Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 26-12-2017
Exécuté par TIFENN (administrateur) sur AUFFRET (26-12-2017 18:20:05)
Exécuté depuis C:\Users\TIFENN\Desktop
Profils chargés: TIFENN (Profils disponibles: TIFENN)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Hanwang Technology Co.,Ltd. ) C:\Program Files\ASUS\ASUS FaceID\HWFaceKeyService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
() C:\Windows\Mobile_Series_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\vivokey.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(GIE SESAM VITALE - ASIP SANTE) C:\Windows\galsvw32.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.15.587\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804360 2016-04-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.15.587\ASUSWSLoader.exe [63968 2017-04-25] (ASUS Cloud Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\...\MountPoints2: {1ac19b64-63bd-11e7-826d-54a050a829a4} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{741E1E30-207F-465F-B08D-B093F51783EB}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{D0625A0F-4BE7-4335-BC52-7CA1D36C48C3}: [DhcpNameServer] 30.50.1.1 30.50.1.2
Internet Explorer:
==================
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-01] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-01] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
FireFox:
========
FF DefaultProfile: hcdn4wpg.default
FF ProfilePath: C:\Users\TIFENN\AppData\Roaming\Mozilla\Firefox\Profiles\hcdn4wpg.default [2017-12-26]
FF Homepage: Mozilla\Firefox\Profiles\hcdn4wpg.default -> www.google.fr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-12] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-01] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.fr/
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default [2017-12-26]
CHR Extension: (Slides) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-16]
CHR Extension: (YouTube) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-16]
CHR Extension: (Sheets) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-16]
CHR Extension: (Flash Control) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\hloblpeplfiajnfdengendhdnpmdgagn [2017-12-26]
CHR Extension: (Switch to Flash® Player for YouTube™) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibobiggeplcacanpackkgnikelndfjpo [2017-10-17]
CHR Extension: (Post to Tumblr) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipkpjkniknhaojcebeaallaglkmhlcno [2017-08-30]
CHR Extension: (Flash Player for YouTube™) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\lljhpdalfpihmdokpgmobnbeibbkignc [2017-10-19]
CHR Extension: (Flashcontrol) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2017-06-16]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-26]
CHR Extension: (Gmail) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-16]
CHR Extension: (Chrome Media Router) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-09]
CHR Profile: C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\System Profile [2017-06-16]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASUS FaceID Service; C:\Program Files\ASUS\ASUS FaceID\HWFaceKeyService.exe [261648 2013-10-24] (Hanwang Technology Co.,Ltd. )
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Fichier non signé]
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-10-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [828656 2013-11-18] (Condusiv Technologies)
R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2017-04-13] (Foxit Software Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 Mobile_Series; C:\Windows\Mobile_Series_Service.exe [32768 2015-02-12] () [Fichier non signé]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-03-31] (ASUS Corporation)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25840 2013-11-18] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [117488 2013-11-18] (Condusiv Technologies)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 m76usb; C:\Windows\System32\drivers\m76usb.sys [539336 2014-04-09] (Ralink Technology Corp.)
R1 MpKsl5c220845; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2089B0C8-021C-435E-B09B-C4866E378E55}\MpKsl5c220845.sys [58120 2017-12-26] (Microsoft Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U1 aswbdisk; pas de ImagePath
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-26 18:20 - 2017-12-26 18:20 - 000019700 _____ C:\Users\TIFENN\Desktop\FRST.txt
2017-12-26 18:19 - 2017-12-26 18:19 - 000000000 ____D C:\Users\TIFENN\Desktop\FRST-OlderVersion
2017-12-26 18:18 - 2017-12-26 18:18 - 002391552 _____ (Farbar) C:\Users\TIFENN\Downloads\FRST64.exe
2017-12-26 18:18 - 2017-12-26 18:18 - 000135324 _____ C:\Users\TIFENN\Desktop\ZHPDiag.txt
2017-12-26 18:15 - 2017-12-26 18:16 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\ZHP
2017-12-26 18:15 - 2017-12-26 18:15 - 000000870 _____ C:\Users\TIFENN\Desktop\ZHPDiag.lnk
2017-12-26 18:15 - 2017-12-26 18:15 - 000000000 ____D C:\Users\TIFENN\AppData\Local\ZHP
2017-12-26 18:14 - 2017-12-26 18:15 - 002955136 _____ C:\Users\TIFENN\Desktop\ZHPDiag3.exe
2017-12-26 18:14 - 2017-12-26 18:14 - 000000864 _____ C:\WinChk.txt
2017-12-26 18:14 - 2017-12-26 18:14 - 000000864 _____ C:\Users\TIFENN\Desktop\WinChk.txt
2017-12-26 18:13 - 2017-12-26 18:13 - 000315000 _____ C:\Users\TIFENN\Downloads\winchk_2.0.exe
2017-12-26 18:13 - 2017-12-26 18:13 - 000000263 _____ C:\Users\TIFENN\Desktop\ckfiles.txt
2017-12-26 18:11 - 2017-12-26 18:11 - 000468480 _____ () C:\Users\TIFENN\Downloads\CKScanner.exe
2017-12-26 17:57 - 2017-12-26 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-12-26 17:57 - 2017-12-26 17:57 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-12-26 17:56 - 2017-12-26 17:56 - 003980992 _____ (Crystal Dew World ) C:\Users\TIFENN\Downloads\CrystalDiskInfo7_5_0.exe
2017-12-26 16:39 - 2017-12-26 18:20 - 000000000 ____D C:\FRST
2017-12-26 16:36 - 2017-12-26 18:19 - 002391552 _____ (Farbar) C:\Users\TIFENN\Desktop\FRST64.exe
2017-12-26 11:46 - 2017-12-26 11:46 - 000966885 _____ C:\Users\TIFENN\Downloads\dsi.pdf
2017-12-26 11:21 - 2017-12-04 17:23 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-26 11:21 - 2017-12-04 17:23 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-26 01:56 - 2017-11-20 21:32 - 000545440 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-12-26 01:55 - 2017-11-14 04:57 - 025731072 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-12-26 01:55 - 2017-11-14 02:10 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-12-26 01:54 - 2017-11-17 16:37 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-12-26 01:54 - 2017-11-14 04:30 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-12-26 01:54 - 2017-11-14 04:25 - 005925888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-12-26 01:54 - 2017-11-14 04:20 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-12-26 01:54 - 2017-11-14 03:55 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-12-26 01:54 - 2017-11-14 03:48 - 015267328 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-12-26 01:54 - 2017-11-14 03:48 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-12-26 01:54 - 2017-11-14 03:39 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-12-26 01:54 - 2017-11-14 03:27 - 001544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-12-26 01:54 - 2017-11-14 03:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-12-26 01:54 - 2017-11-14 02:37 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-12-26 01:54 - 2017-11-14 01:32 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-12-26 01:54 - 2017-11-08 16:55 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-12-26 01:54 - 2017-11-07 22:15 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-12-26 01:54 - 2017-11-07 21:49 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2017-12-26 01:54 - 2017-11-07 21:46 - 000285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-12-26 01:54 - 2017-11-07 21:39 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-12-26 01:54 - 2017-11-07 21:29 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-12-26 01:54 - 2017-11-07 21:27 - 004509696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-12-26 01:54 - 2017-11-07 21:27 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2017-12-26 01:54 - 2017-11-07 21:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-12-26 01:54 - 2017-11-07 21:18 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-12-26 01:54 - 2017-11-07 21:08 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-12-26 01:54 - 2017-11-07 21:04 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-12-26 01:54 - 2017-11-07 21:02 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-12-26 01:54 - 2017-11-07 21:01 - 001313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-12-26 01:54 - 2017-11-07 20:58 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-12-26 01:54 - 2017-10-18 18:14 - 000136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-12-26 01:54 - 2017-10-14 08:55 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-12-26 01:54 - 2017-10-14 08:29 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-12-26 01:54 - 2017-10-14 08:23 - 000963072 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-12-26 01:54 - 2017-10-14 08:17 - 003717632 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-12-26 01:54 - 2017-10-14 07:41 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-12-26 01:54 - 2017-10-14 07:19 - 000780800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-12-26 01:54 - 2017-10-10 17:39 - 001192960 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2017-12-26 01:54 - 2017-10-10 17:29 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2017-12-26 01:54 - 2017-10-10 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2017-12-26 01:54 - 2017-10-10 15:58 - 000949760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2017-12-25 21:13 - 2017-12-25 21:13 - 000000000 ____D C:\found.000
2017-12-25 20:59 - 2017-12-25 20:59 - 000000017 _____ C:\Users\TIFENN\AppData\Local\resmon.resmoncfg
2017-12-25 19:13 - 2017-12-26 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2017-12-22 19:49 - 2017-12-22 19:49 - 000023728 _____ C:\Users\TIFENN\Downloads\Star Wars, Episode VI - Return of the Jedi_1986_1cd_Subrip_id271vostfr (1).zip
2017-12-22 19:48 - 2017-12-22 19:48 - 000023728 _____ C:\Users\TIFENN\Downloads\Star Wars, Episode VI - Return of the Jedi_1986_1cd_Subrip_id271vostfr.zip
2017-12-21 22:42 - 2017-12-21 22:42 - 000364634 _____ C:\Users\TIFENN\Downloads\img001.pdf
2017-12-19 20:09 - 2017-12-19 20:13 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\EPSON
2017-12-19 20:08 - 2017-12-19 20:08 - 000000000 ____D C:\Program Files\EpsonNet
2017-12-19 20:07 - 2017-12-19 20:13 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2017-12-19 20:05 - 2017-12-26 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-12-19 20:05 - 2017-12-19 20:13 - 000000000 ____D C:\Program Files (x86)\epson
2017-12-19 20:04 - 2017-12-19 20:13 - 000000000 ____D C:\ProgramData\Epson
2017-12-06 17:02 - 2017-12-06 17:02 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-12-05 12:50 - 2017-12-05 12:50 - 000000000 ____D C:\Users\TIFENN\AppData\Local\Foxit Reader
2017-11-30 19:14 - 2017-11-30 19:14 - 000337336 _____ C:\Windows\Minidump\113017-38015-01.dmp
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-26 18:05 - 2017-06-16 06:11 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2699326975-3932522234-1219649280-1001
2017-12-26 17:53 - 2014-05-15 16:59 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-12-26 16:49 - 2017-09-30 18:47 - 000000000 ____D C:\Users\TIFENN\AppData\LocalLow\Mozilla
2017-12-26 16:36 - 2017-06-19 18:14 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\ClassicShell
2017-12-26 12:25 - 2017-06-16 06:36 - 000003480 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2017-12-26 12:25 - 2017-06-16 06:36 - 000003470 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2017-12-26 11:44 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2017-12-26 11:40 - 2017-06-16 06:07 - 000000074 _____ C:\Users\TIFENN\AppData\Roaming\sp_data.sys
2017-12-26 11:20 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-26 11:20 - 2013-08-22 15:44 - 000485816 _____ C:\Windows\system32\FNTCACHE.DAT
2017-12-26 10:59 - 2017-06-16 08:18 - 000000000 ____D C:\Windows\system32\MRT
2017-12-26 10:58 - 2017-10-11 20:19 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-12-26 10:58 - 2017-06-16 08:18 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-12-26 10:43 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2017-12-26 10:34 - 2014-05-16 00:55 - 000820674 _____ C:\Windows\system32\perfh00C.dat
2017-12-26 10:34 - 2014-05-16 00:55 - 000162694 _____ C:\Windows\system32\perfc00C.dat
2017-12-26 10:34 - 2014-03-18 16:26 - 001826754 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-26 10:26 - 2017-06-16 06:05 - 000000000 ____D C:\Users\TIFENN
2017-12-26 10:19 - 2017-09-30 18:47 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-26 10:19 - 2017-09-30 18:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-26 10:19 - 2017-06-16 06:42 - 000000000 ____D C:\ProgramData\AVAST Software
2017-12-26 01:46 - 2017-09-30 18:47 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-12-26 01:45 - 2017-06-16 06:41 - 000000000 ____D C:\Program Files (x86)\Google
2017-12-26 01:45 - 2017-06-16 06:32 - 000003936 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{EE81565D-7275-41B0-8222-98FD383629F3}
2017-12-26 01:41 - 2017-09-06 19:33 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-12-26 01:37 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-12-26 01:18 - 2017-06-16 06:47 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151424760298403
2017-12-26 01:09 - 2017-09-24 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-12-26 01:09 - 2017-09-24 20:01 - 000000000 ____D C:\Program Files\Classic Shell
2017-12-26 01:09 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-26 01:07 - 2014-09-18 18:19 - 000000000 ____D C:\ProgramData\P4G
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 __RSD C:\Windows\Media
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\setup
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\setup
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-12-26 01:06 - 2017-06-19 17:45 - 000000000 ____D C:\ProgramData\Foxit ContentPlatform
2017-12-26 01:06 - 2017-06-19 15:40 - 000000000 ____D C:\ProgramData\DS-620
2017-12-26 01:06 - 2017-06-19 11:34 - 000000000 ___HD C:\ProgramData\CanonIJScan
2017-12-26 01:06 - 2017-06-19 11:34 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\Canon
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series
2017-12-26 01:06 - 2017-06-16 19:48 - 000000000 ___HD C:\Program Files\CanonBJ
2017-12-26 01:06 - 2017-06-16 19:48 - 000000000 ____D C:\Program Files (x86)\Canon
2017-12-26 01:06 - 2017-06-16 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-12-26 01:06 - 2017-06-16 18:35 - 000000000 ____D C:\Vega5
2017-12-26 01:06 - 2017-06-16 06:13 - 000000000 ___HD C:\ProgramData\CanonBJ
2017-12-26 01:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SystemResources
2017-12-26 01:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\Globalization
2017-12-26 01:06 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\Sysprep
2017-12-26 01:03 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-26 00:54 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\registration
2017-12-26 00:50 - 2017-06-22 12:38 - 000000000 ____D C:\Users\TIFENN\Documents\Mes documents
2017-12-26 00:45 - 2017-06-19 17:44 - 000000000 ____D C:\Program Files (x86)\Foxit Software
2017-12-26 00:45 - 2017-06-16 19:27 - 000000000 __RHD C:\MSOCache
2017-12-25 21:42 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2017-12-25 19:14 - 2017-06-19 17:45 - 000000000 ____D C:\ProgramData\Foxit Software
2017-12-18 11:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2017-12-16 11:59 - 2017-11-11 18:14 - 000000000 ____D C:\Users\TIFENN\AppData\Local\ElevatedDiagnostics
2017-12-12 22:35 - 2017-06-16 19:46 - 000004496 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-12-12 22:35 - 2017-06-16 12:50 - 000003180 _____ C:\Windows\System32\Tasks\RtHDVBg_ListenToDevice
2017-12-12 22:35 - 2017-06-16 06:49 - 000003916 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1497592172
2017-12-12 22:35 - 2017-06-16 06:41 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-12 22:35 - 2017-06-16 06:41 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-12 22:35 - 2017-06-16 06:36 - 000003912 _____ C:\Windows\System32\Tasks\Update Checker
2017-12-12 22:35 - 2014-09-18 18:25 - 000003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2017-12-12 22:35 - 2014-09-18 18:25 - 000002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2017-12-12 22:35 - 2014-09-18 18:19 - 000003266 _____ C:\Windows\System32\Tasks\AsusVibeSchedule
2017-12-12 22:35 - 2014-09-18 18:12 - 000003538 _____ C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher
2017-12-12 22:35 - 2014-09-18 18:06 - 000003168 _____ C:\Windows\System32\Tasks\RTKCPL
2017-12-12 22:35 - 2014-09-18 18:06 - 000003152 _____ C:\Windows\System32\Tasks\RtHDVBg
2017-12-12 11:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-12 11:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-09 18:09 - 2017-11-14 22:55 - 000000000 ____D C:\Users\TIFENN\Downloads\Site internet
2017-12-02 17:14 - 2017-06-16 19:27 - 000000000 ____D C:\Users\TIFENN\AppData\Local\Microsoft Help
2017-12-02 10:14 - 2017-06-16 19:09 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\vlc
2017-11-30 19:14 - 2017-07-04 17:49 - 1184263912 _____ C:\Windows\MEMORY.DMP
2017-11-30 19:14 - 2017-06-16 12:54 - 000000000 ____D C:\Windows\Minidump
2017-11-26 18:16 - 2017-09-30 18:47 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\Mozilla
==================== Fichiers à la racine de certains dossiers =======
2017-06-16 06:07 - 2017-12-26 11:40 - 000000074 _____ () C:\Users\TIFENN\AppData\Roaming\sp_data.sys
2017-12-25 20:59 - 2017-12-25 20:59 - 000000017 _____ () C:\Users\TIFENN\AppData\Local\resmon.resmoncfg
Certains fichiers dans TEMP:
====================
2017-06-16 16:59 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss0.dll
2017-06-16 16:59 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss3.dll
2017-06-16 17:00 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss4.dll
2017-06-19 11:12 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss5.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-12-25 15:17
==================== Fin de FRST.txt ============================
Exécuté par TIFENN (administrateur) sur AUFFRET (26-12-2017 18:20:05)
Exécuté depuis C:\Users\TIFENN\Desktop
Profils chargés: TIFENN (Profils disponibles: TIFENN)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Hanwang Technology Co.,Ltd. ) C:\Program Files\ASUS\ASUS FaceID\HWFaceKeyService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
() C:\Windows\Mobile_Series_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\vivokey.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(GIE SESAM VITALE - ASIP SANTE) C:\Windows\galsvw32.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.15.587\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804360 2016-04-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.15.587\ASUSWSLoader.exe [63968 2017-04-25] (ASUS Cloud Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\...\MountPoints2: {1ac19b64-63bd-11e7-826d-54a050a829a4} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{741E1E30-207F-465F-B08D-B093F51783EB}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{D0625A0F-4BE7-4335-BC52-7CA1D36C48C3}: [DhcpNameServer] 30.50.1.1 30.50.1.2
Internet Explorer:
==================
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2699326975-3932522234-1219649280-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2699326975-3932522234-1219649280-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-11-01] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-11-01] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
FireFox:
========
FF DefaultProfile: hcdn4wpg.default
FF ProfilePath: C:\Users\TIFENN\AppData\Roaming\Mozilla\Firefox\Profiles\hcdn4wpg.default [2017-12-26]
FF Homepage: Mozilla\Firefox\Profiles\hcdn4wpg.default -> www.google.fr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-12] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-01] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.fr/
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default [2017-12-26]
CHR Extension: (Slides) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-16]
CHR Extension: (YouTube) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-16]
CHR Extension: (Sheets) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-16]
CHR Extension: (Flash Control) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\hloblpeplfiajnfdengendhdnpmdgagn [2017-12-26]
CHR Extension: (Switch to Flash® Player for YouTube™) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibobiggeplcacanpackkgnikelndfjpo [2017-10-17]
CHR Extension: (Post to Tumblr) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipkpjkniknhaojcebeaallaglkmhlcno [2017-08-30]
CHR Extension: (Flash Player for YouTube™) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\lljhpdalfpihmdokpgmobnbeibbkignc [2017-10-19]
CHR Extension: (Flashcontrol) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2017-06-16]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-26]
CHR Extension: (Gmail) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-16]
CHR Extension: (Chrome Media Router) - C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-09]
CHR Profile: C:\Users\TIFENN\AppData\Local\Google\Chrome\User Data\System Profile [2017-06-16]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASUS FaceID Service; C:\Program Files\ASUS\ASUS FaceID\HWFaceKeyService.exe [261648 2013-10-24] (Hanwang Technology Co.,Ltd. )
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Fichier non signé]
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-10-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [828656 2013-11-18] (Condusiv Technologies)
R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2017-04-13] (Foxit Software Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 Mobile_Series; C:\Windows\Mobile_Series_Service.exe [32768 2015-02-12] () [Fichier non signé]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-03-31] (ASUS Corporation)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25840 2013-11-18] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [117488 2013-11-18] (Condusiv Technologies)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 m76usb; C:\Windows\System32\drivers\m76usb.sys [539336 2014-04-09] (Ralink Technology Corp.)
R1 MpKsl5c220845; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2089B0C8-021C-435E-B09B-C4866E378E55}\MpKsl5c220845.sys [58120 2017-12-26] (Microsoft Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U1 aswbdisk; pas de ImagePath
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-26 18:20 - 2017-12-26 18:20 - 000019700 _____ C:\Users\TIFENN\Desktop\FRST.txt
2017-12-26 18:19 - 2017-12-26 18:19 - 000000000 ____D C:\Users\TIFENN\Desktop\FRST-OlderVersion
2017-12-26 18:18 - 2017-12-26 18:18 - 002391552 _____ (Farbar) C:\Users\TIFENN\Downloads\FRST64.exe
2017-12-26 18:18 - 2017-12-26 18:18 - 000135324 _____ C:\Users\TIFENN\Desktop\ZHPDiag.txt
2017-12-26 18:15 - 2017-12-26 18:16 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\ZHP
2017-12-26 18:15 - 2017-12-26 18:15 - 000000870 _____ C:\Users\TIFENN\Desktop\ZHPDiag.lnk
2017-12-26 18:15 - 2017-12-26 18:15 - 000000000 ____D C:\Users\TIFENN\AppData\Local\ZHP
2017-12-26 18:14 - 2017-12-26 18:15 - 002955136 _____ C:\Users\TIFENN\Desktop\ZHPDiag3.exe
2017-12-26 18:14 - 2017-12-26 18:14 - 000000864 _____ C:\WinChk.txt
2017-12-26 18:14 - 2017-12-26 18:14 - 000000864 _____ C:\Users\TIFENN\Desktop\WinChk.txt
2017-12-26 18:13 - 2017-12-26 18:13 - 000315000 _____ C:\Users\TIFENN\Downloads\winchk_2.0.exe
2017-12-26 18:13 - 2017-12-26 18:13 - 000000263 _____ C:\Users\TIFENN\Desktop\ckfiles.txt
2017-12-26 18:11 - 2017-12-26 18:11 - 000468480 _____ () C:\Users\TIFENN\Downloads\CKScanner.exe
2017-12-26 17:57 - 2017-12-26 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-12-26 17:57 - 2017-12-26 17:57 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-12-26 17:56 - 2017-12-26 17:56 - 003980992 _____ (Crystal Dew World ) C:\Users\TIFENN\Downloads\CrystalDiskInfo7_5_0.exe
2017-12-26 16:39 - 2017-12-26 18:20 - 000000000 ____D C:\FRST
2017-12-26 16:36 - 2017-12-26 18:19 - 002391552 _____ (Farbar) C:\Users\TIFENN\Desktop\FRST64.exe
2017-12-26 11:46 - 2017-12-26 11:46 - 000966885 _____ C:\Users\TIFENN\Downloads\dsi.pdf
2017-12-26 11:21 - 2017-12-04 17:23 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-26 11:21 - 2017-12-04 17:23 - 000177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-26 01:56 - 2017-11-20 21:32 - 000545440 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-12-26 01:55 - 2017-11-14 04:57 - 025731072 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-12-26 01:55 - 2017-11-14 02:10 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-12-26 01:54 - 2017-11-17 16:37 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-12-26 01:54 - 2017-11-14 04:30 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-12-26 01:54 - 2017-11-14 04:25 - 005925888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-12-26 01:54 - 2017-11-14 04:20 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-12-26 01:54 - 2017-11-14 03:55 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-12-26 01:54 - 2017-11-14 03:48 - 015267328 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-12-26 01:54 - 2017-11-14 03:48 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-12-26 01:54 - 2017-11-14 03:39 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-12-26 01:54 - 2017-11-14 03:27 - 001544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-12-26 01:54 - 2017-11-14 03:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-12-26 01:54 - 2017-11-14 02:37 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-12-26 01:54 - 2017-11-14 01:32 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-12-26 01:54 - 2017-11-08 16:55 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-12-26 01:54 - 2017-11-07 22:15 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2017-12-26 01:54 - 2017-11-07 21:49 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2017-12-26 01:54 - 2017-11-07 21:46 - 000285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2017-12-26 01:54 - 2017-11-07 21:39 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-12-26 01:54 - 2017-11-07 21:29 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-12-26 01:54 - 2017-11-07 21:27 - 004509696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-12-26 01:54 - 2017-11-07 21:27 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2017-12-26 01:54 - 2017-11-07 21:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-12-26 01:54 - 2017-11-07 21:18 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-12-26 01:54 - 2017-11-07 21:08 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-12-26 01:54 - 2017-11-07 21:04 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-12-26 01:54 - 2017-11-07 21:02 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2017-12-26 01:54 - 2017-11-07 21:01 - 001313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-12-26 01:54 - 2017-11-07 20:58 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-12-26 01:54 - 2017-10-18 18:14 - 000136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-12-26 01:54 - 2017-10-14 08:55 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-12-26 01:54 - 2017-10-14 08:29 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-12-26 01:54 - 2017-10-14 08:23 - 000963072 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-12-26 01:54 - 2017-10-14 08:17 - 003717632 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-12-26 01:54 - 2017-10-14 07:41 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-12-26 01:54 - 2017-10-14 07:19 - 000780800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-12-26 01:54 - 2017-10-10 17:39 - 001192960 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2017-12-26 01:54 - 2017-10-10 17:29 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2017-12-26 01:54 - 2017-10-10 16:42 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2017-12-26 01:54 - 2017-10-10 15:58 - 000949760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2017-12-25 21:13 - 2017-12-25 21:13 - 000000000 ____D C:\found.000
2017-12-25 20:59 - 2017-12-25 20:59 - 000000017 _____ C:\Users\TIFENN\AppData\Local\resmon.resmoncfg
2017-12-25 19:13 - 2017-12-26 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2017-12-22 19:49 - 2017-12-22 19:49 - 000023728 _____ C:\Users\TIFENN\Downloads\Star Wars, Episode VI - Return of the Jedi_1986_1cd_Subrip_id271vostfr (1).zip
2017-12-22 19:48 - 2017-12-22 19:48 - 000023728 _____ C:\Users\TIFENN\Downloads\Star Wars, Episode VI - Return of the Jedi_1986_1cd_Subrip_id271vostfr.zip
2017-12-21 22:42 - 2017-12-21 22:42 - 000364634 _____ C:\Users\TIFENN\Downloads\img001.pdf
2017-12-19 20:09 - 2017-12-19 20:13 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\EPSON
2017-12-19 20:08 - 2017-12-19 20:08 - 000000000 ____D C:\Program Files\EpsonNet
2017-12-19 20:07 - 2017-12-19 20:13 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2017-12-19 20:05 - 2017-12-26 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-12-19 20:05 - 2017-12-19 20:13 - 000000000 ____D C:\Program Files (x86)\epson
2017-12-19 20:04 - 2017-12-19 20:13 - 000000000 ____D C:\ProgramData\Epson
2017-12-06 17:02 - 2017-12-06 17:02 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-12-05 12:50 - 2017-12-05 12:50 - 000000000 ____D C:\Users\TIFENN\AppData\Local\Foxit Reader
2017-11-30 19:14 - 2017-11-30 19:14 - 000337336 _____ C:\Windows\Minidump\113017-38015-01.dmp
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-26 18:05 - 2017-06-16 06:11 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2699326975-3932522234-1219649280-1001
2017-12-26 17:53 - 2014-05-15 16:59 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-12-26 16:49 - 2017-09-30 18:47 - 000000000 ____D C:\Users\TIFENN\AppData\LocalLow\Mozilla
2017-12-26 16:36 - 2017-06-19 18:14 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\ClassicShell
2017-12-26 12:25 - 2017-06-16 06:36 - 000003480 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2017-12-26 12:25 - 2017-06-16 06:36 - 000003470 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2017-12-26 11:44 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2017-12-26 11:40 - 2017-06-16 06:07 - 000000074 _____ C:\Users\TIFENN\AppData\Roaming\sp_data.sys
2017-12-26 11:20 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-26 11:20 - 2013-08-22 15:44 - 000485816 _____ C:\Windows\system32\FNTCACHE.DAT
2017-12-26 10:59 - 2017-06-16 08:18 - 000000000 ____D C:\Windows\system32\MRT
2017-12-26 10:58 - 2017-10-11 20:19 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-12-26 10:58 - 2017-06-16 08:18 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-12-26 10:43 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2017-12-26 10:34 - 2014-05-16 00:55 - 000820674 _____ C:\Windows\system32\perfh00C.dat
2017-12-26 10:34 - 2014-05-16 00:55 - 000162694 _____ C:\Windows\system32\perfc00C.dat
2017-12-26 10:34 - 2014-03-18 16:26 - 001826754 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-26 10:26 - 2017-06-16 06:05 - 000000000 ____D C:\Users\TIFENN
2017-12-26 10:19 - 2017-09-30 18:47 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-26 10:19 - 2017-09-30 18:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-26 10:19 - 2017-06-16 06:42 - 000000000 ____D C:\ProgramData\AVAST Software
2017-12-26 01:46 - 2017-09-30 18:47 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-12-26 01:45 - 2017-06-16 06:41 - 000000000 ____D C:\Program Files (x86)\Google
2017-12-26 01:45 - 2017-06-16 06:32 - 000003936 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{EE81565D-7275-41B0-8222-98FD383629F3}
2017-12-26 01:41 - 2017-09-06 19:33 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-12-26 01:37 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-12-26 01:18 - 2017-06-16 06:47 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151424760298403
2017-12-26 01:09 - 2017-09-24 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-12-26 01:09 - 2017-09-24 20:01 - 000000000 ____D C:\Program Files\Classic Shell
2017-12-26 01:09 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-26 01:07 - 2014-09-18 18:19 - 000000000 ____D C:\ProgramData\P4G
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 __RSD C:\Windows\Media
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\setup
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\setup
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2017-12-26 01:07 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-12-26 01:06 - 2017-06-19 17:45 - 000000000 ____D C:\ProgramData\Foxit ContentPlatform
2017-12-26 01:06 - 2017-06-19 15:40 - 000000000 ____D C:\ProgramData\DS-620
2017-12-26 01:06 - 2017-06-19 11:34 - 000000000 ___HD C:\ProgramData\CanonIJScan
2017-12-26 01:06 - 2017-06-19 11:34 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\Canon
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-12-26 01:06 - 2017-06-16 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5300 series
2017-12-26 01:06 - 2017-06-16 19:48 - 000000000 ___HD C:\Program Files\CanonBJ
2017-12-26 01:06 - 2017-06-16 19:48 - 000000000 ____D C:\Program Files (x86)\Canon
2017-12-26 01:06 - 2017-06-16 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-12-26 01:06 - 2017-06-16 18:35 - 000000000 ____D C:\Vega5
2017-12-26 01:06 - 2017-06-16 06:13 - 000000000 ___HD C:\ProgramData\CanonBJ
2017-12-26 01:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SystemResources
2017-12-26 01:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\Globalization
2017-12-26 01:06 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\Sysprep
2017-12-26 01:03 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-26 00:54 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\registration
2017-12-26 00:50 - 2017-06-22 12:38 - 000000000 ____D C:\Users\TIFENN\Documents\Mes documents
2017-12-26 00:45 - 2017-06-19 17:44 - 000000000 ____D C:\Program Files (x86)\Foxit Software
2017-12-26 00:45 - 2017-06-16 19:27 - 000000000 __RHD C:\MSOCache
2017-12-25 21:42 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2017-12-25 19:14 - 2017-06-19 17:45 - 000000000 ____D C:\ProgramData\Foxit Software
2017-12-18 11:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2017-12-16 11:59 - 2017-11-11 18:14 - 000000000 ____D C:\Users\TIFENN\AppData\Local\ElevatedDiagnostics
2017-12-12 22:35 - 2017-06-16 19:46 - 000004496 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-12-12 22:35 - 2017-06-16 12:50 - 000003180 _____ C:\Windows\System32\Tasks\RtHDVBg_ListenToDevice
2017-12-12 22:35 - 2017-06-16 06:49 - 000003916 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1497592172
2017-12-12 22:35 - 2017-06-16 06:41 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-12 22:35 - 2017-06-16 06:41 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-12 22:35 - 2017-06-16 06:36 - 000003912 _____ C:\Windows\System32\Tasks\Update Checker
2017-12-12 22:35 - 2014-09-18 18:25 - 000003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2017-12-12 22:35 - 2014-09-18 18:25 - 000002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2017-12-12 22:35 - 2014-09-18 18:19 - 000003266 _____ C:\Windows\System32\Tasks\AsusVibeSchedule
2017-12-12 22:35 - 2014-09-18 18:12 - 000003538 _____ C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher
2017-12-12 22:35 - 2014-09-18 18:06 - 000003168 _____ C:\Windows\System32\Tasks\RTKCPL
2017-12-12 22:35 - 2014-09-18 18:06 - 000003152 _____ C:\Windows\System32\Tasks\RtHDVBg
2017-12-12 11:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-12 11:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-09 18:09 - 2017-11-14 22:55 - 000000000 ____D C:\Users\TIFENN\Downloads\Site internet
2017-12-02 17:14 - 2017-06-16 19:27 - 000000000 ____D C:\Users\TIFENN\AppData\Local\Microsoft Help
2017-12-02 10:14 - 2017-06-16 19:09 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\vlc
2017-11-30 19:14 - 2017-07-04 17:49 - 1184263912 _____ C:\Windows\MEMORY.DMP
2017-11-30 19:14 - 2017-06-16 12:54 - 000000000 ____D C:\Windows\Minidump
2017-11-26 18:16 - 2017-09-30 18:47 - 000000000 ____D C:\Users\TIFENN\AppData\Roaming\Mozilla
==================== Fichiers à la racine de certains dossiers =======
2017-06-16 06:07 - 2017-12-26 11:40 - 000000074 _____ () C:\Users\TIFENN\AppData\Roaming\sp_data.sys
2017-12-25 20:59 - 2017-12-25 20:59 - 000000017 _____ () C:\Users\TIFENN\AppData\Local\resmon.resmoncfg
Certains fichiers dans TEMP:
====================
2017-06-16 16:59 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss0.dll
2017-06-16 16:59 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss3.dll
2017-06-16 17:00 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss4.dll
2017-06-19 11:12 - 2017-06-16 16:59 - 000090112 ____R (GIE) C:\Users\TIFENN\AppData\Local\Temp\libpss5.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-12-25 15:17
==================== Fin de FRST.txt ============================