Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Exécuté par utilisateur (administrateur) sur UTILISATEUR-PC (06-01-2018 19:46:02)
Exécuté depuis C:\Users\utilisateur\Desktop
Profils chargés: utilisateur (Profils disponibles: utilisateur)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Orange\Orange Security Suite 10.10\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Orange) C:\Users\utilisateur\AppData\Roaming\Orange\OrangeInside\OrangeInside.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
() C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Orange) C:\Program Files\Le Cloud d'Orange\OrangeCloudApplication.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
() C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Orange\Orange Security Suite 10.10\avpui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
() C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\Real\RealDownloader\downloader2.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealDownloader\realdownloader264.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\SPNativeMessage.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\SPNativeMessage.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-08-11] (Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297272 2017-12-05] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5764384 2017-11-20] (IObit)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1986280 2017-08-04] (TomTom)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [41061856 2017-11-20] ()
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [OCCDesktop] => C:\Program Files\Le Cloud d'Orange\OrangeCloudApplication.exe [4563968 2017-10-31] (Orange)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [886768 2017-11-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44024 2017-12-15] (Glarysoft Ltd)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-01] (Piriform Ltd)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7704168 2018-01-06] (Lavasoft)
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\MountPoints2: {7733619f-5339-11e6-8de1-5404a68a5f37} - G:\Setup.exe
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\...\MountPoints2: {eeb75f05-7bd5-11e6-918f-5404a68a5f37} - G:\iStudio.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
BootExecute: autocheck autochk * �܀

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{27163DA5-AE9C-48B4-9374-0CD1212DA096}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://r.orange.fr/r/Oodc_IE_oi_v2?ref=O_OI_defaultPage_IE_odc
HKU\S-1-5-21-2178984533-954614097-2152146171-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2178984533-954614097-2152146171-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D010618-A366AA8DC38&form=CONBDF&conlogo=CT3335786&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2178984533-954614097-2152146171-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D010618-A366AA8DC38&form=CONBDF&conlogo=CT3335786&q={searchTerms}
BHO: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Orange\Orange Security Suite 10.10\x64\IEExt\ie_plugin.dll [2017-12-05] (AO Kaspersky Lab)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22] (IObit)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\Real\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2017-06-02] (RealDownloader)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO-x32: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Orange\Orange Security Suite 10.10\IEExt\ie_plugin.dll [2017-12-05] (AO Kaspersky Lab)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\Real\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2017-06-02] (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Programme d’aide de l’Assistant de connexion au compte Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2017-10-18] (IObit)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\Adblock\Adblock.dll [2017-10-18] (IObit)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\x64\IEExt\ie_plugin.dll [2017-12-05] (AO Kaspersky Lab)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\IEExt\ie_plugin.dll [2017-12-05] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2178984533-954614097-2152146171-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)

FireFox:
========
FF DefaultProfile: x4na513e.default
FF DefaultProfile: 7c8kwjtr.default
FF ProfilePath: C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default [2018-01-06]
FF Homepage: Mozilla\Firefox\Profiles\x4na513e.default -> hxxp://www.orange.fr/portail
hxxp://www.journaux.fr/
FF NewTab: Mozilla\Firefox\Profiles\x4na513e.default -> hxxp://www.bing.com/?pc=COSP&ptag=D010618-A366AA8DC38&form=CONMHP&conlogo=CT3335786
FF Extension: (AdBlocker Ultimate) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\adblockultimate@adblockultimate.net.xpi [2017-12-15]
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-10-18]
FF Extension: (Ghostery) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\firefox@ghostery.com.xpi [2017-12-28]
FF Extension: (Dictionnaire français) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org [2017-11-29] [Legacy]
FF Extension: (Search image) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\searchimage@searchimage.fr.xpi [2017-11-24]
FF Extension: (YesScript) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\yesscript@userstyles.org.xpi [2017-10-11] [Legacy]
FF Extension: (uBlock) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2018-01-06] [Legacy]
FF Extension: (Download all Images) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2017-12-29]
FF Extension: (Save Button for Pinterest) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{677a8f98-fd64-40b0-a883-b8c95d0cbf17}.xpi [2017-12-29]
FF Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2017-12-29]
FF Extension: (Video DownloadHelper) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-12-15]
FF Extension: (Adblock Plus) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-15]
FF Extension: (Block site) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}.xpi [2017-12-01]
FF Extension: (Theme Font & Size Changer) - C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2017-11-28]
FF SearchPlugin: C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\x4na513e.default\searchplugins\bing-lavasoft.xml [2018-01-06]
FF ProfilePath: C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default [2018-01-06]
FF Homepage: 8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default -> hxxp://www.orange.fr/portail
FF Extension: (AdBlocker Ultimate) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\adblockultimate@adblockultimate.net.xpi [2017-12-13]
FF Extension: (Video Downloader professional) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\ffext_basicvideoext@startpage24.xpi [2017-11-24]
FF Extension: (Ghostery) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\firefox@ghostery.com.xpi [2017-12-28]
FF Extension: (Dictionnaire français) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org [2017-12-01] [Legacy]
FF Extension: (Outwit Images) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\outwit-images-1110@outwit.com [2017-12-03] [Legacy]
FF Extension: (Search image) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\searchimage@searchimage.fr.xpi [2017-11-24]
FF Extension: (YesScript) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\yesscript@userstyles.org.xpi [2017-11-22] [Legacy]
FF Extension: (uBlock) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2017-11-22] [Legacy]
FF Extension: (Download all Images) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2017-12-30]
FF Extension: (Save Button for Pinterest) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{677a8f98-fd64-40b0-a883-b8c95d0cbf17}.xpi [2017-12-30]
FF Extension: (Video DownloadHelper) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-11-22] [Legacy]
FF Extension: (Block site) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}.xpi [2017-12-01]
FF Extension: (Theme Font & Size Changer) - C:\Users\utilisateur\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\7c8kwjtr.default\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2017-11-28]
FF Extension: (CyberCTR) - C:\Program Files\Cyberfox\browser\features\CTR@8pecxstudios.com.xpi [2017-12-08] [Legacy] [non signé]
FF HKLM\...\Firefox\Extensions: [light_plugin_ACF0E80077C511E59DED005056C00008@kaspersky.com] - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\FFExt\light_plugin_firefox\addon.xpi [2017-09-19]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-27]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-04-02] [Legacy] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\FFExt\light_plugin_firefox\addon.xpi
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_ACF0E80077C511E59DED005056C00008@kaspersky.com] - C:\Program Files (x86)\Orange\Orange Security Suite 10.10\FFExt\light_plugin_firefox\addon.xpi
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.8.212 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2017-06-15] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.8.212 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2017-06-15] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\dsengine.js [2018-01-06] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\dsengine.cfg [2018-01-06] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default [2018-01-05]
CHR Extension: (Google Slides) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-23]
CHR Extension: (Google Docs) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-23]
CHR Extension: (Google Drive) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-23]
CHR Extension: (YouTube) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-23]
CHR Extension: (Google Sheets) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-23]
CHR Extension: (Ads Removal) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2017-05-06]
CHR Extension: (Google Docs hors connexion) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-23]
CHR Extension: (Plug-in de sécurité pour votre antivirus) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcfenocacchlkbenefaoghnpjlfcifng [2016-10-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-23]
CHR Extension: (Gmail) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-23]
CHR HKLM\...\Chrome\Extension: [kgleflkdamakpmckkidkcmnmdikbbmok] - hxxps://chrome.google.com/webstore/detail/kgleflkdamakpmckkidkcmnmdikbbmok
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kgleflkdamakpmckkidkcmnmdikbbmok] - hxxps://chrome.google.com/webstore/detail/kgleflkdamakpmckkidkcmnmdikbbmok

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-11-27] (Apple Inc.)
R2 AVP16.0.1; C:\Program Files (x86)\Orange\Orange Security Suite 10.10\avp.exe [236928 2015-12-22] (AO Kaspersky Lab)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-07-14] (Digital Wave Ltd.)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2016-05-11] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1769760 2017-11-14] (IObit)
S3 klvssbrigde64; C:\Program Files (x86)\Orange\Orange Security Suite 10.10\x64\vssbridge64.exe [152488 2015-12-22] (AO Kaspersky Lab)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [36640 2017-06-02] (RealNetworks, Inc.)
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [988944 2017-06-15] (RealNetworks, Inc.)
S3 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248856 2017-01-18] ()
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25704 2018-01-06] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S1 arbpnzgdm.sys; C:\WINDOWS\system32\drivers\arbpnzgdm.sys [15424 2017-07-26] () [Fichier non signé]
S1 atldpogvo.sys; C:\WINDOWS\system32\drivers\atldpogvo.sys [15424 2017-07-26] () [Fichier non signé]
S1 bmlmmigie.sys; C:\WINDOWS\system32\drivers\bmlmmigie.sys [7712 2017-12-09] () [Fichier non signé]
S1 buldtrxfd.sys; C:\WINDOWS\system32\drivers\buldtrxfd.sys [7712 2018-01-06] () [Fichier non signé]
S1 chlxuifhn.sys; C:\WINDOWS\system32\drivers\chlxuifhn.sys [137768 2017-08-07] ()
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
S3 cpuz143; C:\Windows\temp\cpuz143\cpuz143_x64.sys [48960 2018-01-05] (CPUID)
S1 eblhdfvtt.sys; C:\WINDOWS\system32\drivers\eblhdfvtt.sys [7712 2017-12-07] () [Fichier non signé]
S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB.sys [19968 2017-05-25] (Intel Mobile Communications)
S1 gdzftrqfv.sys; C:\WINDOWS\system32\drivers\gdzftrqfv.sys [15424 2017-07-26] () [Fichier non signé]
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2017-08-17] (Glarysoft Ltd)
S3 guillflt; C:\Windows\System32\DRIVERS\guillflt.sys [71024 2012-01-18] (Guillemot Corp S.A.)
R2 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [183576 2016-12-05] (BitDefender LLC)
S1 haanvuday.sys; C:\WINDOWS\system32\drivers\haanvuday.sys [15424 2017-07-10] () [Fichier non signé]
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-08-05] (REALiX(tm))
S3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [117104 2011-12-29] (Guillemot Corporation)
S1 idduqneux.sys; C:\WINDOWS\system32\drivers\idduqneux.sys [15424 2017-07-26] () [Fichier non signé]
R1 IMFCameraProtect; C:\Windows\system32\drivers\IMFCameraProtect.sys [26272 2017-03-17] (IObit.com)
R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFDownProtect.sys [21360 2017-03-08] (IObit.com)
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22440 2016-12-22] (IObit)
R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFForceDelete.sys [16216 2017-07-03] (IObit.com)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [21928 2017-06-06] (IObit.com)
R3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [21872 2017-09-28] (IObit.com)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-09-11] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [79240 2015-12-01] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78200 2015-12-02] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [186360 2017-10-14] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [279544 2017-10-14] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP16.0.1\Bases\klids.sys [190832 2018-01-06] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1011192 2017-10-14] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [50776 2016-07-05] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [52608 2015-11-11] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45960 2015-12-07] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [116448 2017-03-14] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [194440 2015-12-03] (AO Kaspersky Lab)
S1 lfyvfgnkm.sys; C:\WINDOWS\system32\drivers\lfyvfgnkm.sys [15424 2017-07-10] () [Fichier non signé]
R3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [2502288 2017-02-02] (MediaTek Inc.)
S1 nolwvfmgo.sys; C:\WINDOWS\system32\drivers\nolwvfmgo.sys [15424 2017-07-10] () [Fichier non signé]
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50624 2017-11-16] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-11-16] (NVIDIA Corporation)
R1 pnkdwzsou.sys; C:\WINDOWS\system32\drivers\pnkdwzsou.sys [142760 2018-01-06] () [Fichier non signé]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S0 qbwvgswe.sys; C:\Windows\System32\drivers\qbwvgswe.sys [15440 2017-09-13] (Acer Laboratories Inc.)
S1 qrumxzklx.sys; C:\WINDOWS\system32\drivers\qrumxzklx.sys [7712 2018-01-02] () [Fichier non signé]
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34752 2016-11-03] (IObit.com)
S3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8213360 2011-12-29] (Realtek Semiconductor Corp.)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
R3 Trufos; C:\Windows\System32\DRIVERS\TRUFOS.sys [520032 2016-12-05] (BitDefender S.R.L.)
R0 ugefmuiz.sys; C:\Windows\System32\drivers\ugefmuiz.sys [904104 2017-09-13] () [Fichier non signé]
S1 vfkwphimv.sys; C:\WINDOWS\system32\drivers\vfkwphimv.sys [7712 2017-12-09] () [Fichier non signé]
S1 zbngraucl.sys; C:\WINDOWS\system32\drivers\zbngraucl.sys [7712 2018-01-05] () [Fichier non signé]
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-01-06 19:46 - 2018-01-06 19:46 - 000040176 _____ C:\Users\utilisateur\Desktop\FRST.txt
2018-01-06 19:44 - 2018-01-06 19:44 - 002393088 _____ (Farbar) C:\Users\utilisateur\Desktop\FRST64.exe
2018-01-06 18:46 - 2018-01-06 18:46 - 000001026 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-01-06 18:44 - 2018-01-06 18:44 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Lavasoft
2018-01-06 18:44 - 2018-01-06 18:44 - 000000000 ____D C:\Users\utilisateur\AppData\Local\Lavasoft
2018-01-06 18:44 - 2018-01-06 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2018-01-06 18:44 - 2018-01-06 18:44 - 000000000 ____D C:\ProgramData\Lavasoft
2018-01-06 18:44 - 2018-01-06 18:44 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2018-01-06 18:34 - 2018-01-06 18:34 - 000142760 _____ C:\Windows\system32\Drivers\dqjjhcohy.sys
2018-01-06 18:34 - 2018-01-06 18:34 - 000007712 _____ C:\Windows\system32\Drivers\buldtrxfd.sys
2018-01-06 17:41 - 2018-01-06 17:41 - 000000000 _____ C:\autoexec.bat
2018-01-06 17:00 - 2018-01-06 17:01 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\utilisateur\Downloads\SpyHunter-Installer.exe
2018-01-06 16:57 - 2018-01-06 18:33 - 000142760 _____ C:\Windows\system32\Drivers\pnkdwzsou.sys
2018-01-06 16:44 - 2018-01-06 16:44 - 000224712 _____ C:\Users\utilisateur\Desktop\ZHPDiag.txt
2018-01-06 16:42 - 2018-01-06 16:42 - 002961280 _____ C:\Users\utilisateur\Downloads\ZHPDiag3.exe
2018-01-06 16:42 - 2018-01-06 16:42 - 000000832 _____ C:\Users\utilisateur\Desktop\ZHPDiag.lnk
2018-01-06 11:43 - 2018-01-06 18:39 - 000571472 _____ C:\Tiem.txt
2018-01-05 18:54 - 2018-01-06 17:04 - 000001658 _____ C:\Users\utilisateur\Desktop\ZHPCleaner.txt
2018-01-05 18:48 - 2018-01-05 18:48 - 000000844 _____ C:\Users\utilisateur\Desktop\ZHPCleaner.lnk
2018-01-05 18:47 - 2018-01-05 18:48 - 003004288 _____ C:\Users\utilisateur\Downloads\ZHPCleaner.exe
2018-01-05 18:45 - 2018-01-05 18:46 - 000013030 _____ C:\PDOXUSRS.NET
2018-01-05 18:45 - 1999-11-12 05:11 - 000183808 _____ C:\Windows\SysWOW64\BDEADMIN.CPL
2018-01-05 18:45 - 1999-01-20 05:01 - 000210032 _____ C:\Windows\SysWOW64\DBCLIENT.DLL
2018-01-05 18:42 - 2018-01-05 18:42 - 000003204 _____ C:\Windows\System32\Tasks\{9C56B63C-D25E-405A-B9EC-9F9C4E76CF1C}
2018-01-05 18:39 - 2018-01-05 18:40 - 018476835 _____ (Nicolas Coolman ) C:\Users\utilisateur\Downloads\zhp2016setup.exe
2018-01-05 17:35 - 2018-01-06 19:06 - 001872267 _____ C:\Windows\system32\r6lstmp4.dat
2018-01-05 17:25 - 2018-01-05 17:25 - 005337864 _____ C:\Windows\system32\FNTCACHE.DAT
2018-01-05 17:10 - 2018-01-05 17:10 - 000181672 _____ C:\Users\utilisateur\AppData\Local\GDIPFONTCACHEV1.DAT
2018-01-05 16:42 - 2018-01-05 16:42 - 000142760 _____ C:\Windows\system32\Drivers\xpfzzrfux.sys
2018-01-05 16:42 - 2018-01-05 16:42 - 000007712 _____ C:\Windows\system32\Drivers\zbngraucl.sys
2018-01-05 16:20 - 2018-01-05 16:20 - 040237504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 036193912 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 035156600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 029237880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 023265048 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 019362944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 019038440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 016815736 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-01-05 16:20 - 2018-01-05 16:20 - 013864560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 013255032 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 011780560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 010883928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 003807864 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 003346368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438831.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 001673664 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438831.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 001135280 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 001099384 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 001030592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000932288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000885496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000615544 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000527104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000446216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000407248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000149552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-01-05 16:20 - 2018-01-05 16:20 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-01-05 13:21 - 2018-01-05 13:21 - 000142760 _____ C:\Windows\system32\Drivers\wlvmgwbgn.sys
2018-01-02 17:24 - 2018-01-02 17:24 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\4Free
2018-01-02 17:17 - 2018-01-02 17:17 - 000000000 ____D C:\Users\utilisateur\.fontconfig
2018-01-02 17:16 - 2018-01-02 17:16 - 000004935 _____ C:\ProgramData\vfiakfjk.zeu
2018-01-02 17:16 - 2018-01-02 17:16 - 000000000 ____D C:\ProgramData\Movavi Video Converter 18
2018-01-02 17:16 - 2018-01-02 17:16 - 000000000 ____D C:\ProgramData\Movavi
2018-01-02 17:09 - 2018-01-02 17:10 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Apowersoft
2018-01-02 16:45 - 2018-01-02 16:45 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2018-01-02 16:44 - 2018-01-05 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2018-01-02 16:44 - 2018-01-02 17:13 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\DVDVideoSoft
2018-01-02 16:44 - 2018-01-02 16:44 - 000000000 ____D C:\Program Files (x86)\FreeCodecPack
2018-01-02 16:17 - 2018-01-05 13:21 - 000000000 ____D C:\Program Files (x86)\DVD Flick
2018-01-02 16:17 - 2013-10-03 17:02 - 000040960 _____ (vbAccelerator) C:\Windows\SysWOW64\ssubtmr6.dll
2018-01-02 16:17 - 2013-10-03 17:02 - 000036864 _____ (Robdogg Inc.) C:\Windows\SysWOW64\trayicon_handler.ocx
2018-01-02 15:44 - 2018-01-02 15:44 - 000142760 _____ C:\Windows\system32\Drivers\ufersebsl.sys
2018-01-02 15:44 - 2018-01-02 15:44 - 000007712 _____ C:\Windows\system32\Drivers\qrumxzklx.sys
2018-01-02 15:30 - 2018-01-02 15:30 - 000000000 ____D C:\Users\utilisateur\AppData\Local\FreemakeVideoConverter
2018-01-02 08:31 - 2018-01-02 08:31 - 000142760 _____ C:\Windows\system32\Drivers\pmminelud.sys
2018-01-02 08:31 - 2018-01-02 08:31 - 000007712 _____ C:\Windows\system32\Drivers\dbkoqrjil.sys
2017-12-31 20:35 - 2017-12-31 20:35 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Google
2017-12-31 14:37 - 2017-12-31 14:37 - 000142760 _____ C:\Windows\system32\Drivers\dprdkupbf.sys
2017-12-31 14:37 - 2017-12-31 14:37 - 000007712 _____ C:\Windows\system32\Drivers\jvxjvtgis.sys
2017-12-28 09:51 - 2017-12-28 09:52 - 000022970 _____ C:\Users\utilisateur\Downloads\Extrait de comptes 30066 10341 000101219.. au 2017-09-29.pdf
2017-12-27 16:03 - 2017-12-27 16:03 - 000000218 _____ C:\Users\utilisateur\AppData\Local\recently-used.xbel
2017-12-27 16:03 - 2017-12-27 16:03 - 000000218 _____ C:\Users\utilisateur\.recently-used.xbel
2017-12-27 16:00 - 2017-12-27 16:00 - 000000000 ____D C:\Users\utilisateur\AppData\Local\RawTherapee
2017-12-27 16:00 - 2017-12-27 16:00 - 000000000 ____D C:\Users\utilisateur\AppData\Local\gtk-3.0
2017-12-27 15:58 - 2017-12-27 15:58 - 000000938 _____ C:\Users\Public\Desktop\RawTherapee 5.3.lnk
2017-12-27 15:58 - 2017-12-27 15:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RawTherapee
2017-12-27 15:58 - 2017-12-27 15:58 - 000000000 ____D C:\Program Files\RawTherapee
2017-12-27 15:21 - 2017-12-27 15:21 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\hugin
2017-12-27 15:19 - 2017-12-27 15:19 - 000000003 _____ C:\Users\utilisateur\AppData\Roaming\.ptbt0
2017-12-27 15:19 - 2017-12-27 15:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hugin
2017-12-27 15:19 - 2017-12-27 15:19 - 000000000 ____D C:\Program Files\Hugin
2017-12-27 15:16 - 2017-12-27 15:18 - 040038400 _____ C:\Users\utilisateur\Downloads\Hugin-2017.0-win64.msi
2017-12-27 11:50 - 2017-12-27 11:51 - 000000000 ____D C:\ProgramData\Google
2017-12-27 11:50 - 2017-12-27 11:50 - 000000000 ____D C:\Program Files\Google
2017-12-27 11:28 - 2017-12-27 11:34 - 450071920 _____ C:\Users\utilisateur\Downloads\nikcollection-full-1.2.11.exe
2017-12-22 16:25 - 2018-01-05 17:44 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\MPC-HC
2017-12-20 16:18 - 2017-12-20 16:18 - 000002464 _____ C:\Users\utilisateur\Desktop\TumblRipper.BugReporter.lnk
2017-12-20 16:18 - 2017-12-20 16:18 - 000000000 ____D C:\Users\utilisateur\AppData\Local\TumblRipper
2017-12-20 16:13 - 2017-12-20 16:18 - 000002356 _____ C:\Users\utilisateur\Desktop\TumblRipper.lnk
2017-12-20 16:13 - 2017-12-20 16:13 - 000000000 ____D C:\Program Files (x86)\TumblRipper
2017-12-20 16:12 - 2017-12-20 16:12 - 000911640 _____ (TumblRipper ) C:\Users\utilisateur\Downloads\TumblRipperDonate(2).exe
2017-12-20 16:03 - 2017-12-20 16:03 - 000911640 _____ (TumblRipper ) C:\Users\utilisateur\Downloads\TumblRipperDonate(1).exe
2017-12-20 13:52 - 2017-12-20 13:52 - 000911640 _____ (TumblRipper ) C:\Users\utilisateur\Downloads\TumblRipperDonate.exe
2017-12-20 13:44 - 2017-12-20 16:18 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ZARk
2017-12-20 13:44 - 2017-12-20 16:18 - 000000000 ____D C:\Users\utilisateur\AppData\Local\SquirrelTemp
2017-12-20 13:44 - 2017-12-20 13:48 - 000000000 ____D C:\Users\utilisateur\AppData\Local\TumblRipper3
2017-12-20 13:44 - 2017-12-20 13:44 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Intertel
2017-12-16 10:56 - 2017-12-16 10:57 - 038670008 _____ (DownloadHelper ) C:\Users\utilisateur\Downloads\VdhCoAppSetup-1.1.0.exe
2017-12-13 15:17 - 2017-12-13 15:17 - 000001002 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC 2018.lnk
2017-12-13 15:06 - 2017-12-13 15:06 - 000001061 _____ C:\Users\utilisateur\Desktop\Adobe Lightroom Classic CC.lnk
2017-12-13 15:06 - 2017-12-13 15:06 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic CC.lnk
2017-12-11 08:57 - 2017-12-11 08:57 - 000090136 _____ C:\Users\utilisateur\Downloads\article_722343.pdf
2017-12-09 16:57 - 2017-12-09 16:57 - 000142760 _____ C:\Windows\system32\Drivers\ohvcywdpw.sys
2017-12-09 16:57 - 2017-12-09 16:57 - 000007712 _____ C:\Windows\system32\Drivers\vfkwphimv.sys
2017-12-09 14:49 - 2017-12-09 14:49 - 000142760 _____ C:\Windows\system32\Drivers\jbljfvvig.sys
2017-12-09 14:49 - 2017-12-09 14:49 - 000007712 _____ C:\Windows\system32\Drivers\bmlmmigie.sys
2017-12-08 09:27 - 2017-12-08 09:27 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cyberfox
2017-12-07 14:17 - 2017-12-07 14:17 - 000001747 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-12-07 14:17 - 2017-12-07 14:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-12-07 14:17 - 2017-12-07 14:17 - 000000000 ____D C:\Program Files\iTunes
2017-12-07 14:17 - 2017-12-07 14:17 - 000000000 ____D C:\Program Files\iPod
2017-12-07 14:08 - 2017-12-07 14:13 - 264340296 _____ (Apple Inc.) C:\Users\utilisateur\Downloads\iTunes_(64bit)_v12.7.2.exe
2017-12-07 08:50 - 2017-12-07 08:50 - 000142760 _____ C:\Windows\system32\Drivers\daqpvbzve.sys
2017-12-07 08:50 - 2017-12-07 08:50 - 000007712 _____ C:\Windows\system32\Drivers\eblhdfvtt.sys

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-01-06 19:46 - 2017-04-27 15:47 - 000000000 ____D C:\Users\utilisateur\AppData\Local\OrangeCloud
2018-01-06 19:46 - 2017-02-25 09:51 - 000000000 ____D C:\FRST
2018-01-06 19:41 - 2016-04-02 09:59 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-01-06 19:39 - 2016-11-16 10:39 - 000000000 ____D C:\Users\utilisateur\AppData\LocalLow\Mozilla
2018-01-06 18:44 - 2017-11-22 12:56 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-01-06 18:42 - 2009-07-14 05:45 - 000023728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-06 18:42 - 2009-07-14 05:45 - 000023728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-06 18:40 - 2009-07-14 16:24 - 000761414 _____ C:\Windows\system32\perfh00C.dat
2018-01-06 18:40 - 2009-07-14 16:24 - 000154342 _____ C:\Windows\system32\perfc00C.dat
2018-01-06 18:40 - 2009-07-14 06:13 - 001695496 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-06 18:40 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-01-06 18:36 - 2017-08-24 10:01 - 001872267 _____ C:\Windows\system32\r6lstmp5.dat
2018-01-06 18:36 - 2016-04-01 10:11 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-06 18:35 - 2017-04-27 10:31 - 000000000 ___RD C:\Users\utilisateur\Google Drive
2018-01-06 18:35 - 2016-04-02 10:43 - 000000000 ___RD C:\Users\utilisateur\Creative Cloud Files
2018-01-06 18:35 - 2016-04-02 10:29 - 000000000 ____D C:\Users\utilisateur\AppData\Local\Adobe
2018-01-06 18:34 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-06 17:41 - 2016-04-01 09:46 - 000000000 ____D C:\Users\utilisateur
2018-01-06 17:04 - 2017-08-15 19:29 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\ZHP
2018-01-06 16:59 - 2016-08-05 19:49 - 000000000 ____D C:\Users\utilisateur\AppData\LocalLow\IObit
2018-01-06 16:56 - 2016-08-05 19:53 - 000000000 ____D C:\AdwCleaner
2018-01-06 16:42 - 2017-08-15 19:29 - 000000000 ____D C:\Users\utilisateur\AppData\Local\ZHP
2018-01-06 12:19 - 2017-07-17 18:59 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-06 10:10 - 2017-08-17 07:17 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2018-01-06 09:59 - 2017-02-02 08:32 - 000000000 ____D C:\Program Files (x86)\IObit
2018-01-06 09:59 - 2016-08-05 19:49 - 000000000 ____D C:\ProgramData\IObit
2018-01-06 09:36 - 2016-08-05 19:49 - 000002910 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (utilisateur)
2018-01-05 20:23 - 2016-04-01 10:25 - 000000000 ____D C:\Windows\system32\MRT
2018-01-05 20:21 - 2017-10-11 11:28 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-01-05 20:21 - 2016-04-01 10:25 - 133326408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-01-05 20:20 - 2016-04-03 08:07 - 000000000 ____D C:\Program Files\PeerBlock
2018-01-05 19:37 - 2016-04-03 08:10 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\uTorrent
2018-01-05 18:42 - 2016-10-01 15:08 - 000000000 ____D C:\Users\utilisateur\AppData\Local\CrashDumps
2018-01-05 17:27 - 2016-08-05 19:48 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\IObit
2018-01-05 17:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\Setup
2018-01-05 17:24 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\Setup
2018-01-05 17:14 - 2017-08-17 07:17 - 000003338 _____ C:\Windows\System32\Tasks\GlaryInitialize 5
2018-01-05 17:14 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\security
2018-01-05 16:57 - 2017-11-22 12:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-05 16:25 - 2016-04-12 10:21 - 000000000 ____D C:\Users\utilisateur\Documents\My CamStudio Temp Files
2018-01-05 16:22 - 2017-09-27 09:34 - 000002248 _____ C:\Users\Public\Desktop\Driver Booster 5.lnk
2018-01-05 16:20 - 2017-08-03 14:59 - 022096064 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2018-01-05 16:20 - 2017-08-03 14:59 - 000492232 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2018-01-05 16:20 - 2017-08-03 14:58 - 018207576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-01-05 16:20 - 2017-08-03 14:58 - 015027984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-01-05 16:20 - 2017-08-03 14:57 - 004284680 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-01-05 16:20 - 2017-08-03 14:57 - 003798848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-01-05 16:20 - 2016-04-01 10:10 - 000046182 _____ C:\Windows\system32\nvinfo.pb
2018-01-05 13:21 - 2016-08-21 09:44 - 000000000 ____D C:\Program Files (x86)\CDBurnerXP
2018-01-05 13:21 - 2016-08-05 19:49 - 000000000 ____D C:\ProgramData\ProductData
2018-01-05 13:21 - 2016-04-02 10:30 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-05 13:21 - 2016-04-02 10:30 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-05 13:21 - 2016-04-01 10:26 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-01-05 13:21 - 2016-04-01 10:11 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-01-05 13:21 - 2016-04-01 10:10 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-01-05 13:21 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-01-03 12:53 - 2016-04-12 10:18 - 000000096 _____ C:\Users\utilisateur\AppData\Roaming\version2.xml
2018-01-02 17:57 - 2016-07-10 14:43 - 000001073 _____ C:\Users\utilisateur\.lmmsrc.xml
2018-01-02 17:17 - 2017-10-05 10:52 - 000000000 ____D C:\Users\utilisateur\AppData\Local\Movavi
2018-01-02 16:13 - 2016-08-21 09:44 - 000001119 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk
2018-01-02 16:13 - 2016-08-21 09:44 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2018-01-02 14:41 - 2016-04-12 10:21 - 000004556 _____ C:\Users\utilisateur\AppData\Roaming\CamStudio.cfg
2018-01-02 14:41 - 2016-04-12 10:21 - 000000408 _____ C:\Users\utilisateur\AppData\Roaming\CamShapes.ini
2018-01-02 14:41 - 2016-04-12 10:21 - 000000408 _____ C:\Users\utilisateur\AppData\Roaming\CamLayout.ini
2018-01-02 14:41 - 2016-04-12 10:21 - 000000110 _____ C:\Users\utilisateur\AppData\Roaming\Camdata.ini
2017-12-27 15:17 - 2017-05-19 15:55 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2017-12-27 15:17 - 2017-05-19 15:55 - 000001314 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2017-12-27 15:17 - 2017-05-19 15:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2017-12-27 11:51 - 2016-04-02 10:36 - 000000000 ____D C:\Users\utilisateur\AppData\Roaming\Adobe
2017-12-27 11:51 - 2016-04-01 10:38 - 000000000 ____D C:\Users\utilisateur\AppData\Local\Google
2017-12-22 11:45 - 2017-10-24 16:43 - 000003872 _____ C:\Windows\System32\Tasks\CCleaner Update
2017-12-22 11:45 - 2016-04-02 16:47 - 000000000 ____D C:\Program Files\CCleaner
2017-12-18 09:23 - 2017-08-17 07:17 - 000002996 _____ C:\Windows\System32\Tasks\GU5SkipUAC
2017-12-18 09:23 - 2017-08-17 07:17 - 000001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2017-12-18 09:23 - 2017-08-17 07:17 - 000001040 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2017-12-16 10:57 - 2017-11-26 10:52 - 000000000 ____D C:\Program Files\net.downloadhelper.coapp
2017-12-13 15:17 - 2017-11-14 18:47 - 000000000 ___HD C:\adobeTemp
2017-12-13 15:16 - 2016-04-02 10:54 - 000000000 ____D C:\Program Files\Adobe
2017-12-13 14:29 - 2017-09-27 11:21 - 000004496 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-12-13 14:29 - 2016-08-05 19:57 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-13 14:29 - 2016-08-05 19:57 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-08 15:39 - 2017-07-25 14:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2017-12-08 15:39 - 2017-04-27 10:29 - 000002002 _____ C:\Users\Public\Desktop\Google Slides.lnk
2017-12-08 15:39 - 2017-04-27 10:29 - 000002000 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2017-12-08 15:39 - 2017-04-27 10:29 - 000001990 _____ C:\Users\Public\Desktop\Google Docs.lnk
2017-12-08 09:27 - 2017-11-22 17:00 - 000000000 ____D C:\Program Files\Cyberfox

==================== Fichiers à la racine de certains dossiers =======

2017-12-27 15:19 - 2017-12-27 15:19 - 000000003 _____ () C:\Users\utilisateur\AppData\Roaming\.ptbt0
2017-01-28 18:10 - 2017-11-04 11:36 - 000000033 _____ () C:\Users\utilisateur\AppData\Roaming\AdobeWLCMCache.dat
2016-04-12 10:21 - 2018-01-02 14:41 - 000000110 _____ () C:\Users\utilisateur\AppData\Roaming\Camdata.ini
2016-04-12 10:21 - 2018-01-02 14:41 - 000000408 _____ () C:\Users\utilisateur\AppData\Roaming\CamLayout.ini
2016-04-12 10:21 - 2018-01-02 14:41 - 000000408 _____ () C:\Users\utilisateur\AppData\Roaming\CamShapes.ini
2016-04-12 10:21 - 2018-01-02 14:41 - 000004556 _____ () C:\Users\utilisateur\AppData\Roaming\CamStudio.cfg
2016-04-12 10:47 - 2017-10-21 09:41 - 000000098 _____ () C:\Users\utilisateur\AppData\Roaming\CamStudio.Producer.command
2016-04-12 10:47 - 2017-10-21 09:41 - 000000000 _____ () C:\Users\utilisateur\AppData\Roaming\CamStudio.Producer.Data.ini
2016-04-12 10:47 - 2017-10-21 09:41 - 000001205 _____ () C:\Users\utilisateur\AppData\Roaming\CamStudio.Producer.ini
2017-09-15 18:50 - 2017-09-15 18:50 - 000000268 ___RH () C:\Users\utilisateur\AppData\Roaming\Instrument Library
2017-09-15 18:50 - 2017-09-15 18:50 - 000000268 ___RH () C:\Users\utilisateur\AppData\Roaming\Internet Services
2016-04-12 10:18 - 2018-01-03 12:53 - 000000096 _____ () C:\Users\utilisateur\AppData\Roaming\version2.xml
2017-11-30 15:16 - 2017-11-30 15:16 - 000003584 _____ () C:\Users\utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-07-10 08:32 - 2017-07-10 08:32 - 000140800 _____ () C:\Users\utilisateur\AppData\Local\installer.dat
2017-12-27 16:03 - 2017-12-27 16:03 - 000000218 _____ () C:\Users\utilisateur\AppData\Local\recently-used.xbel
2016-07-13 11:03 - 2017-11-27 14:11 - 000007598 _____ () C:\Users\utilisateur\AppData\Local\Resmon.ResmonCfg

Certains fichiers dans TEMP:
====================
2018-01-06 16:37 - 2018-01-06 16:37 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\fhnhpmjx.exe
2018-01-06 10:05 - 2018-01-06 10:05 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\jtxozlysr.exe
2018-01-06 18:39 - 2018-01-06 18:39 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\rtjeua.exe
2018-01-06 09:35 - 2018-01-06 09:35 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\scjivfyzx.exe
2018-01-05 17:30 - 2018-01-05 17:30 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\srjnxwdj.exe
2018-01-06 17:02 - 2018-01-06 17:02 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\tjtjgdsbhw.exe
2018-01-06 12:16 - 2018-01-06 12:16 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\vqppzja.exe
2018-01-05 17:38 - 2018-01-05 17:38 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\wfezbqezle.exe
2018-01-06 11:43 - 2018-01-06 11:43 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\xfgeyuj.exe
2018-01-06 12:53 - 2018-01-06 12:53 - 000452096 _____ () C:\Users\utilisateur\AppData\Local\Temp\zpfedrchjs.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-12-29 16:35

==================== Fin de FRST.txt ============================