Series_WIN_Scanner_V3.31.37.03.exe 2019-01-04 07:54 - 2019-01-04 07:57 - 051128640 _____ C:\Users\juju\Downloads\C460_Series_WIN_SPL_PCL_V3.13.06.00.12.exe 2019-01-04 07:46 - 2019-01-04 07:49 - 000000000 ____D C:\Users\juju\AppData\Roaming\Solvusoft ==================== Un mois (modifiés) ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2019-02-03 12:00 - 2014-04-26 05:57 - 000003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2019-02-03 12:00 - 2014-04-26 05:57 - 000003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2019-02-03 11:51 - 2018-11-15 19:09 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1004118014-869145512-2121120529-1001 2019-02-03 11:46 - 2018-11-15 19:03 - 000000062 _____ C:\Users\juju\AppData\Roaming\sp_data.sys 2019-02-03 11:45 - 2018-12-16 01:42 - 000000000 ____D C:\ProgramData\McAfee Security Scan 2019-02-03 11:43 - 2013-04-25 19:18 - 000000000 ____D C:\Program Files (x86)\McAfee 2019-02-03 11:31 - 2013-04-25 19:18 - 000000000 ____D C:\ProgramData\McAfee 2019-02-03 10:13 - 2018-12-02 05:08 - 000003932 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5D640FD1-C4E1-4A6E-B07C-BBBE2DCA48A8} 2019-01-30 05:32 - 2018-11-20 16:31 - 000000000 ____D C:\Users\juju 2019-01-29 05:33 - 2013-08-22 09:36 - 000000000 ____D C:\WINDOWS\Inf 2019-01-29 05:29 - 2013-08-22 10:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-01-29 05:29 - 2013-08-22 09:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM 2019-01-29 05:28 - 2018-12-07 06:56 - 564232044 _____ C:\WINDOWS\MEMORY.DMP 2019-01-29 05:28 - 2018-12-07 06:56 - 000000000 ____D C:\WINDOWS\Minidump 2019-01-27 13:45 - 2018-12-02 14:43 - 000003170 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1004118014-869145512-2121120529-1001 2019-01-27 13:45 - 2018-12-02 14:43 - 000002335 _____ C:\Users\juju\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive Entreprise.lnk 2019-01-20 15:59 - 2013-08-22 09:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI 2019-01-20 15:54 - 2018-12-02 13:35 - 000002710 _____ C:\Users\juju\Desktop\activation.cmd 2019-01-19 14:55 - 2013-08-22 11:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-01-19 14:53 - 2018-12-02 13:48 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2019-01-14 09:10 - 2013-08-22 11:36 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-01-09 15:42 - 2018-11-15 19:02 - 000000000 ____D C:\Users\juju\AppData\Local\Packages 2019-01-09 04:22 - 2013-08-22 11:36 - 000000000 ____D C:\WINDOWS\rescache 2019-01-09 04:05 - 2013-08-22 10:44 - 000503280 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-01-08 15:54 - 2012-07-26 03:59 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-01-08 15:49 - 2018-11-16 17:02 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-01-08 15:46 - 2018-11-16 17:02 - 132790320 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-01-08 11:26 - 2014-10-02 21:05 - 000000000 ____D C:\Users\juju\Desktop\HERBALIFE 2019-01-08 09:39 - 2014-11-20 18:46 - 001817064 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-01-08 09:39 - 2014-11-20 18:03 - 000806842 _____ C:\WINDOWS\system32\perfh00C.dat 2019-01-08 09:39 - 2014-11-20 18:03 - 000156662 _____ C:\WINDOWS\system32\perfc00C.dat 2019-01-08 09:05 - 2016-03-13 21:49 - 000000000 ____D C:\Users\juju\Desktop\MAISONS PRODUCTIVES 2019-01-06 22:04 - 2018-11-24 01:41 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-01-04 08:28 - 2018-11-15 19:02 - 000000000 ____D C:\Users\juju\AppData\Local\VirtualStore ==================== Fichiers à la racine de certains dossiers ======= 2018-11-15 19:03 - 2019-02-03 11:46 - 000000062 _____ () C:\Users\juju\AppData\Roaming\sp_data.sys Certains fichiers dans TEMP: ==================== 2018-11-24 01:48 - 2018-11-24 01:48 - 000290304 _____ (Microsoft Corporation) C:\Users\juju\AppData\Local\Temp\CakeTubeSdk.Windows.Service.subinacl.exe 2018-12-01 11:47 - 2018-12-01 11:47 - 004485976 _____ (Microsoft Corporation) C:\Users\juju\AppData\Local\Temp\dwl38D7.tmp.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dllhost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dllhost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2019-01-29 05:18 ==================== Fin de FRST.txt ============================