Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 02.08.2018
Exécuté par Léa (administrateur) sur LÉA-PC (12-08-2018 23:29:35)
Exécuté depuis C:\Users\Léa\Desktop
Profils chargés: Léa (Profils disponibles: Léa)
Platform: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\ProgramData\NetEngine\bin\D8\netengine.exe
(Abengine) C:\Program Files\HighlightSearches\abengine.exe
() C:\Program Files\908C8F9D-D24A-4837-8EC1-08BF193F6091\etmajyzoqm.exe
(Just Develop It) C:\Program Files\MyPC Backup\BackupStack.exe
() C:\Program Files\FastPlayer\FPUpdaterService.exe
(CybelSoft) C:\Program Files\ma-config.com\MaConfigAgent.exe
() C:\Program Files\005\mtgaotushb32.exe
() C:\Users\Léa\AppData\Roaming\006A7466-1430321503-E011-95AF-F2B0CA726541\nsdA822.tmp
() C:\Program Files\PenWes\DNSService.exe
() C:\Windows\rcore.exe
() C:\Users\Léa\AppData\Roaming\006A7466-1430321503-E011-95AF-F2B0CA726541\jnsj6382.tmp
() C:\Users\Léa\AppData\Local\ConvertAd\CASrv.exe
() C:\Users\Léa\AppData\Roaming\SoftwareUpdater\SUsrv.exe
() C:\Users\Léa\AppData\Roaming\VOPackage\VOsrv.exe
(Aztec Media Inc) C:\Program Files\Assets Manager\smdmf\SmdmFService.exe
(ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe
() C:\Users\Léa\AppData\Local\006A7466-1430328938-E011-95AF-F2B0CA726541\cnsfB3E7.tmp
() C:\Program Files\Uoda4yzvhmjrlntf\ogm4zjuzmmvlmde.exe
() C:\Users\Léa\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe
(Word Proser) C:\Program Files\WordProser_1.10.0.6\Service\wpsvc.exe
(Time Lapse Solutions) C:\ProgramData\JUCuYG\GXyCRFA.exe
(Cinema PlusV29.04) C:\Program Files\CinemaPlus-3.2cV29.04\576986dd-7894-4fea-8f2c-a74ec4862c94-1-6.exe
(Cinema PlusV29.04) C:\Program Files\CinemaPlus-3.2cV29.04\576986dd-7894-4fea-8f2c-a74ec4862c94-6.exe
(InstallMoon) C:\Program Files\GoHD\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-6.exe
(globalUpdate) C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
() C:\Program Files\Godzilla Shopper\godzilla_shopper_helper_service.exe
() C:\Program Files\version86BlockAndSurf\o8BlockAndSurft89.exe
() C:\Program Files\ASP\AdvancedSystemProtector.exe
() C:\Program Files\PenWes\dnshelper.exe
(V-9.1HQV21.09) C:\Program Files\V-9.1HQV21.09\f3598b56-d163-42e8-82dc-b238237a5d3a.exe
() C:\Program Files\MaxComputerCleaner_v17.337\MaxComputerCleaner_Maintenance.exe
(SUPER PC TOOLS LIMITED) C:\Program Files\Super Optimizer\SupOptSmartScan.exe
() C:\Users\Léa\AppData\Local\fst_fr_332\upfst_fr_332.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\fst_fr_332\fst_fr_332.exe
() C:\Program Files\Uoda4yzvhmjrlntf\odu4ntu5mjzlyje.exe
() C:\Program Files\gmsd_fr_148\gmsd_fr_148.exe
(SoftBrain Technologies Ltd.) C:\Users\Léa\AppData\Local\SmartWeb\SmartWebHelper.exe
() C:\Program Files\gmsd_fr_472\gmsd_fr_472.exe
(Windesk Winsearch) C:\Program Files\WindeskWinsearch\Windesk Winsearch.exe
() C:\Program Files\gmsd_fr_486\gmsd_fr_486.exe
() C:\Program Files\gmsd_fr_596\gmsd_fr_596.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files\Sogy4ntu1mjjlzdf\ogi4mzv2mnnlbdf.exe
(Facebook Inc.) C:\Users\Léa\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\AppleIEDAV.exe
() C:\Users\Léa\AppData\Roaming\cacaoweb\cacaoweb.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
() C:\Program Files\Groovorio\BRS\brs.exe
(SoftBrain Technologies Ltd.) C:\Users\Léa\AppData\Local\SmartWeb\SmartWebApp.exe
(Crossbrowse) C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Nosibay) C:\Users\Léa\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe
(Nosibay) C:\Users\Léa\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe
() C:\Program Files\FastPlayer\WebBrowser.exe
(Super PC Tools Ltd) C:\ProgramData\{737ded0b-5f8b-d84e-737d-ded0b5f8b42d}\hqghumeaylnlf.exe
(MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe
() C:\Program Files\RapidMediaConverter\RapidMediaConverterApp.exe
( ) C:\Program Files\version86BlockAndSurf\HVujmAT2y.exe
(Crossbrowse) C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\ProgramData\NetEngine\bin\D8\netengine.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
() C:\Users\Léa\AppData\Local\ConvertAd\ConvertAd.exe
(Web Bar Media) C:\Program Files\WebBar\2.0.5574.22315\wb.exe
() C:\Users\Léa\AppData\Local\Temp\isdka5gDYdfn\ISightHost.exe
() C:\Users\Léa\AppData\Local\006A7466-1430328938-E011-95AF-F2B0CA726541\ansfAFA2.exe
(Nosibay) C:\Users\Léa\AppData\Roaming\Nosibay\Bubble Dock\Bubble Dock.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Pay By Ads LTD) C:\Program Files\Pay-By-Ads\Yahoo! Search\1.3.24.4\dsrlte.exe
(Pay By Ads LTD) C:\Program Files\Pay-By-Ads\Yahoo! Search\1.3.24.4\dsrsetup.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Léa\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\Léa\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\Léa\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [fst_fr_332] => C:\Program Files\fst_fr_332\fst_fr_332.exe [3975648 2014-08-05] ()
HKLM\...\Run: [AnyProtect Scanner] => C:\Program Files\AnyProtectEx\AnyProtect.exe [6434816 2015-04-29] (AnyProtect.com)
HKLM\...\Run: [WinCheck] => C:\Users\Léa\AppData\Local\006A7466-1430328786-E011-95AF-F2B0CA726541\bnsz46D2.exe [326144 2015-04-29] ()
HKLM\...\Run: [CrashMon] => "C:\Program Files\Uoda4yzvhmjrlntf\odu4ntu5mjzlyje.exe" "UniversalUpdater" "hxxp://log.data-url.com/crash/"
HKLM\...\Run: [gmsd_fr_148] => C:\Program Files\gmsd_fr_148\gmsd_fr_148.exe [3977360 2015-01-27] ()
HKLM\...\Run: [SmartWeb] => C:\Users\Léa\AppData\Local\SmartWeb\SmartWebHelper.exe [270696 2014-12-31] (SoftBrain Technologies Ltd.)
HKLM\...\Run: [SPDriver] => .\JSDriver\1.42.0.1802\jsdrv.exe
HKLM\...\Run: [gmsd_fr_209] => [X]
HKLM\...\Run: [gmsd_fr_472] => C:\Program Files\gmsd_fr_472\gmsd_fr_472.exe [3983816 2015-04-24] ()
HKLM\...\Run: [Windesk Winsearch] => C:\Program Files\WindeskWinsearch\Windesk Winsearch.exe [1061256 2015-04-08] (Windesk Winsearch)
HKLM\...\Run: [gmsd_fr_486] => C:\Program Files\gmsd_fr_486\gmsd_fr_486.exe [3983304 2015-04-29] ()
HKLM\...\Run: [gmsd_fr_596] => C:\Program Files\gmsd_fr_596\gmsd_fr_596.exe [3983528 2015-05-31] ()
HKLM\...\Run: [ogy4ntu1mjjlzdf] => C:\Program Files\Sogy4ntu1mjjlzdf\ogi4mzv2mnnlbdf.exe [2422784 2015-07-28] ()
HKLM\...\RunOnce: [MaxComputerCleaner_v17.337] => C:\Program Files\MaxComputerCleaner_v17.337\MaxComputerCleaner_Maintenance.exe [30920 2015-04-28] ()
HKLM\...\RunOnce: [upfst_fr_332.exe] => C:\Users\Léa\AppData\Local\fst_fr_332\upfst_fr_332.exe [3306464 2014-08-04] ()
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [Facebook Update] => C:\Users\Léa\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-03] (Facebook Inc.)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [AppleIEDAV] => C:\Program Files\Common Files\Apple\Internet Services\AppleIEDAV.exe [1315144 2013-09-04] (Apple Inc.)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [cacaoweb] => C:\Users\Léa\AppData\Roaming\cacaoweb\cacaoweb.exe [568624 2017-06-29] ()
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [BRS] => C:\Program Files\Groovorio\BRS\brs.exe [1043968 2014-10-15] ()
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [SPDriver] => .\JSDriver\1.42.0.1802\jsdrv.exe
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [Super Optimizer] => C:\Program Files\Super Optimizer\SupOptLauncher.exe [676912 2015-04-27] (SUPER PC TOOLS LIMITED)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [GoogleChromeAutoLaunch_57A51ED2A17F99D753FF11A7F6568725] => C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-03-16] (Crossbrowse)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [Bubble Dock] => C:\Users\Léa\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe [666384 2015-05-13] (Nosibay)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [WindApp] => "C:\Users\Léa\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Run: [Selection Tools] => C:\Users\Léa\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe [1530640 2015-04-09] (Nosibay)
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\RunOnce: [Groovorio] => wscript /E:vbscript /B "C:\Users\LAB9CF~1\AppData\Roaming\Groovorio\UpdateProc\bkup.dat"
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
AppInit_DLLs: __C:\PROGRA~1\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => C:\Program Files\SearchProtect\SearchProtect\bin\VC32Loader.dll [213776 2015-07-02] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WebBrowserFastPlayer.lnk [2015-01-27]
ShortcutTarget: WebBrowserFastPlayer.lnk -> C:\Program Files\FastPlayer\WebBrowser.exe ()
Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-04-29]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-29]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{737ded0b-5f8b-d84e-737d-ded0b5f8b42d}\hqghumeaylnlf.exe (Super PC Tools Ltd)
Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2015-01-27]
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RapidMediaConverterApp.lnk [2015-07-28]
ShortcutTarget: RapidMediaConverterApp.lnk -> C:\Program Files\RapidMediaConverter\RapidMediaConverterApp.exe ()
Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-01-27]
ShortcutTarget: SmartWeb.lnk -> C:\Users\Léa\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

ProxyServer: [HKLM] => 127.0.0.1:8080
ProxyEnable: [.DEFAULT] => Proxy est activé.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49446;https=127.0.0.1:49446
AutoConfigURL: [.DEFAULT] => http=127.0.0.1:49446;https=127.0.0.1:49446
Winsock: Catalog9 01 C:\Windows\system32\abengine.dll [341952 2015-04-22] (Abengine)
Winsock: Catalog9 02 C:\Windows\system32\abengine.dll [341952 2015-04-22] (Abengine)
Winsock: Catalog9 03 C:\Windows\system32\abengine.dll [341952 2015-04-22] (Abengine)
Winsock: Catalog9 04 C:\Windows\system32\abengine.dll [341952 2015-04-22] (Abengine)
Winsock: Catalog9 29 C:\Windows\system32\abengine.dll [341952 2015-04-22] (Abengine)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{67A49CAB-C113-4F72-94A6-903D46DB3BBF}: [NameServer] 127.0.0.1
Tcpip\..\Interfaces\{67A49CAB-C113-4F72-94A6-903D46DB3BBF}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{CFC02255-4317-4C60-9908-B544BB127F8C}: [NameServer] 127.0.0.1
Tcpip\..\Interfaces\{CFC02255-4317-4C60-9908-B544BB127F8C}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.oursurfing.com/?type=hppp&ts=1430321569&z=2942f36c7e2cac516cb09d1g0z8c9e4c4oag4w0qcb&from=cmi&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1433262551&z=e1748f57934b6c5b8546266g6z9cecaoaq9o7w3w2e&from=cmi&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1430321569&z=2942f36c7e2cac516cb09d1g0z8c9e4c4oag4w0qcb&from=cmi&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1433262551&z=e1748f57934b6c5b8546266g6z9cecaoaq9o7w3w2e&from=cmi&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuui-gsZzLx-7nMznKSYXOIMByVuFLxeDLl6GZWU7GQzyTdDUauBZNbqQAAGkcutHLdEQa_KXZHJ1CRx5UJ6_5A,,
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuuRYI455FZcquuwBUyEb9Jgjth1fRunFyFEe0KVjHapbfn_7RJChJl_jJl9sTmrS0dRpPAKWtbTVISZuqDmKAw,,&q={searchTerms}
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuuRYI455FZcquuwBUyEb9Jgjth1fRunFyFEe0KVjHapbfn_7RJChJl_jJl9sTmrVTozdZaWUiguF6rraiwKTqw,,&q={searchTerms}
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-f936fe4d
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://fr.msn.com/?ocid=iehp
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1430321569&z=2942f36c7e2cac516cb09d1g0z8c9e4c4oag4w0qcb&from=cmi&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T
HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=84993&tid=29458&ver=6.7&ts=1408639783749&tguid=84993-29458-1408639783749-A58EEABE333EA19336741458E876E072&st=chrome&q=
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-3c061e93bf9083c1&q={searchTerms}
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://groovorio.com/results.php?f=4&q={searchTerms}&a=grv_tuto24_14_41&cd=2XzuyEtN2Y1L1Qzuzy0EtAzy0EyDtAyEyC0A0C0AyE0F0FyBtN0D0Tzu0StCtDtCzytN1L2XzutAtFyDtFtCtFtCtN1L1Czu1N1C2X1V2Z2Y2Z1FtByE1VtCyE1VyEtCtN1L1G1B1V1N2Y1L1Qzu2SyCtBtB0Ezy0E0BzztGyCyDtCtDtGyC0C0ByCtGzzzztAzztGyE0FyC0E0F0D0FyCzzyBtDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StD0DyByByC0E0EyEtGtAyC0CtAtGyE0FtBtAtGzytCtDyDtGtA0E0B0AtB0AtC0EzzyBtDtB2Q&cr=1062469450&ir=
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-3c061e93bf9083c1&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=157&itype=n&ver=16064&tm=697&src=ds&p={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=84993&st=bs&tid=29458&ver=6.7&ts=1408639783749&tguid=84993-29458-1408639783749-A58EEABE333EA19336741458E876E072&q={searchTerms}
SearchScopes: HKLM -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuuRYI455FZcquuwBUyEb9Jgjth1fRunFyFEe0KVjHapbfn_7RJChJl_jJl9sTmrS0dRpPAKWtbTVISZuqDmKAw,,&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuuRYI455FZcquuwBUyEb9Jgjth1fRunFyFEe0KVjHapbfn_7RJChJl_jJl9sTmrS0dRpPAKWtbTVISZuqDmKAw,,&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx88tMoPUZRa_QMtWJ6VN2GOe2nhw36NnWkCAcpWLrmoOo7IKQxzxUdD7ZIEvn_7DF_5c6AfmK4BOESzuppKDZXuuRYI455FZcquuwBUyEb9Jgjth1fRunFyFEe0KVjHapbfn_7RJChJl_jJl9sTmrS0dRpPAKWtbTVISZuqDmKAw,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> OldSearch URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {0C4C07CA-33F6-4A2B-AFC9-D6E40AA7A27E} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-3c061e93bf9083c1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {ec420602-2361-4f2b-bc18-18c10aa6bf0c} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3772508499-2989987850-3463864971-1000 -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=TOSHIBAXMQ01ABD050_62N6P249TXX62N6P249T&ts=1430325188&type=default&q={searchTerms}
BHO: V-9.1HQV21.09 -> {11111111-1111-1111-1111-110611171176} -> C:\Program Files\V-9.1HQV21.09\V-9.1HQV21.09-bho.dll [2014-09-21] (V-9.1HQV21.09)
BHO: GoHD -> {11111111-1111-1111-1111-110611211180} -> C:\Program Files\GoHD\GoHD-bho.dll [2015-01-27] (InstallMoon)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\XTab\SupTab.dll [2015-04-20] ()
BHO: HomeTab -> {87911f21-722c-410a-9b81-c206d953eacb} -> C:\Program Files\HomeTab\IE\HomeTab.dll [2014-08-20] (Simply Tech LTD.)
BHO: Shopper Pro -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> C:\ProgramData\ShopperPro\ShopperPro.dll [2015-04-28] (Goobzo Ltd.)
BHO: BlockAndSurf -> {E42937DC-BFBB-CF5C-9581-71A1C3B19053} -> C:\Program Files\version86BlockAndSurf\192.dll [2015-06-02] ()
BHO: AllDaySavings -> {fbdff406-2c4c-5d35-8469-34bb67ea3353} -> C:\Program Files\908C8F9D-D24A-4837-8EC1-08BF193F6091\kzhxnitccw.dll [2014-07-28] ()
Toolbar: HKLM - HomeTab - {87911f21-722c-410a-9b81-c206d953eacb} - C:\Program Files\HomeTab\IE\HomeTab.dll [2014-08-20] (Simply Tech LTD.)
Toolbar: HKLM - Pas de nom - {ae07101b-46d4-4a98-af68-0333ea26e113} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Firefox\Extensions: [{5932BCAD-47CC-DE58-D9CC-57BBB4D71873}] - C:\Program Files\di4BlockAndSurf\175.xpi => non trouvé(e)
FF HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\...\Firefox\Extensions: [{870C5221-A135-E619-4A83-37A96857FDD2}] - C:\Program Files\ver2BlockAndSurf\186.xpi => non trouvé(e)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-04-29] (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-04-29] (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-07-10] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-07-10] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @www.dlmanager.net/omaha/tools//Software Update;version=8 -> C:\Program Files\Software\Update\1.2.201.0\npSoftwareOneClick8.dll [2014-08-22] (Boxore OU.)
FF Plugin HKU\S-1-5-21-3772508499-2989987850-3463864971-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Léa\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

Chrome:
=======
CHR DefaultProfile: Default
CHR HKLM\...\Chrome\Extension: [blmchfpimpbbdmgpcieclabeafkljbhm] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [coljhboelhlkbgaaolcngflenaggpeao] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [fcljdicbcnmfhekdcaobgbpjjifniemh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [kmedakdfngfmagjlndeckcbfcmidlbio] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [blmchfpimpbbdmgpcieclabeafkljbhm] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3772508499-2989987850-3463864971-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - chrome.exe
CHR crx: C:\Program Files\Google\Chrome\Application\36.0.1985.143\default_apps\search.crx [2014-08-07]
CHR crx: C:\Program Files\Google\Chrome\Application\36.0.1985.125\default_apps\search.crx [2014-07-15]

Opera:
=======
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\bokijhalndhhhikpnaniimagniglonke [2015-01-27]
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\egnjhciaieeiiohknchakcodbpgjnchh [2015-06-01]
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\gieanldgaaaifgdkimlkfakbpofihpdf [2015-02-15]
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\jgddaapiamkjnpaoeaebnlbofhceppik [2015-06-01]
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-29]
OPR Extension: (Pas de nom) - C:\Users\Léa\AppData\Roaming\Opera Software\Opera Stable\Extensions\mglbljebahdpopiophhdhciclgdopdkj [2015-04-29]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 22134214; c:\Program Files\Super Optimizer\SupOptStats.dll [1747504 2015-04-29] ()
R2 abengine; C:\Program Files\HighlightSearches\abengine.exe [2329600 2015-04-22] (Abengine) [Fichier non signé]
R2 AllDaySavingsService; C:\Program Files\908C8F9D-D24A-4837-8EC1-08BF193F6091\etmajyzoqm.exe [150528 2014-07-31] () [Fichier non signé]
R2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) [Fichier non signé] <==== ATTENTION
S2 CltMngSvc; C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-04-12] ()
R2 FastPlayerUpdaterService; C:\Program Files\FastPlayer\FPUpdaterService.exe [382464 2015-01-22] () [Fichier non signé]
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2015-04-29] (globalUpdate) [Fichier non signé] <==== ATTENTION
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2015-04-29] (globalUpdate) [Fichier non signé] <==== ATTENTION
R2 GXyCRFA; C:\ProgramData\JUCuYG\GXyCRFA.exe [2733544 2015-02-15] (Time Lapse Solutions)
S4 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158816 2015-04-20] ()
S4 LPTSystemUpdater; C:\Program Files\LPT\srpts.exe [32768 2014-08-27] () <==== ATTENTION
R2 MaConfigAgent; C:\Program Files\ma-config.com\MaConfigAgent.exe [2077008 2013-10-25] (CybelSoft)
R2 mtgaotushb32; C:\Program Files\005\mtgaotushb32.exe [543232 2014-08-22] () [Fichier non signé]
R2 nefeqyqy; C:\Users\Léa\AppData\Roaming\006A7466-1430321503-E011-95AF-F2B0CA726541\nsdA822.tmp [188416 2015-06-01] () [Fichier non signé]
R2 PenWesController; C:\Program Files\PenWes\DNSService.exe [1655808 2014-09-17] () [Fichier non signé]
R2 rcores; C:\Windows\rcore.exe [4686848 2015-01-26] () [Fichier non signé]
R2 rorikewu; C:\Users\Léa\AppData\Roaming\006A7466-1430321503-E011-95AF-F2B0CA726541\jnsj6382.tmp [114176 2015-04-29] () [Fichier non signé]
R2 serverca; C:\Users\Léa\AppData\Local\ConvertAd\CASrv.exe [93696 2015-01-27] () [Fichier non signé]
R2 serversu; C:\Users\Léa\AppData\Roaming\SoftwareUpdater\SUsrv.exe [121344 2015-01-27] () [Fichier non signé]
R2 servervo; C:\Users\Léa\AppData\Roaming\VOPackage\VOsrv.exe [153600 2015-01-27] () [Fichier non signé] <==== ATTENTION
R2 SmdmFService; C:\Program Files\Assets Manager\smdmf\SmdmFService.exe [3203840 2015-04-15] (Aztec Media Inc)
R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [1813504 2015-04-28] (ShopperPro) [Fichier non signé] <==== ATTENTION
R2 tovesyhu; C:\Users\Léa\AppData\Local\006A7466-1430328938-E011-95AF-F2B0CA726541\cnsfB3E7.tmp [93696 2015-04-29] () [Fichier non signé]
R2 UniversalUpdater; C:\Program Files\Uoda4yzvhmjrlntf\ogm4zjuzmmvlmde.exe [702976 2015-01-27] () [Fichier non signé] <==== ATTENTION
R2 Verifies and fixes application compatibility issues; C:\Users\Léa\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe [99496 2015-02-01] () [Fichier non signé]
S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-04-06] (Web Bar Media) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 wpsvc_1.10.0.6; C:\Program Files\WordProser_1.10.0.6\Service\wpsvc.exe [277584 2015-01-08] (Word Proser)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files\Assets Manager\smdmf\smdmfmgrc3.cfg [39072 2015-04-15] (Aztec Media Inc)
S3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [99968 2009-02-08] (Guillemot Corporation)
S3 ma-config_x86; C:\Program Files\ma-config.com\Drivers\ma-config_x86.sys [16160 2013-10-23] (CybelSoft)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-07-31] (NetFilterSDK.com) [Fichier non signé]
R1 ogi4mzv2mnnlbdf; C:\Windows\System32\drivers\ogi4mzv2mnnlbdf.sys [42840 2015-07-28] (Windows (R) Win 7 DDK provider)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3482112 2009-04-22] ()
R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [26112 2015-04-28] () [Fichier non signé]
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [Fichier non signé]
R2 webTinstMKTN84; C:\Windows\system32\Drivers\webTinstMKTN84.sys [43512 2015-06-02] () <==== ATTENTION
R1 wpnfd_1_10_0_6; C:\Windows\System32\drivers\wpnfd_1_10_0_6.sys [52736 2015-01-08] (Word Proser)
R1 {00aec75d-051f-41a9-9837-e94ac4f56303}w; C:\Windows\System32\drivers\{00aec75d-051f-41a9-9837-e94ac4f56303}w.sys [43152 2014-10-15] (StdLib)
R1 {0c842d6c-0c6d-4dca-a85e-83fab867dad6}w; C:\Windows\System32\drivers\{0c842d6c-0c6d-4dca-a85e-83fab867dad6}w.sys [43152 2015-02-21] (StdLib)
R1 {16d667ee-6782-4b21-81df-8ded8ebc3868}w; C:\Windows\System32\drivers\{16d667ee-6782-4b21-81df-8ded8ebc3868}w.sys [52920 2014-07-03] (StdLib)
R1 {1de2a23f-1c23-4ea1-8ef4-79bc5c5cea78}w; C:\Windows\System32\drivers\{1de2a23f-1c23-4ea1-8ef4-79bc5c5cea78}w.sys [43152 2014-10-13] (StdLib)
R1 {21abe523-36e2-4dad-9e0e-8fe9f0be1916}w; C:\Windows\System32\drivers\{21abe523-36e2-4dad-9e0e-8fe9f0be1916}w.sys [43152 2014-10-11] (StdLib)
R1 {22b230b8-6e08-4687-afa6-31e3b13fe333}w; C:\Windows\System32\drivers\{22b230b8-6e08-4687-afa6-31e3b13fe333}w.sys [43152 2015-01-20] (StdLib)
R1 {2e3800a8-eab3-4063-a79b-900fe3f11c5e}w; C:\Windows\System32\drivers\{2e3800a8-eab3-4063-a79b-900fe3f11c5e}w.sys [43152 2015-04-28] (StdLib)
R1 {336e37ae-3235-4f16-98ec-8cdf679be7d2}w; C:\Windows\System32\drivers\{336e37ae-3235-4f16-98ec-8cdf679be7d2}w.sys [43152 2014-10-11] (StdLib)
R1 {3b808196-ff63-49ee-b33b-efdf51723eca}w; C:\Windows\System32\drivers\{3b808196-ff63-49ee-b33b-efdf51723eca}w.sys [43152 2014-10-13] (StdLib)
R1 {4096aedf-3f28-4c8e-aebe-00255138fa8a}w; C:\Windows\System32\drivers\{4096aedf-3f28-4c8e-aebe-00255138fa8a}w.sys [43152 2014-10-14] (StdLib)
R1 {5eeb83d0-96ea-4249-942c-beead6847053}Gw; C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}Gw.sys [39064 2014-09-18] (StdLib)
R1 {6c5e4f16-dc67-4cab-bc96-83d77ccc9c15}w; C:\Windows\System32\drivers\{6c5e4f16-dc67-4cab-bc96-83d77ccc9c15}w.sys [43152 2015-01-26] (StdLib)
R1 {84e24724-32a5-4ef8-b981-cc669543b4a4}w; C:\Windows\System32\drivers\{84e24724-32a5-4ef8-b981-cc669543b4a4}w.sys [43152 2014-10-11] (StdLib)
R1 {8ac13c32-b1f4-495e-8b0b-4bd4fd38c6b5}w; C:\Windows\System32\drivers\{8ac13c32-b1f4-495e-8b0b-4bd4fd38c6b5}w.sys [43152 2014-10-12] (StdLib)
R1 {94c4b27a-8cb1-4214-9d76-87c59a8cf657}w; C:\Windows\System32\drivers\{94c4b27a-8cb1-4214-9d76-87c59a8cf657}w.sys [43152 2014-10-10] (StdLib)
R1 {bb7b7a60-f574-47c2-8a0b-4c56f2da9802}w; C:\Windows\System32\drivers\{bb7b7a60-f574-47c2-8a0b-4c56f2da9802}w.sys [43152 2014-09-25] (StdLib)
R1 {c61f6471-95aa-405a-be3a-f3b2dc07fdfa}w; C:\Windows\System32\drivers\{c61f6471-95aa-405a-be3a-f3b2dc07fdfa}w.sys [43152 2014-10-10] (StdLib)
R1 {d1c4c3bc-6b77-4033-9c86-e72fcf769bbe}w; C:\Windows\System32\drivers\{d1c4c3bc-6b77-4033-9c86-e72fcf769bbe}w.sys [43152 2014-10-14] (StdLib)
R1 {e8ac6704-7523-4c3f-bcd6-f7e44030d95f}w; C:\Windows\System32\drivers\{e8ac6704-7523-4c3f-bcd6-f7e44030d95f}w.sys [43152 2015-02-14] (StdLib)
R1 {e9629596-2cbd-4eea-9329-7470e8b0fdae}w; C:\Windows\System32\drivers\{e9629596-2cbd-4eea-9329-7470e8b0fdae}w.sys [43152 2014-10-12] (StdLib)
R1 {eb6029be-fad9-464d-8c4f-b9f38b914bf3}w; C:\Windows\System32\drivers\{eb6029be-fad9-464d-8c4f-b9f38b914bf3}w.sys [43152 2015-01-27] (StdLib)
R1 {fd600559-a688-4110-b9b9-0f1a9beae8ae}w; C:\Windows\System32\drivers\{fd600559-a688-4110-b9b9-0f1a9beae8ae}w.sys [43152 2014-10-12] (StdLib)
S3 cpuz134; \??\C:\Users\LAB9CF~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] <==== ATTENTION
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S1 ogi4nzu4mjzlyjf; system32\drivers\ogi4nzu4mjzlyjf.sys [X]
S2 SPDRIVER_1.42.0.1802; .\JSDriver\1.42.0.1802\jsdrv.sys [X]
S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-08-12 23:29 - 2018-08-12 23:30 - 000037491 _____ C:\Users\Léa\Desktop\FRST.txt
2018-08-12 23:28 - 2018-08-12 23:29 - 000000000 ____D C:\FRST
2018-08-12 23:27 - 2018-08-12 23:13 - 000001369 _____ C:\Users\Léa\Desktop\forum W7 W8.1.txt
2018-08-12 23:26 - 2018-08-12 20:11 - 001773056 _____ (Farbar) C:\Users\Léa\Desktop\FRST.exe
2018-08-12 18:31 - 2018-08-12 18:31 - 000000000 ____D C:\Users\Léa\AppData\Local\Google
2018-08-12 18:31 - 2018-08-12 18:31 - 000000000 ____D C:\Users\Léa
2018-08-12 18:28 - 2018-08-12 18:38 - 000000000 ____D C:\Users\Léa\AppData\Local\Midugeb
2018-08-12 18:25 - 2018-08-12 18:25 - 000000013 _____ C:\Users\Léa\Desktop\mot de passe forum w7 w8.txt

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-08-12 23:29 - 2015-01-21 13:18 - 000000000 ____D C:\Users\Léa\AppData\Roaming\Compatibility Verifier
2018-08-12 23:29 - 2014-08-07 02:29 - 000000294 _____ C:\Windows\Tasks\Groovorio Updater.job
2018-08-12 23:29 - 2009-07-14 06:34 - 000024080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-12 23:29 - 2009-07-14 06:34 - 000024080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-12 23:28 - 2014-10-15 20:28 - 000000294 _____ C:\Windows\Tasks\Groovorio.job
2018-08-12 23:27 - 2013-12-01 10:54 - 001736378 _____ C:\Windows\system32\PerfStringBackup.INI
2018-08-12 23:27 - 2009-07-14 10:39 - 000780368 _____ C:\Windows\system32\perfh00C.dat
2018-08-12 23:27 - 2009-07-14 10:39 - 000161344 _____ C:\Windows\system32\perfc00C.dat
2018-08-12 23:27 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\inf
2018-08-12 23:24 - 2015-04-29 17:38 - 000000000 ____D C:\Users\Léa\Documents\MaxComputerCleaner
2018-08-12 23:24 - 2015-01-27 20:47 - 000000000 ____D C:\Users\Léa\Documents\ProPCCleaner
2018-08-12 23:24 - 2014-09-21 22:41 - 000003438 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-6.job
2018-08-12 23:22 - 2014-08-06 00:42 - 000000000 ____D C:\Users\Léa\AppData\Local\fst_fr_332
2018-08-12 23:21 - 2014-08-22 19:04 - 000000256 _____ C:\Windows\Tasks\SpeedUpMyPC Startup.job
2018-08-12 23:20 - 2015-04-29 17:43 - 000001040 _____ C:\Windows\Tasks\Crossbrowse.job
2018-08-12 23:20 - 2014-08-06 17:18 - 000000000 ____D C:\Users\Léa\AppData\Local\CrashDumps
2018-08-12 23:20 - 2013-12-01 17:52 - 000000000 ____D C:\Users\Léa\AppData\Roaming\Skype
2018-08-12 23:19 - 2015-06-02 18:28 - 000000416 _____ C:\Windows\Tasks\BlockAndSurf Update.job
2018-08-12 23:19 - 2015-06-01 20:30 - 000000522 _____ C:\Windows\Tasks\godzilla_shopper_helper_service.job
2018-08-12 23:19 - 2015-06-01 19:50 - 000000000 ____D C:\Program Files\HighlightSearches
2018-08-12 23:19 - 2015-04-29 18:49 - 000002430 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-5.job
2018-08-12 23:19 - 2015-04-29 18:46 - 000003458 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-1-7.job
2018-08-12 23:19 - 2015-04-29 18:46 - 000003122 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-1-6.job
2018-08-12 23:19 - 2015-04-29 18:44 - 000005502 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-6.job
2018-08-12 23:19 - 2015-04-29 18:43 - 000005502 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-7.job
2018-08-12 23:19 - 2015-04-29 18:41 - 000004478 _____ C:\Windows\Tasks\576986dd-7894-4fea-8f2c-a74ec4862c94-3.job
2018-08-12 23:19 - 2015-04-29 17:48 - 000005168 _____ C:\Windows\Tasks\92ee1543-1ec3-499e-b534-94adce27d8da-11.job
2018-08-12 23:19 - 2015-04-29 17:48 - 000004478 _____ C:\Windows\Tasks\92ee1543-1ec3-499e-b534-94adce27d8da-3.job
2018-08-12 23:19 - 2015-01-27 21:18 - 000002396 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-5.job
2018-08-12 23:19 - 2015-01-27 21:17 - 000005812 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-6.job
2018-08-12 23:19 - 2015-01-27 21:17 - 000003382 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-1.job
2018-08-12 23:19 - 2015-01-27 21:17 - 000002060 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-2.job
2018-08-12 23:19 - 2015-01-27 21:16 - 000005468 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-7.job
2018-08-12 23:19 - 2015-01-27 21:16 - 000004790 _____ C:\Windows\Tasks\e29da3ee-f709-4bd1-9e68-f6aed42bdb9f-11.job
2018-08-12 23:19 - 2015-01-27 21:03 - 000001794 _____ C:\Windows\patsearch.bin
2018-08-12 23:19 - 2015-01-27 21:00 - 000000000 ____D C:\Users\Léa\AppData\LocalLow\SmartWeb
2018-08-12 23:19 - 2014-09-21 22:42 - 000002738 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-1.job
2018-08-12 23:19 - 2014-09-21 22:42 - 000002414 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-5.job
2018-08-12 23:19 - 2014-09-21 22:42 - 000001434 _____ C:\Windows\Tasks\f3598b56-d163-42e8-82dc-b238237a5d3a.job
2018-08-12 23:19 - 2014-09-21 22:41 - 000004464 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-11.job
2018-08-12 23:19 - 2014-09-21 22:41 - 000003782 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-4.job
2018-08-12 23:19 - 2014-09-21 22:41 - 000003782 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-3.job
2018-08-12 23:19 - 2014-09-21 22:41 - 000003102 _____ C:\Windows\Tasks\85ba07db-1f6e-4b85-8592-ad1c7b33f03d-7.job
2018-08-12 23:19 - 2014-09-21 22:41 - 000000954 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2018-08-12 23:19 - 2013-12-01 11:10 - 000001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2018-08-12 23:18 - 2015-04-29 17:45 - 000000000 ____D C:\ProgramData\smdmf
2018-08-12 23:18 - 2009-07-14 06:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-12 18:48 - 2015-01-27 21:16 - 000000958 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2018-08-12 18:42 - 2013-12-01 11:10 - 000001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2018-08-12 18:40 - 2017-02-14 15:40 - 000000270 _____ C:\Windows\Tasks\{6D4CD0EA-3B22-73C0-1621-33222A086B3E}.job
2018-08-12 18:34 - 2015-02-15 01:21 - 000000000 ____D C:\Users\Léa\AppData\LocalLow\GoHD
2018-08-12 18:29 - 2014-08-22 19:06 - 000000000 ____D C:\Program Files\AllDaySavings
2018-08-12 18:28 - 2014-08-07 03:29 - 000000372 _____ C:\Users\Léa\AppData\Roaming\WB.CFG
2018-08-12 18:27 - 2015-01-21 23:00 - 000000000 __SHD C:\Users\Léa\AppData\Local\EmieBrowserModeList
2018-08-12 18:27 - 2014-05-08 04:57 - 000000000 __SHD C:\Users\Léa\AppData\Local\EmieUserList
2018-08-12 18:27 - 2014-05-08 04:57 - 000000000 __SHD C:\Users\Léa\AppData\Local\EmieSiteList
2018-08-12 18:08 - 2018-01-12 11:08 - 000000000 ____D C:\Users\Léa\AppData\Roaming\Maben
2018-08-12 18:08 - 2017-06-29 12:22 - 000000266 _____ C:\Windows\Tasks\{3A2C0ADA-0691-9C6F-B0CB-5020B3BF1EAD}.job
2018-08-12 18:08 - 2015-01-27 20:48 - 000000000 ____D C:\Users\Léa\AppData\Roaming\SoftwareUpdater
2018-08-12 18:04 - 2014-08-22 19:04 - 000000262 _____ C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2018-08-12 17:56 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\system32\NDF
2018-08-12 16:28 - 2015-01-21 13:58 - 000000112 _____ C:\ProgramData\n4fviI8Kn.dat
2018-08-12 16:23 - 2009-07-14 06:53 - 000032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Fichiers à la racine de certains dossiers =======

2015-01-21 13:58 - 2018-08-12 16:28 - 000000112 _____ () C:\ProgramData\n4fviI8Kn.dat
2015-04-19 14:20 - 2015-04-19 14:20 - 000005872 _____ () C:\Users\Léa\AppData\Roaming\4AXJfpONJAf9
2015-04-20 16:05 - 2015-04-20 16:05 - 001579520 _____ () C:\Users\Léa\AppData\Roaming\4AXJfpONJAf9.exe
2014-08-06 02:15 - 2014-08-06 02:16 - 000000320 _____ () C:\Users\Léa\AppData\Roaming\aps.uninstall.scan.results
2015-01-27 20:52 - 2015-06-01 20:57 - 000001354 _____ () C:\Users\Léa\AppData\Roaming\Bubble Dock.boostrap.log
2015-06-01 20:45 - 2015-06-01 20:48 - 000005704 _____ () C:\Users\Léa\AppData\Roaming\Bubble Dock.installation.log
2014-02-06 16:42 - 2014-10-23 22:38 - 000000113 _____ () C:\Users\Léa\AppData\Roaming\D2Info0
2014-02-06 16:42 - 2014-11-02 16:24 - 000000008 _____ () C:\Users\Léa\AppData\Roaming\DofusAppId0_1
2014-02-06 17:16 - 2014-10-19 20:32 - 000000000 _____ () C:\Users\Léa\AppData\Roaming\DofusAppId0_2
2014-03-06 19:00 - 2014-10-23 02:07 - 000000008 _____ () C:\Users\Léa\AppData\Roaming\DofusAppId0_3
2014-09-01 10:18 - 2014-09-01 10:18 - 000002086 _____ () C:\Users\Léa\AppData\Roaming\KMWAWKW
2014-09-21 22:42 - 2014-09-21 22:42 - 001518488 _____ (V-9.1HQV21.09) C:\Users\Léa\AppData\Roaming\KMWAWKW.exe
2017-06-29 11:19 - 2017-06-29 11:19 - 000525824 _____ () C:\Users\Léa\AppData\Roaming\Mataku.exe
2015-06-01 20:57 - 2015-06-01 20:57 - 000000078 _____ () C:\Users\Léa\AppData\Roaming\Selection Tools.installation.log
2014-08-07 03:29 - 2018-08-12 18:28 - 000000372 _____ () C:\Users\Léa\AppData\Roaming\WB.CFG
2015-06-01 20:43 - 2015-06-01 20:43 - 000000097 _____ () C:\Users\Léa\AppData\Roaming\WindApp.boostrap.log
2015-06-01 20:49 - 2015-06-01 20:57 - 000000078 _____ () C:\Users\Léa\AppData\Roaming\WindApp.installation.log
2014-09-01 10:18 - 2014-09-01 10:18 - 000001248 _____ () C:\Users\Léa\AppData\Roaming\YIXQCID
2014-09-21 22:41 - 2014-09-21 22:41 - 001965464 _____ (V-9.1HQV21.09) C:\Users\Léa\AppData\Roaming\YIXQCID.exe
2018-01-12 11:04 - 2018-01-12 11:04 - 000000052 _____ () C:\Users\Léa\AppData\Local\5qe2nbznbz
2015-01-21 13:29 - 2015-06-02 18:28 - 000000001 _____ () C:\Users\Léa\AppData\Local\DSI.DAT
2015-01-21 13:28 - 2015-01-21 13:28 - 000022528 _____ () C:\Users\Léa\AppData\Local\dsisetup17344972.exe
2015-01-27 21:18 - 2015-01-27 21:18 - 000613057 _____ (CMI Limited) C:\Users\Léa\AppData\Local\nscA291.tmp
2015-04-29 18:33 - 2015-04-29 18:33 - 000613255 _____ (CMI Limited) C:\Users\Léa\AppData\Local\nsjD206.tmp
2015-04-29 18:38 - 2015-04-29 18:37 - 000613255 _____ (CMI Limited) C:\Users\Léa\AppData\Local\nsl2BEF.tmp
2015-04-29 17:50 - 2015-04-29 17:49 - 000613255 _____ (CMI Limited) C:\Users\Léa\AppData\Local\nsl80AC.tmp
2014-08-06 00:48 - 2014-08-06 00:48 - 000575544 _____ (ClickMeIn Limited) C:\Users\Léa\AppData\Local\nsv58C4.tmp
2014-04-21 21:34 - 2014-04-21 21:34 - 001097384 _____ (AnyProtect.com) C:\Users\Léa\AppData\Local\nsvDB3E.tmp
2014-08-06 00:26 - 2014-08-06 00:26 - 000591056 _____ (ClickMeIn Limited) C:\Users\Léa\AppData\Local\nsxC70B.tmp
2015-04-29 18:33 - 2015-04-29 18:33 - 000613255 _____ (CMI Limited) C:\Users\Léa\AppData\Local\nszD126.tmp

Fichiers à déplacer ou supprimer:
====================
C:\Windows\Tasks\{3A2C0ADA-0691-9C6F-B0CB-5020B3BF1EAD}.job
C:\Windows\Tasks\{6D4CD0EA-3B22-73C0-1621-33222A086B3E}.job


Certains fichiers dans TEMP:
====================
2015-04-29 17:29 - 2015-04-29 17:29 - 001818200 _____ () C:\Users\Léa\AppData\Local\Temp\1515.exe
2015-04-29 17:46 - 2015-04-29 17:46 - 011083312 _____ (CrossBrowse-1.4V29.04) C:\Users\Léa\AppData\Local\Temp\1934.exe
2015-01-27 21:03 - 2015-01-27 21:03 - 000089088 _____ () C:\Users\Léa\AppData\Local\Temp\2F165B7F-D309-7398-7375-F67F536F4F74.dll
2015-01-27 21:03 - 2015-01-27 21:03 - 000265728 _____ () C:\Users\Léa\AppData\Local\Temp\2F165B7F-D309-7398-7375-F67F536F4F74.exe
2015-04-29 18:31 - 2015-04-29 18:31 - 001818200 _____ () C:\Users\Léa\AppData\Local\Temp\3637.exe
2015-06-02 18:27 - 2015-06-02 18:27 - 001014784 _____ () C:\Users\Léa\AppData\Local\Temp\372156BE-84EF-A4CB-6A6D-58A6434905F4.exe
2015-04-29 17:46 - 2015-04-29 17:46 - 001818200 _____ () C:\Users\Léa\AppData\Local\Temp\4911.exe
2015-04-29 18:40 - 2015-04-29 18:40 - 014337904 _____ (Cinema PlusV29.04) C:\Users\Léa\AppData\Local\Temp\7342.exe
2015-01-27 21:03 - 2015-01-27 21:03 - 000642048 _____ () C:\Users\Léa\AppData\Local\Temp\B32317D3-698E-20A1-A383-F296413DE60F.exe
2015-01-27 20:42 - 2015-01-27 20:42 - 000297672 _____ () C:\Users\Léa\AppData\Local\Temp\BackupSetup.exe
2014-08-22 19:02 - 2014-08-22 19:02 - 000569768 _____ (Boxore OU.) C:\Users\Léa\AppData\Local\Temp\Boxore.exe
2014-08-21 18:52 - 2014-08-21 18:53 - 005556040 _____ () C:\Users\Léa\AppData\Local\Temp\CloudBackup4152.exe
2015-06-02 18:27 - 2015-06-02 18:27 - 000089088 _____ () C:\Users\Léa\AppData\Local\Temp\D3EC04B1-8242-1B80-5747-78E02531834F.dll
2015-06-02 18:27 - 2015-06-02 18:27 - 000849920 _____ () C:\Users\Léa\AppData\Local\Temp\D3EC04B1-8242-1B80-5747-78E02531834F.exe
2015-04-29 17:45 - 2015-04-15 14:14 - 001793280 _____ () C:\Users\Léa\AppData\Local\Temp\default-search.DLL
2015-01-27 21:09 - 2015-01-21 13:18 - 000440528 _____ (Pay By Ads LTD) C:\Users\Léa\AppData\Local\Temp\dsrsetup.exe
2014-10-05 20:04 - 2014-10-05 20:04 - 000718848 _____ ( ) C:\Users\Léa\AppData\Local\Temp\ICReinstall_IDM2-Win-EN.exe
2015-05-06 03:51 - 2015-06-01 19:47 - 000905728 _____ () C:\Users\Léa\AppData\Local\Temp\Launcher__10272.exe
2014-08-05 23:12 - 2014-08-05 23:12 - 005693496 _____ ( ) C:\Users\Léa\AppData\Local\Temp\optprosetup.exe
2014-08-05 23:10 - 2014-08-05 23:10 - 005619144 _____ (Speedchecker Limited ) C:\Users\Léa\AppData\Local\Temp\pcspeedup.exe
2015-01-27 21:09 - 2015-01-21 13:18 - 000198144 _____ (Pay By Ads LTD) C:\Users\Léa\AppData\Local\Temp\res.dll
2015-05-05 21:32 - 2015-07-28 21:18 - 000114720 _____ () C:\Users\Léa\AppData\Local\Temp\ShopperProDBUpd.exe
2015-02-15 00:47 - 2015-04-29 18:05 - 004737564 _____ () C:\Users\Léa\AppData\Local\Temp\ShopperProJSINJFull.exe
2015-04-29 17:43 - 2015-04-29 17:43 - 005798424 _____ (Super PC Tools ltd ) C:\Users\Léa\AppData\Local\Temp\supoptsetup.exe
2015-01-27 20:58 - 2017-02-14 16:02 - 000061981 _____ () C:\Users\Léa\AppData\Local\Temp\Uninstall.exe
2015-01-27 05:05 - 2015-01-27 05:05 - 001060800 _____ () C:\Users\Léa\AppData\Local\Temp\uobnyv04ydl6.exe
2014-08-05 23:12 - 2014-08-05 23:12 - 000145928 _____ (ClientConnect) C:\Users\Léa\AppData\Local\Temp\uttDDC4.tmp.exe
2015-06-02 18:27 - 2015-06-02 18:27 - 007057867 _____ () C:\Users\Léa\AppData\Local\Temp\_J6BlockAndSurfR79.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-02-07 13:43

==================== Fin de FRST.txt ============================