Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 02.01.2018
Exécuté par Jean Jacques (administrateur) sur PC-DE-JEANJACQU (08-01-2018 10:48:14)
Exécuté depuis C:\Users\Jean Jacques\Desktop\DESINF
Profils chargés: Jean Jacques (Profils disponibles: Jean Jacques)
Platform: Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Luis Cobian, CobianSoft) C:\Program Files\Cobian Backup 11\Cobian.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Luis Cobian, CobianSoft) C:\Program Files\Cobian Backup 11\cbInterface.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(CobianSoft, Luis Cobian) C:\Program Files\Cobian Backup 11\cbVSCService11.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Secunia) C:\Program Files\Secunia\PSI\psia.exe
() C:\Program Files\Serviio\bin\ServiioService.exe
() C:\Program Files\Serviio\bin\ServiioService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
(Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Secunia) C:\Program Files\Secunia\PSI\sua.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FARNGDE.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2017-12-30] (AVAST Software)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [16553472 2017-06-29] (Realtek Semiconductor)
HKLM\...\Run: [Cobian Backup 11] => C:\Program Files\Cobian Backup 11\Cobian.exe [720896 2013-03-07] (Luis Cobian, CobianSoft)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7814600 2017-11-08] (Piriform Ltd)
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] ff000000
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Policies\Explorer: [_NoDriveTypeAutoRun] 255
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [879616 2008-01-21] (Microsoft Corporation)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{02F229E3-ECC9-4F59-815D-F35677FC5679}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{6A869EB6-F946-4599-92C1-72172213A068}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{ABC2E3BE-943C-4E96-937A-DDA5375452D9}: [DhcpNameServer] 10.11.0.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxps://www.google.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {A058536E-3AC7-47CB-87FC-C7B040D81579} URL = hxxps://www.google.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-26] (AVAST Software)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-20] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
FireFox:
========
FF DefaultProfile: mh1aeejb.default
FF ProfilePath: C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default [2018-01-08]
FF Extension: (HTTPS partout) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\https-everywhere@eff.org.xpi [2017-11-05]
FF Extension: (Pin It button) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2016-10-09] [Legacy]
FF Extension: (uBlock Origin) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\uBlock0@raymondhill.net.xpi [2017-11-19]
FF Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\wrc@avast.com.xpi [2017-11-26]
FF Extension: (__MSG_appName__) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}.xpi [2017-11-05]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-09-04] [Legacy] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-15] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin: @Diginext.fr/VirtualGeoGP -> C:\Program Files\VirtualGeo3-GP\WebPlugin\Win32\npQtAPI3DPlugin.dll [2015-05-07] (DIGINEXT)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-22] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-22] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> qwant.com/?client=qwant-chrome
CHR StartupUrls: Default -> "hxxps://www.google.fr/"
CHR NewTab: Default -> Not-active:"chrome-extension://chlnggmifacdaoeegomjajadfhijmahl/stubby.html"
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default [2018-01-08]
CHR Extension: (Carte du ciel) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\acnecepeneiomaebkkagcfbbakcfljdc [2015-12-06]
CHR Extension: (Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-02]
CHR Extension: (Tv-replay) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfgogkjjjedakfeibebkfmlbmagifci [2014-11-25]
CHR Extension: (WOT: Web of Trust, Évaluation de la réputation de sites Web) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-12-28]
CHR Extension: (Appel Skype) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-12-11]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (ProductivityBoss) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlnggmifacdaoeegomjajadfhijmahl [2016-10-02]
CHR Extension: (uBlock Origin) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-12-19]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (Sniper Hunter 2) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdpdodlpmgflipkeghahbbjdaihepgkk [2016-08-04]
CHR Extension: (AdBlock) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-07]
CHR Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-09]
CHR Extension: (2048) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\hekhdfjankbhklfkjmnmnefcacndeoll [2017-12-28]
CHR Extension: (Qwant.com) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnlkiofnhhoahaiimdicppgemmmomijo [2017-07-29]
CHR Extension: (Isoball 3) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\iajlkcpgcnbhfhpdeooockfaincfkjjj [2014-11-25]
CHR Extension: (Pacman) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielohiojckmcdefafhjhngbflglmilip [2017-12-28]
CHR Extension: (myTaste Browser Button) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmfnnmioagmcopmmbdfpodhcpnehddbi [2017-05-17]
CHR Extension: (Google Maps) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Signal Spam) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\npkncdihipibabapnailakhpajlglbfk [2017-10-24]
CHR Extension: (uBlock Plus Adblocker) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\oofnbdifeelbaidfgpikinijekkjcicg [2017-11-19]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-21]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-07]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-07]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-07]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-21]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-07]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-07]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-07]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-07]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-07]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-07]
CHR Extension: (Google Docs hors connexion) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-07]
CHR Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-07]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-07]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-21]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-21]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-21]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-21]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-21]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR Extension: (HTTPS partout) - C:\Users\Jean Jacques\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2017-11-17]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-12-16] (Adobe Systems Incorporated) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5906816 2017-12-30] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2017-12-30] (AVAST Software)
R2 cbVSCService11; C:\Program Files\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [Fichier non signé]
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-07-10] (Digital Wave Ltd.) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
S4 myCANAL Server; C:\ProgramData\myCANAL\nssm.exe [294912 2017-01-17] () [Fichier non signé]
S4 MyEpson Portal Service; C:\Program Files\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (Seiko Epson Corporation)
S4 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [503080 2010-05-04] (Nero AG)
R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
R2 Serviio; C:\Program Files\Serviio\bin\ServiioService.exe [413696 2017-07-23] () [Fichier non signé]
S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-06-01] (Skype Technologies) [Fichier non signé]
R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-09] (Reason Software Company Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files\Wondershare\MobileTrans\DriverInstall.exe [115856 2016-10-18] (Wondershare)
S3 PS3 Media Server; "C:\Program Files\PS3 Media Server\win32\service\wrapper.exe" -s "C:\Program Files\PS3 Media Server\win32\service\wrapper.conf"
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [24576 2015-01-26] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [29696 2015-01-26] (LG Electronics Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [158224 2017-12-30] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [255584 2017-12-30] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [157376 2017-12-30] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [276696 2017-12-30] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [50344 2017-12-30] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [118144 2017-12-30] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42824 2017-12-30] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [31064 2017-04-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [124408 2017-12-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr.sys [70208 2017-12-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [70832 2017-12-30] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [783104 2017-12-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [390272 2017-12-30] (AVAST Software)
R3 aswStmXP; C:\Windows\System32\drivers\aswStmXP.sys [205360 2017-12-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [294680 2017-12-30] (AVAST Software)
S3 fbxusb; C:\Windows\System32\DRIVERS\fbxusb32.sys [21344 2004-10-20] (FreeBox SA) [Fichier non signé]
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Fichier non signé]
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [221112 2018-01-08] (Malwarebytes)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [55104 2012-07-02] (Intel Corporation)
R3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13976 2009-04-30] (Logitech Inc.)
R3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2014-11-28] (Secunia)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx86.sys [64624 2017-12-30] ()
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-07-01] (The OpenVPN Project)
S3 andnetndis; system32\DRIVERS\lgandnetndis.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-01-08 10:33 - 2018-01-08 10:43 - 000000000 ____D C:\FRST
2018-01-08 10:22 - 2018-01-08 10:22 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\ZHP
2018-01-08 10:19 - 2018-01-08 10:19 - 000002173 _____ C:\WinChk.txt
2018-01-08 10:07 - 2018-01-08 10:48 - 000000000 ____D C:\Users\Jean Jacques\Desktop\DESINF
2018-01-08 08:45 - 2018-01-08 08:45 - 000221112 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-01-08 08:45 - 2018-01-08 08:45 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-01-06 14:58 - 2018-01-07 10:36 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-01-06 14:57 - 2018-01-07 10:37 - 000075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-01-05 14:55 - 2018-01-05 16:13 - 000000000 ____D C:\Users\Jean Jacques\Desktop\ENREGIST
2018-01-03 10:50 - 2018-01-03 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobian Backup 11
2018-01-01 18:33 - 2018-01-01 18:34 - 000000683 _____ C:\Users\Jean Jacques\Desktop\agenda 2018.lnk
2017-12-31 18:02 - 2017-12-31 18:02 - 000319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2017-12-31 18:02 - 2017-12-31 18:02 - 000000000 ____D C:\Windows\system32\RTCOM
2017-12-31 18:02 - 2017-06-29 18:52 - 000357152 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000196000 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000183608 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000150552 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 002561968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000371808 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000181224 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000088272 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000074376 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 004482048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2017-12-31 18:02 - 2017-06-29 18:50 - 003610088 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2017-12-31 18:02 - 2017-06-29 18:50 - 003092336 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 002906624 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 002156544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 001791792 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000768808 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000344392 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000063704 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000060080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000022152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 003661720 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 001948800 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000243856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000142320 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000101328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-12-31 18:02 - 2017-06-29 18:48 - 000532888 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2017-12-31 18:02 - 2017-06-29 18:48 - 000105648 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2017-12-31 18:02 - 2017-06-29 03:05 - 012334923 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-12-31 18:01 - 2017-12-31 18:02 - 000000000 ___HD C:\Program Files\Temp
2017-12-31 18:01 - 2016-09-22 14:55 - 002839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-12-31 15:30 - 2017-12-31 15:30 - 000000000 ____D C:\Users\Jean Jacques\Documents\Audacity
2017-12-31 10:20 - 2017-12-31 10:20 - 000000783 _____ C:\Users\Jean Jacques\Desktop\Audacity.lnk
2017-12-30 15:12 - 2017-12-30 15:12 - 000000783 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-12-30 14:39 - 2017-12-30 14:39 - 000064624 _____ C:\Windows\system32\Drivers\stdriverx86.sys
2017-12-30 14:39 - 2017-12-30 14:39 - 000000942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTap Streaming Audio Recorder.lnk
2017-12-30 08:54 - 2017-12-30 08:54 - 000305840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-12-30 08:54 - 2017-12-30 08:54 - 000118144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2017-12-14 16:56 - 2017-12-14 16:56 - 000000000 ____D C:\Program Files\EnveloppesEditor1.12
2017-12-13 12:41 - 2017-12-30 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2017-12-13 12:41 - 2017-12-13 12:41 - 000000934 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RecordPad Sound Recorder.lnk
2017-12-13 12:41 - 2017-12-13 12:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dictation and Transcription Programs
2017-12-13 12:40 - 2017-12-13 12:40 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Recordpad
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-01-08 10:44 - 2006-11-02 13:45 - 000004224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-08 10:44 - 2006-11-02 13:45 - 000004224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-08 10:27 - 2015-10-06 17:35 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\ZHP
2018-01-08 10:27 - 2014-12-05 10:37 - 000000182 _____ C:\Users\Jean
2018-01-08 09:58 - 2017-07-21 12:16 - 000000000 ____D C:\MES DOCUMENTS
2018-01-08 09:57 - 2014-11-24 11:31 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\vlc
2018-01-08 09:44 - 2009-04-11 17:33 - 001614476 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-08 09:44 - 2009-04-11 17:32 - 000721870 _____ C:\Windows\system32\perfh00C.dat
2018-01-08 09:44 - 2009-04-11 17:32 - 000145732 _____ C:\Windows\system32\perfc00C.dat
2018-01-08 09:44 - 2006-11-02 12:18 - 000000000 ____D C:\Windows\inf
2018-01-08 09:21 - 2014-11-24 11:37 - 000117760 _____ C:\Users\Jean Jacques\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-01-08 08:45 - 2015-08-12 08:11 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-01-08 08:44 - 2006-11-02 13:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-07 22:48 - 2006-11-02 13:58 - 000032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-01-07 10:38 - 2014-11-25 19:41 - 000000000 ____D C:\Users\Jean Jacques\Desktop\RACCOURCIS
2018-01-06 21:45 - 2015-05-26 19:10 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\MuseScore
2018-01-06 21:11 - 2014-11-25 21:27 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Audacity
2018-01-06 15:18 - 2017-05-10 13:35 - 000000000 ____D C:\AdwCleaner
2018-01-06 15:05 - 2014-12-14 09:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\CrashDumps
2018-01-06 14:58 - 2014-12-07 20:33 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-05 20:46 - 2006-11-02 12:18 - 000000000 ____D C:\Windows\tracing
2018-01-05 16:08 - 2016-11-23 09:01 - 000000000 ____D C:\Users\Jean Jacques\AppData\LocalLow\Mozilla
2018-01-03 10:50 - 2014-11-29 13:23 - 000000000 ____D C:\Program Files\Cobian Backup 11
2017-12-31 18:02 - 2014-12-02 16:27 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2017-12-31 18:02 - 2014-11-22 16:06 - 000000000 ____D C:\Users\Jean Jacques
2017-12-30 15:22 - 2014-11-26 10:35 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\DVDVideoSoft
2017-12-30 15:12 - 2016-02-14 17:50 - 000000000 ____D C:\Program Files\Audacity
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\NCH Software
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\ProgramData\NCH Software
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\Program Files\NCH Software
2017-12-30 12:25 - 2016-11-22 22:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-30 08:54 - 2017-11-26 17:53 - 000158224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000276696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblogx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000255584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000157376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidshx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000050344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbunivx.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000783104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000390272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000294680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000205360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStmXP.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000124408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000070832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000070208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000042824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-12-30 08:50 - 2016-01-01 18:00 - 000000197 _____ C:\Users\Jean Jacques\SecurityKISSTunnel.config
2017-12-30 08:43 - 2014-11-29 14:54 - 000000000 ____D C:\Program Files\SecurityKISS Tunnel
2017-12-29 21:15 - 2016-10-23 20:06 - 000001370 _____ C:\Users\Jean Jacques\Desktop\Windows Phone.lnk
2017-12-29 21:14 - 2014-11-26 11:25 - 000000000 ____D C:\Users\Jean Jacques\ICONES
2017-12-29 21:09 - 2017-07-17 19:18 - 000000000 ___HD C:\Users\Jean Jacques\Desktop\.picasaoriginals
2017-12-19 09:18 - 2017-03-15 14:21 - 000000000 ____D C:\Users\Jean Jacques\Documents\Remote Assistance Logs
2017-12-16 20:28 - 2014-11-24 08:49 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-12-16 20:28 - 2014-11-24 08:49 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-12-16 20:28 - 2014-11-24 08:49 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-14 18:17 - 2017-10-24 20:02 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\PDFCreator
2017-12-11 22:21 - 2014-11-25 21:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Skype
==================== Fichiers à la racine de certains dossiers =======
2016-01-28 09:33 - 2016-01-28 09:33 - 006828320 _____ (Piriform Ltd) C:\Users\Jean Jacques\ccsetup514.exe
2011-06-06 12:50 - 2011-06-06 12:50 - 000000054 _____ () C:\Program Files\Arrow.gif
2011-06-06 12:50 - 2011-06-06 12:50 - 000000631 _____ () C:\Program Files\Background.jpg
2014-11-29 13:12 - 2014-11-11 17:54 - 003106816 _____ () C:\Program Files\Captvty.exe
2014-11-29 13:12 - 2012-08-15 10:49 - 000000245 _____ () C:\Program Files\Captvty.exe.config
2014-11-29 13:13 - 2014-11-29 15:16 - 000000080 _____ () C:\Program Files\captvty.ini
2011-08-05 11:19 - 2011-08-05 11:19 - 000222720 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Program Files\l3codecp.acm
2011-06-21 17:33 - 2011-06-21 17:33 - 009532452 _____ () C:\Program Files\Meiryoz.ttc
2016-02-05 19:18 - 2016-02-18 11:18 - 000000133 _____ () C:\Users\Jean Jacques\AppData\Roaming\WB.CFG
2014-11-22 16:06 - 2017-02-26 18:07 - 000002032 _____ () C:\Users\Jean Jacques\AppData\Local\d3d9caps.dat
2014-11-24 11:37 - 2018-01-08 09:21 - 000117760 _____ () C:\Users\Jean Jacques\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-03-15 14:29 - 2017-03-15 14:40 - 000000304 _____ () C:\Users\Jean Jacques\AppData\Local\RAExpertHistory.xml
2017-12-02 14:11 - 2017-12-02 14:11 - 000000841 _____ () C:\Users\Jean Jacques\AppData\Local\recently-used.xbel
2016-04-23 09:50 - 2016-04-23 09:50 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{5B75147B-2B77-40DF-910B-898E920A1500}
2017-11-07 14:18 - 2017-11-07 14:18 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{6975B90E-D9DA-4F24-B346-2873927EB00C}
2015-11-06 13:24 - 2015-11-06 13:24 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{ABAA655E-D08D-42A9-9C91-A7071BF67E7A}
2016-05-02 07:54 - 2016-05-02 07:54 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{D9A7889A-76EA-429B-971B-5B125DA32B7B}
2017-11-11 09:56 - 2017-11-11 09:56 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{F6C19C66-A392-4BB6-910A-90A33AC94930}
2015-11-11 08:38 - 2015-11-11 08:38 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{FB60847A-0DA2-465B-9C33-360AEED210EB}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-01-08 08:50
==================== Fin de FRST.txt ============================
Exécuté par Jean Jacques (administrateur) sur PC-DE-JEANJACQU (08-01-2018 10:48:14)
Exécuté depuis C:\Users\Jean Jacques\Desktop\DESINF
Profils chargés: Jean Jacques (Profils disponibles: Jean Jacques)
Platform: Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Luis Cobian, CobianSoft) C:\Program Files\Cobian Backup 11\Cobian.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Luis Cobian, CobianSoft) C:\Program Files\Cobian Backup 11\cbInterface.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(CobianSoft, Luis Cobian) C:\Program Files\Cobian Backup 11\cbVSCService11.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Secunia) C:\Program Files\Secunia\PSI\psia.exe
() C:\Program Files\Serviio\bin\ServiioService.exe
() C:\Program Files\Serviio\bin\ServiioService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_svc.exe
(Reason Software Company Inc.) C:\Program Files\Unchecky\bin\unchecky_bg.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Secunia) C:\Program Files\Secunia\PSI\sua.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FARNGDE.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2017-12-30] (AVAST Software)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [16553472 2017-06-29] (Realtek Semiconductor)
HKLM\...\Run: [Cobian Backup 11] => C:\Program Files\Cobian Backup 11\Cobian.exe [720896 2013-03-07] (Luis Cobian, CobianSoft)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7814600 2017-11-08] (Piriform Ltd)
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] ff000000
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\...\Policies\Explorer: [_NoDriveTypeAutoRun] 255
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [879616 2008-01-21] (Microsoft Corporation)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{02F229E3-ECC9-4F59-815D-F35677FC5679}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{6A869EB6-F946-4599-92C1-72172213A068}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{ABC2E3BE-943C-4E96-937A-DDA5375452D9}: [DhcpNameServer] 10.11.0.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-2603035466-673117361-2613117589-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxps://www.google.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2603035466-673117361-2613117589-1000 -> {A058536E-3AC7-47CB-87FC-C7B040D81579} URL = hxxps://www.google.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-26] (AVAST Software)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-20] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
FireFox:
========
FF DefaultProfile: mh1aeejb.default
FF ProfilePath: C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default [2018-01-08]
FF Extension: (HTTPS partout) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\https-everywhere@eff.org.xpi [2017-11-05]
FF Extension: (Pin It button) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2016-10-09] [Legacy]
FF Extension: (uBlock Origin) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\uBlock0@raymondhill.net.xpi [2017-11-19]
FF Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\wrc@avast.com.xpi [2017-11-26]
FF Extension: (__MSG_appName__) - C:\Users\Jean Jacques\AppData\Roaming\Mozilla\Firefox\Profiles\mh1aeejb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}.xpi [2017-11-05]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-09-04] [Legacy] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-15] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin: @Diginext.fr/VirtualGeoGP -> C:\Program Files\VirtualGeo3-GP\WebPlugin\Win32\npQtAPI3DPlugin.dll [2015-05-07] (DIGINEXT)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-22] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-22] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.5 -> C:\Program Files\TabletPlugins\npwacom.dll [2010-09-02] (Wacom, Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> qwant.com/?client=qwant-chrome
CHR StartupUrls: Default -> "hxxps://www.google.fr/"
CHR NewTab: Default -> Not-active:"chrome-extension://chlnggmifacdaoeegomjajadfhijmahl/stubby.html"
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default [2018-01-08]
CHR Extension: (Carte du ciel) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\acnecepeneiomaebkkagcfbbakcfljdc [2015-12-06]
CHR Extension: (Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-02]
CHR Extension: (Tv-replay) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfgogkjjjedakfeibebkfmlbmagifci [2014-11-25]
CHR Extension: (WOT: Web of Trust, Évaluation de la réputation de sites Web) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-12-28]
CHR Extension: (Appel Skype) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-12-11]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (ProductivityBoss) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlnggmifacdaoeegomjajadfhijmahl [2016-10-02]
CHR Extension: (uBlock Origin) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-12-19]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (Sniper Hunter 2) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdpdodlpmgflipkeghahbbjdaihepgkk [2016-08-04]
CHR Extension: (AdBlock) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-07]
CHR Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-09]
CHR Extension: (2048) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\hekhdfjankbhklfkjmnmnefcacndeoll [2017-12-28]
CHR Extension: (Qwant.com) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnlkiofnhhoahaiimdicppgemmmomijo [2017-07-29]
CHR Extension: (Isoball 3) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\iajlkcpgcnbhfhpdeooockfaincfkjjj [2014-11-25]
CHR Extension: (Pacman) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielohiojckmcdefafhjhngbflglmilip [2017-12-28]
CHR Extension: (myTaste Browser Button) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmfnnmioagmcopmmbdfpodhcpnehddbi [2017-05-17]
CHR Extension: (Google Maps) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Signal Spam) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\npkncdihipibabapnailakhpajlglbfk [2017-10-24]
CHR Extension: (uBlock Plus Adblocker) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\oofnbdifeelbaidfgpikinijekkjcicg [2017-11-19]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-21]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-07]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-07]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-07]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-21]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-07]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-07]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-07]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-07]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-07]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-07]
CHR Extension: (Google Docs hors connexion) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-07]
CHR Extension: (Avast Online Security) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-07]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-07]
CHR Profile: C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-27]
CHR Extension: (Google Slides) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-21]
CHR Extension: (Google Docs) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Google Drive) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-21]
CHR Extension: (YouTube) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-21]
CHR Extension: (Recherche Google) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-21]
CHR Extension: (Google Sheets) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-21]
CHR Extension: (Gmail) - C:\Users\Jean Jacques\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR Extension: (HTTPS partout) - C:\Users\Jean Jacques\AppData\Roaming\Opera Software\Opera Stable\Extensions\edaplhobcmdaneconioghljnnopmkhgm [2017-11-17]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-12-16] (Adobe Systems Incorporated) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5906816 2017-12-30] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2017-12-30] (AVAST Software)
R2 cbVSCService11; C:\Program Files\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [Fichier non signé]
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-07-10] (Digital Wave Ltd.) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
S4 myCANAL Server; C:\ProgramData\myCANAL\nssm.exe [294912 2017-01-17] () [Fichier non signé]
S4 MyEpson Portal Service; C:\Program Files\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (Seiko Epson Corporation)
S4 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [503080 2010-05-04] (Nero AG)
R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
R2 Serviio; C:\Program Files\Serviio\bin\ServiioService.exe [413696 2017-07-23] () [Fichier non signé]
S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-06-01] (Skype Technologies) [Fichier non signé]
R2 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [294168 2017-10-09] (Reason Software Company Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files\Wondershare\MobileTrans\DriverInstall.exe [115856 2016-10-18] (Wondershare)
S3 PS3 Media Server; "C:\Program Files\PS3 Media Server\win32\service\wrapper.exe" -s "C:\Program Files\PS3 Media Server\win32\service\wrapper.conf"
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [24576 2015-01-26] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [29696 2015-01-26] (LG Electronics Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [158224 2017-12-30] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [255584 2017-12-30] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [157376 2017-12-30] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [276696 2017-12-30] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [50344 2017-12-30] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [118144 2017-12-30] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42824 2017-12-30] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [31064 2017-04-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [124408 2017-12-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr.sys [70208 2017-12-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [70832 2017-12-30] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [783104 2017-12-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [390272 2017-12-30] (AVAST Software)
R3 aswStmXP; C:\Windows\System32\drivers\aswStmXP.sys [205360 2017-12-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [294680 2017-12-30] (AVAST Software)
S3 fbxusb; C:\Windows\System32\DRIVERS\fbxusb32.sys [21344 2004-10-20] (FreeBox SA) [Fichier non signé]
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Fichier non signé]
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [221112 2018-01-08] (Malwarebytes)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [55104 2012-07-02] (Intel Corporation)
R3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13976 2009-04-30] (Logitech Inc.)
R3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2014-11-28] (Secunia)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx86.sys [64624 2017-12-30] ()
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-07-01] (The OpenVPN Project)
S3 andnetndis; system32\DRIVERS\lgandnetndis.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-01-08 10:33 - 2018-01-08 10:43 - 000000000 ____D C:\FRST
2018-01-08 10:22 - 2018-01-08 10:22 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\ZHP
2018-01-08 10:19 - 2018-01-08 10:19 - 000002173 _____ C:\WinChk.txt
2018-01-08 10:07 - 2018-01-08 10:48 - 000000000 ____D C:\Users\Jean Jacques\Desktop\DESINF
2018-01-08 08:45 - 2018-01-08 08:45 - 000221112 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-01-08 08:45 - 2018-01-08 08:45 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-01-06 14:58 - 2018-01-07 10:36 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-01-06 14:57 - 2018-01-07 10:37 - 000075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-01-05 14:55 - 2018-01-05 16:13 - 000000000 ____D C:\Users\Jean Jacques\Desktop\ENREGIST
2018-01-03 10:50 - 2018-01-03 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobian Backup 11
2018-01-01 18:33 - 2018-01-01 18:34 - 000000683 _____ C:\Users\Jean Jacques\Desktop\agenda 2018.lnk
2017-12-31 18:02 - 2017-12-31 18:02 - 000319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2017-12-31 18:02 - 2017-12-31 18:02 - 000000000 ____D C:\Windows\system32\RTCOM
2017-12-31 18:02 - 2017-06-29 18:52 - 000357152 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000196000 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000183608 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2017-12-31 18:02 - 2017-06-29 18:52 - 000150552 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 002561968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000371808 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000181224 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000088272 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2017-12-31 18:02 - 2017-06-29 18:51 - 000074376 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 004482048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2017-12-31 18:02 - 2017-06-29 18:50 - 003610088 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2017-12-31 18:02 - 2017-06-29 18:50 - 003092336 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 002906624 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 002156544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 001791792 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000768808 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000344392 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000307232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000063704 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000060080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn32.dll
2017-12-31 18:02 - 2017-06-29 18:50 - 000022152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 003661720 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 001948800 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000243856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000142320 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2017-12-31 18:02 - 2017-06-29 18:49 - 000101328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-12-31 18:02 - 2017-06-29 18:48 - 000532888 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2017-12-31 18:02 - 2017-06-29 18:48 - 000105648 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2017-12-31 18:02 - 2017-06-29 03:05 - 012334923 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-12-31 18:01 - 2017-12-31 18:02 - 000000000 ___HD C:\Program Files\Temp
2017-12-31 18:01 - 2016-09-22 14:55 - 002839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-12-31 15:30 - 2017-12-31 15:30 - 000000000 ____D C:\Users\Jean Jacques\Documents\Audacity
2017-12-31 10:20 - 2017-12-31 10:20 - 000000783 _____ C:\Users\Jean Jacques\Desktop\Audacity.lnk
2017-12-30 15:12 - 2017-12-30 15:12 - 000000783 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-12-30 14:39 - 2017-12-30 14:39 - 000064624 _____ C:\Windows\system32\Drivers\stdriverx86.sys
2017-12-30 14:39 - 2017-12-30 14:39 - 000000942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTap Streaming Audio Recorder.lnk
2017-12-30 08:54 - 2017-12-30 08:54 - 000305840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-12-30 08:54 - 2017-12-30 08:54 - 000118144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2017-12-14 16:56 - 2017-12-14 16:56 - 000000000 ____D C:\Program Files\EnveloppesEditor1.12
2017-12-13 12:41 - 2017-12-30 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2017-12-13 12:41 - 2017-12-13 12:41 - 000000934 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RecordPad Sound Recorder.lnk
2017-12-13 12:41 - 2017-12-13 12:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dictation and Transcription Programs
2017-12-13 12:40 - 2017-12-13 12:40 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Recordpad
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-01-08 10:44 - 2006-11-02 13:45 - 000004224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-08 10:44 - 2006-11-02 13:45 - 000004224 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-08 10:27 - 2015-10-06 17:35 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\ZHP
2018-01-08 10:27 - 2014-12-05 10:37 - 000000182 _____ C:\Users\Jean
2018-01-08 09:58 - 2017-07-21 12:16 - 000000000 ____D C:\MES DOCUMENTS
2018-01-08 09:57 - 2014-11-24 11:31 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\vlc
2018-01-08 09:44 - 2009-04-11 17:33 - 001614476 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-08 09:44 - 2009-04-11 17:32 - 000721870 _____ C:\Windows\system32\perfh00C.dat
2018-01-08 09:44 - 2009-04-11 17:32 - 000145732 _____ C:\Windows\system32\perfc00C.dat
2018-01-08 09:44 - 2006-11-02 12:18 - 000000000 ____D C:\Windows\inf
2018-01-08 09:21 - 2014-11-24 11:37 - 000117760 _____ C:\Users\Jean Jacques\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-01-08 08:45 - 2015-08-12 08:11 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-01-08 08:44 - 2006-11-02 13:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-07 22:48 - 2006-11-02 13:58 - 000032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-01-07 10:38 - 2014-11-25 19:41 - 000000000 ____D C:\Users\Jean Jacques\Desktop\RACCOURCIS
2018-01-06 21:45 - 2015-05-26 19:10 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\MuseScore
2018-01-06 21:11 - 2014-11-25 21:27 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Audacity
2018-01-06 15:18 - 2017-05-10 13:35 - 000000000 ____D C:\AdwCleaner
2018-01-06 15:05 - 2014-12-14 09:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\CrashDumps
2018-01-06 14:58 - 2014-12-07 20:33 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-05 20:46 - 2006-11-02 12:18 - 000000000 ____D C:\Windows\tracing
2018-01-05 16:08 - 2016-11-23 09:01 - 000000000 ____D C:\Users\Jean Jacques\AppData\LocalLow\Mozilla
2018-01-03 10:50 - 2014-11-29 13:23 - 000000000 ____D C:\Program Files\Cobian Backup 11
2017-12-31 18:02 - 2014-12-02 16:27 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2017-12-31 18:02 - 2014-11-22 16:06 - 000000000 ____D C:\Users\Jean Jacques
2017-12-30 15:22 - 2014-11-26 10:35 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\DVDVideoSoft
2017-12-30 15:12 - 2016-02-14 17:50 - 000000000 ____D C:\Program Files\Audacity
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\NCH Software
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\ProgramData\NCH Software
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs
2017-12-30 14:39 - 2014-12-16 17:05 - 000000000 ____D C:\Program Files\NCH Software
2017-12-30 12:25 - 2016-11-22 22:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-30 08:54 - 2017-11-26 17:53 - 000158224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000276696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblogx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000255584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000157376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidshx.sys
2017-12-30 08:54 - 2017-02-28 15:59 - 000050344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbunivx.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000783104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000390272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000294680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000205360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStmXP.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000124408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000070832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000070208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2017-12-30 08:54 - 2016-12-03 20:15 - 000042824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-12-30 08:50 - 2016-01-01 18:00 - 000000197 _____ C:\Users\Jean Jacques\SecurityKISSTunnel.config
2017-12-30 08:43 - 2014-11-29 14:54 - 000000000 ____D C:\Program Files\SecurityKISS Tunnel
2017-12-29 21:15 - 2016-10-23 20:06 - 000001370 _____ C:\Users\Jean Jacques\Desktop\Windows Phone.lnk
2017-12-29 21:14 - 2014-11-26 11:25 - 000000000 ____D C:\Users\Jean Jacques\ICONES
2017-12-29 21:09 - 2017-07-17 19:18 - 000000000 ___HD C:\Users\Jean Jacques\Desktop\.picasaoriginals
2017-12-19 09:18 - 2017-03-15 14:21 - 000000000 ____D C:\Users\Jean Jacques\Documents\Remote Assistance Logs
2017-12-16 20:28 - 2014-11-24 08:49 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-12-16 20:28 - 2014-11-24 08:49 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-12-16 20:28 - 2014-11-24 08:49 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-14 18:17 - 2017-10-24 20:02 - 000000000 ____D C:\Users\Jean Jacques\AppData\Local\PDFCreator
2017-12-11 22:21 - 2014-11-25 21:05 - 000000000 ____D C:\Users\Jean Jacques\AppData\Roaming\Skype
==================== Fichiers à la racine de certains dossiers =======
2016-01-28 09:33 - 2016-01-28 09:33 - 006828320 _____ (Piriform Ltd) C:\Users\Jean Jacques\ccsetup514.exe
2011-06-06 12:50 - 2011-06-06 12:50 - 000000054 _____ () C:\Program Files\Arrow.gif
2011-06-06 12:50 - 2011-06-06 12:50 - 000000631 _____ () C:\Program Files\Background.jpg
2014-11-29 13:12 - 2014-11-11 17:54 - 003106816 _____ () C:\Program Files\Captvty.exe
2014-11-29 13:12 - 2012-08-15 10:49 - 000000245 _____ () C:\Program Files\Captvty.exe.config
2014-11-29 13:13 - 2014-11-29 15:16 - 000000080 _____ () C:\Program Files\captvty.ini
2011-08-05 11:19 - 2011-08-05 11:19 - 000222720 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Program Files\l3codecp.acm
2011-06-21 17:33 - 2011-06-21 17:33 - 009532452 _____ () C:\Program Files\Meiryoz.ttc
2016-02-05 19:18 - 2016-02-18 11:18 - 000000133 _____ () C:\Users\Jean Jacques\AppData\Roaming\WB.CFG
2014-11-22 16:06 - 2017-02-26 18:07 - 000002032 _____ () C:\Users\Jean Jacques\AppData\Local\d3d9caps.dat
2014-11-24 11:37 - 2018-01-08 09:21 - 000117760 _____ () C:\Users\Jean Jacques\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-03-15 14:29 - 2017-03-15 14:40 - 000000304 _____ () C:\Users\Jean Jacques\AppData\Local\RAExpertHistory.xml
2017-12-02 14:11 - 2017-12-02 14:11 - 000000841 _____ () C:\Users\Jean Jacques\AppData\Local\recently-used.xbel
2016-04-23 09:50 - 2016-04-23 09:50 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{5B75147B-2B77-40DF-910B-898E920A1500}
2017-11-07 14:18 - 2017-11-07 14:18 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{6975B90E-D9DA-4F24-B346-2873927EB00C}
2015-11-06 13:24 - 2015-11-06 13:24 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{ABAA655E-D08D-42A9-9C91-A7071BF67E7A}
2016-05-02 07:54 - 2016-05-02 07:54 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{D9A7889A-76EA-429B-971B-5B125DA32B7B}
2017-11-11 09:56 - 2017-11-11 09:56 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{F6C19C66-A392-4BB6-910A-90A33AC94930}
2015-11-11 08:38 - 2015-11-11 08:38 - 000000000 _____ () C:\Users\Jean Jacques\AppData\Local\{FB60847A-0DA2-465B-9C33-360AEED210EB}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-01-08 08:50
==================== Fin de FRST.txt ============================