Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 10.10.2018
Exécuté par Luis (administrateur) sur SAMS (14-10-2018 00:26:52)
Exécuté depuis C:\Users\Luis\Desktop\ECN
Profils chargés: UpdatusUser & Luis (Profils disponibles: UpdatusUser & Luis)
Platform: Windows 8 (X64) Langue: Français (France)
Internet Explorer Version 10 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Tencent) C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Tencent) C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
(Micro Application) C:\Program Files (x86)\Micro Application\LauncherMA.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\TxGameAssistant\AppMarket\QQExternal.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2872176 2012-10-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe [177928 2018-10-13] (ESET)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [agentantidote.exe] => C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe [600256 2009-10-18] (Druide informatique inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-07] (Qualcomm®Atheros®)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [cacaoweb] => C:\Users\Luis\AppData\Roaming\cacaoweb\cacaoweb.exe [568624 2018-05-11] ()
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [ISUSPM] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [213936 2006-03-20] (Macrovision Corporation)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [RESTART_STICKY_NOTES] => C:\windows\system32\StikyNot.exe [405504 2012-07-26] (Microsoft Corporation)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [34884496 2018-10-12] (Epic Games, Inc.)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\MountPoints2: {93e57ee5-e8a4-11e6-bf80-1867b0dfc048} - "F:\LG_PC_Programs.exe"
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\scrnsave.scr [11264 2012-07-26] (Microsoft Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [245872 2013-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [201576 2013-01-10] (NVIDIA Corporation)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP ENVY 4520 series.lnk [2017-10-07]
ShortcutTarget: Alertes de surveillance de l'encre - HP ENVY 4520 series.lnk -> C:\Program Files\HP\HP ENVY 4520 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2017-06-02]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur.lnk [2014-03-30]
ShortcutTarget: Lanceur.lnk -> C:\Program Files (x86)\Micro Application\LauncherMA.exe (Micro Application)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{6EC8010B-FF98-48E6-9D5B-0A82A8C0DD5C}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{7AC0CD3F-F782-4FF5-BE83-66926907B2D9}: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{83EADFDE-6A94-4505-9657-F99C68367822}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/?type=994519&fr=spigot-yhp-ie
URLSearchHook: [S-1-5-21-2710196674-1561009495-2148570843-1001] ATTENTION => URLSearchHook par défaut est absent
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_fs_15_46¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyD0AyCyB0BtDzytAtCzzzy0C0F0AyEtCtN0D0Tzu0StCyEtDzztN1L2XzutAtFtCyEtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0F0DtDtDtCyEyDtGtDyBtCyEtGyC0DyCtAtGyC0D0E0DtGtBtB0EzzyE0A0Ezy0DtBzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyByB0FyD0Dzz0EtG0D0BtB0CtGyEyE0A0BtG0Bzy0CyBtG0DyD0Dzz0CtBzzzz0FtDtAyE2QtN0A0LzuyE%26cr%3D1821395920%26a%3Dwncy_fs_15_46%26os%3DWindows%2B8&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {87A385D8-7389-4DF9-A312-3A0349293CEB} URL =
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_fs_15_46¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyD0AyCyB0BtDzytAtCzzzy0C0F0AyEtCtN0D0Tzu0StCyEtDzztN1L2XzutAtFtCyEtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0F0DtDtDtCyEyDtGtDyBtCyEtGyC0DyCtAtGyC0D0E0DtGtBtB0EzzyE0A0Ezy0DtBzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyByB0FyD0Dzz0EtG0D0BtB0CtGyEyE0A0BtG0Bzy0CyBtG0DyD0Dzz0CtBzzzz0FtDtAyE2QtN0A0LzuyE%26cr%3D1821395920%26a%3Dwncy_fs_15_46%26os%3DWindows%2B8&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {AD9333D2-B1AF-471D-89A6-D7C97802E641} URL = hxxps://search.yahoo.com/search?ei=utf-8&fr=chr-greentree_ie&type=994519&ilc=12&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-21] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-03-12] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-27] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-03-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-27] (Oracle Corporation)
Toolbar: HKLM - Pas de nom - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKLM-x32 - Pas de nom - {95daa571-4def-4a6d-97d8-98a346672a24} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706 [2018-10-14]
FF Homepage: Mozilla\Firefox\Profiles\qupacasv.default-1474714022706 -> hxxps://www.google.com/
FF Extension: (cacaoweb) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\cacaoweb@cacaoweb.org [2017-07-30] [Legacy] [non signé]
FF Extension: (Tampermonkey) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\firefox@tampermonkey.net.xpi [2018-09-23]
FF Extension: (Adblock Plus) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-09-03]
FF Extension: (Telemetry coverage) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\features\{41b7e7fa-563c-4791-8b10-1c8536a0a765}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-12] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release2907.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release2907\ff => non trouvé(e)
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll [2018-10-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll [2018-10-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-03-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2014-01-07] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7356680 2018-10-12] ()
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1594416 2013-02-01] (Samsung Electronics CO., LTD.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-10-12] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2260144 2018-10-13] (ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2260144 2018-10-13] (ESET)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [90992 2012-10-08] (ELAN Microelectronics Corp.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Fichier non signé]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 QMEmulatorService; C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe [342776 2018-06-02] (Tencent)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-07] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aow_drv; C:\Program Files\TxGameAssistant\UI\aow_drv_x64.sys [844848 2018-07-25] (Tencent)
R3 BTATH_HID; C:\windows\system32\DRIVERS\btath_hid.sys [223432 2014-01-07] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-07] (Qualcomm Atheros)
R1 dtsoftbus01; C:\windows\System32\drivers\dtsoftbus01.sys [283200 2014-04-12] (DT Soft Ltd)
R1 eamonm; C:\windows\System32\DRIVERS\eamonm.sys [141512 2018-10-13] (ESET)
R0 edevmon; C:\windows\System32\DRIVERS\edevmon.sys [109232 2018-10-13] (ESET)
R1 ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [188824 2018-10-13] (ESET)
R1 epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [109864 2018-10-13] (ESET)
R3 RadioHIDMini; C:\windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2015-12-26] () [Fichier non signé]
S3 taphss6; C:\windows\system32\DRIVERS\taphss6.sys [42064 2016-02-17] (Anchorfree Inc.)
S3 USBAAPL64; C:\windows\System32\Drivers\usbaapl64.sys [54784 2016-03-28] (Apple, Inc.) [Fichier non signé]
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 DrvAgent64; \??\C:\windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 SBIOSIO; \??\C:\Windows\Temp\SBIOSIO64.SYS [X]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-10-13 22:56 - 2018-10-13 23:00 - 000000000 ____D C:\FRST
2018-10-13 22:45 - 2018-10-13 22:45 - 000000000 ___RD C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2018-10-13 21:29 - 2018-10-13 21:29 - 000000000 ____D C:\NVIDIA
2018-10-13 21:19 - 2018-10-13 23:00 - 000000000 ____D C:\Users\Luis\Desktop\ECN
2018-10-13 18:22 - 2018-10-13 19:21 - 000000000 ____D C:\Users\Luis\Desktop\Impression
2018-10-13 08:12 - 2018-10-13 08:12 - 000000000 _____ C:\Users\Public\Shared Files
2018-10-13 08:05 - 2018-10-13 08:05 - 000000000 ____D C:\Users\Luis\AppData\Local\NVIDIA Corporation
2018-10-13 08:00 - 2018-10-13 08:00 - 000000000 ____D C:\Users\Luis\AppData\Local\FortniteGame
2018-10-13 08:00 - 2018-10-13 08:00 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2018-10-13 03:39 - 2018-10-13 03:39 - 000000314 _____ C:\Users\Luis\Desktop\Fortnite.url
2018-10-12 18:59 - 2018-10-12 18:59 - 000000000 ____D C:\Program Files\Epic Games
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\UnrealEngineLauncher
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\UnrealEngine
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\EpicGamesLauncher
2018-10-12 18:51 - 2018-10-12 18:51 - 000001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2018-10-12 18:51 - 2018-10-12 18:51 - 000001230 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2018-10-12 18:50 - 2018-10-12 18:58 - 000000000 ____D C:\ProgramData\Epic
2018-10-12 18:50 - 2018-10-12 18:50 - 000000000 ____D C:\Program Files (x86)\Epic Games
2018-09-26 22:35 - 2018-09-26 22:37 - 000000000 ____D C:\Users\Luis\Desktop\ECN 2
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-10-14 00:20 - 2016-11-21 09:10 - 000000000 ____D C:\Users\Luis\AppData\LocalLow\Mozilla
2018-10-14 00:14 - 2016-03-09 11:09 - 000000000 ____D C:\Users\Luis\AppData\Local\ESET
2018-10-13 22:49 - 2013-05-17 04:40 - 000000000 ____D C:\ProgramData\WinClon
2018-10-13 22:43 - 2015-11-23 16:52 - 000000435 _____ C:\windows\system32\Drivers\etc\hosts.ics
2018-10-13 22:42 - 2016-09-24 12:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-10-13 22:42 - 2012-07-26 09:22 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-10-13 22:42 - 2012-07-26 07:26 - 001048576 ___SH C:\windows\system32\config\BBI
2018-10-13 22:40 - 2018-04-12 16:26 - 000109864 _____ (ESET) C:\windows\system32\Drivers\epfwwfp.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000188824 _____ (ESET) C:\windows\system32\Drivers\ehdrv.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000141512 _____ (ESET) C:\windows\system32\Drivers\eamonm.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000109232 _____ (ESET) C:\windows\system32\Drivers\edevmon.sys
2018-10-13 22:40 - 2012-07-26 07:37 - 000000000 ____D C:\windows\Inf
2018-10-13 22:37 - 2014-03-02 18:53 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-10-13 19:22 - 2014-03-02 20:03 - 000000000 ____D C:\Users\Luis\AppData\Roaming\vlc
2018-10-13 18:19 - 2017-06-20 11:51 - 000000000 ____D C:\Users\Luis\Desktop\MELISSA
2018-10-13 08:12 - 2012-07-26 10:12 - 000000000 __SHD C:\Users\Public\Libraries
2018-10-12 18:57 - 2018-03-14 23:32 - 000004624 _____ C:\windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-10-12 18:57 - 2017-11-25 12:02 - 000004496 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2018-10-12 18:57 - 2016-01-17 23:19 - 000000000 ____D C:\ProgramData\Package Cache
2018-10-12 18:57 - 2012-07-26 10:12 - 000000000 ____D C:\windows\SysWOW64\Macromed
2018-10-12 18:57 - 2012-07-26 10:12 - 000000000 ____D C:\windows\system32\Macromed
2018-10-03 14:23 - 2018-09-03 23:20 - 000001232 _____ C:\Users\Luis\Desktop\Tencent Gaming Buddy.lnk
2018-10-03 14:23 - 2015-10-07 22:19 - 015036416 ___SH C:\Users\Luis\Desktop\Thumbs.db
2018-09-26 22:23 - 2014-03-02 00:20 - 000000000 ____D C:\Users\Luis\AppData\Local\Packages
2018-09-24 17:47 - 2013-05-17 05:27 - 004540340 _____ C:\windows\system32\perfh00C.dat
2018-09-24 17:47 - 2013-05-17 05:27 - 001329226 _____ C:\windows\system32\perfc00C.dat
2018-09-24 17:47 - 2012-07-26 09:28 - 000005692 _____ C:\windows\system32\PerfStringBackup.INI
==================== Fichiers à la racine de certains dossiers =======
2015-11-10 03:28 - 2015-11-14 01:28 - 000000104 _____ () C:\Users\Luis\AppData\Roaming\WB.CFG
2014-12-07 13:17 - 2014-12-07 13:17 - 000000000 _____ () C:\Users\Luis\AppData\Roaming\Microsoft\3652.tmp
2015-12-29 10:54 - 2015-12-29 10:54 - 000000000 _____ () C:\Users\Luis\AppData\Roaming\Microsoft\DBB1.tmp
2014-07-11 23:31 - 2014-07-11 23:31 - 000000092 _____ () C:\Users\Luis\AppData\Local\fusioncache.dat
2018-10-04 10:15 - 2018-10-04 10:15 - 000000000 _____ () C:\Users\Luis\AppData\Local\oobelibMkey.log
2017-03-03 01:01 - 2017-04-11 18:31 - 000000552 _____ () C:\Users\Luis\AppData\Local\TroubleshooterConfig.json
Certains fichiers dans TEMP:
====================
2018-09-04 10:20 - 2018-06-21 11:50 - 000826376 _____ (BlueStack Systems, Inc.) C:\Users\Luis\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-09-04 10:20 - 2018-06-21 11:50 - 000421344 _____ (CodeTitans) C:\Users\Luis\AppData\Local\Temp\JSON.dll
Certains de taille zéro octet fichiers/dossiers:
==========================
C:\Windows\SysWOW64\nsprs.dll
C:\Windows\SysWOW64\serauth1.dll
C:\Windows\SysWOW64\serauth2.dll
C:\Windows\SysWOW64\ssprs.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-10-13 04:35
==================== Fin de FRST.txt ============================
Exécuté par Luis (administrateur) sur SAMS (14-10-2018 00:26:52)
Exécuté depuis C:\Users\Luis\Desktop\ECN
Profils chargés: UpdatusUser & Luis (Profils disponibles: UpdatusUser & Luis)
Platform: Windows 8 (X64) Langue: Français (France)
Internet Explorer Version 10 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Tencent) C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Tencent) C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
(Micro Application) C:\Program Files (x86)\Micro Application\LauncherMA.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\TxGameAssistant\AppMarket\QQExternal.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2872176 2012-10-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe [177928 2018-10-13] (ESET)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [agentantidote.exe] => C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe [600256 2009-10-18] (Druide informatique inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-07] (Qualcomm®Atheros®)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [cacaoweb] => C:\Users\Luis\AppData\Roaming\cacaoweb\cacaoweb.exe [568624 2018-05-11] ()
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [ISUSPM] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [213936 2006-03-20] (Macrovision Corporation)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [RESTART_STICKY_NOTES] => C:\windows\system32\StikyNot.exe [405504 2012-07-26] (Microsoft Corporation)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [34884496 2018-10-12] (Epic Games, Inc.)
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\...\MountPoints2: {93e57ee5-e8a4-11e6-bf80-1867b0dfc048} - "F:\LG_PC_Programs.exe"
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\scrnsave.scr [11264 2012-07-26] (Microsoft Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [245872 2013-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [201576 2013-01-10] (NVIDIA Corporation)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP ENVY 4520 series.lnk [2017-10-07]
ShortcutTarget: Alertes de surveillance de l'encre - HP ENVY 4520 series.lnk -> C:\Program Files\HP\HP ENVY 4520 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2017-06-02]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur.lnk [2014-03-30]
ShortcutTarget: Lanceur.lnk -> C:\Program Files (x86)\Micro Application\LauncherMA.exe (Micro Application)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{6EC8010B-FF98-48E6-9D5B-0A82A8C0DD5C}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{7AC0CD3F-F782-4FF5-BE83-66926907B2D9}: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{83EADFDE-6A94-4505-9657-F99C68367822}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/?type=994519&fr=spigot-yhp-ie
URLSearchHook: [S-1-5-21-2710196674-1561009495-2148570843-1001] ATTENTION => URLSearchHook par défaut est absent
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.qone8.com/web/?type=ds&ts=1397309899&from=smt&uid=ST750LM022XHN-M750MBB_S31XJ9BD600236&q={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_fs_15_46¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyD0AyCyB0BtDzytAtCzzzy0C0F0AyEtCtN0D0Tzu0StCyEtDzztN1L2XzutAtFtCyEtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0F0DtDtDtCyEyDtGtDyBtCyEtGyC0DyCtAtGyC0D0E0DtGtBtB0EzzyE0A0Ezy0DtBzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyByB0FyD0Dzz0EtG0D0BtB0CtGyEyE0A0BtG0Bzy0CyBtG0DyD0Dzz0CtBzzzz0FtDtAyE2QtN0A0LzuyE%26cr%3D1821395920%26a%3Dwncy_fs_15_46%26os%3DWindows%2B8&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {87A385D8-7389-4DF9-A312-3A0349293CEB} URL =
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_fs_15_46¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyD0AyCyB0BtDzytAtCzzzy0C0F0AyEtCtN0D0Tzu0StCyEtDzztN1L2XzutAtFtCyEtFtDtFtCtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0F0DtDtDtCyEyDtGtDyBtCyEtGyC0DyCtAtGyC0D0E0DtGtBtB0EzzyE0A0Ezy0DtBzz0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyByB0FyD0Dzz0EtG0D0BtB0CtGyEyE0A0BtG0Bzy0CyBtG0DyD0Dzz0CtBzzzz0FtDtAyE2QtN0A0LzuyE%26cr%3D1821395920%26a%3Dwncy_fs_15_46%26os%3DWindows%2B8&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2710196674-1561009495-2148570843-1002 -> {AD9333D2-B1AF-471D-89A6-D7C97802E641} URL = hxxps://search.yahoo.com/search?ei=utf-8&fr=chr-greentree_ie&type=994519&ilc=12&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-21] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-03-12] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-27] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-03-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-27] (Oracle Corporation)
Toolbar: HKLM - Pas de nom - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKLM-x32 - Pas de nom - {95daa571-4def-4a6d-97d8-98a346672a24} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706 [2018-10-14]
FF Homepage: Mozilla\Firefox\Profiles\qupacasv.default-1474714022706 -> hxxps://www.google.com/
FF Extension: (cacaoweb) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\cacaoweb@cacaoweb.org [2017-07-30] [Legacy] [non signé]
FF Extension: (Tampermonkey) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\firefox@tampermonkey.net.xpi [2018-09-23]
FF Extension: (Adblock Plus) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-09-03]
FF Extension: (Telemetry coverage) - C:\Users\Luis\AppData\Roaming\Mozilla\Firefox\Profiles\qupacasv.default-1474714022706\features\{41b7e7fa-563c-4791-8b10-1c8536a0a765}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-12] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release2907.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release2907\ff => non trouvé(e)
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll [2018-10-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll [2018-10-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-03-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2014-01-07] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7356680 2018-10-12] ()
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1594416 2013-02-01] (Samsung Electronics CO., LTD.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-10-12] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2260144 2018-10-13] (ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2260144 2018-10-13] (ESET)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [90992 2012-10-08] (ELAN Microelectronics Corp.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Fichier non signé]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 QMEmulatorService; C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe [342776 2018-06-02] (Tencent)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-07] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aow_drv; C:\Program Files\TxGameAssistant\UI\aow_drv_x64.sys [844848 2018-07-25] (Tencent)
R3 BTATH_HID; C:\windows\system32\DRIVERS\btath_hid.sys [223432 2014-01-07] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-07] (Qualcomm Atheros)
R1 dtsoftbus01; C:\windows\System32\drivers\dtsoftbus01.sys [283200 2014-04-12] (DT Soft Ltd)
R1 eamonm; C:\windows\System32\DRIVERS\eamonm.sys [141512 2018-10-13] (ESET)
R0 edevmon; C:\windows\System32\DRIVERS\edevmon.sys [109232 2018-10-13] (ESET)
R1 ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [188824 2018-10-13] (ESET)
R1 epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [109864 2018-10-13] (ESET)
R3 RadioHIDMini; C:\windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2015-12-26] () [Fichier non signé]
S3 taphss6; C:\windows\system32\DRIVERS\taphss6.sys [42064 2016-02-17] (Anchorfree Inc.)
S3 USBAAPL64; C:\windows\System32\Drivers\usbaapl64.sys [54784 2016-03-28] (Apple, Inc.) [Fichier non signé]
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 DrvAgent64; \??\C:\windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 SBIOSIO; \??\C:\Windows\Temp\SBIOSIO64.SYS [X]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-10-13 22:56 - 2018-10-13 23:00 - 000000000 ____D C:\FRST
2018-10-13 22:45 - 2018-10-13 22:45 - 000000000 ___RD C:\Users\Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2018-10-13 21:29 - 2018-10-13 21:29 - 000000000 ____D C:\NVIDIA
2018-10-13 21:19 - 2018-10-13 23:00 - 000000000 ____D C:\Users\Luis\Desktop\ECN
2018-10-13 18:22 - 2018-10-13 19:21 - 000000000 ____D C:\Users\Luis\Desktop\Impression
2018-10-13 08:12 - 2018-10-13 08:12 - 000000000 _____ C:\Users\Public\Shared Files
2018-10-13 08:05 - 2018-10-13 08:05 - 000000000 ____D C:\Users\Luis\AppData\Local\NVIDIA Corporation
2018-10-13 08:00 - 2018-10-13 08:00 - 000000000 ____D C:\Users\Luis\AppData\Local\FortniteGame
2018-10-13 08:00 - 2018-10-13 08:00 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2018-10-13 03:39 - 2018-10-13 03:39 - 000000314 _____ C:\Users\Luis\Desktop\Fortnite.url
2018-10-12 18:59 - 2018-10-12 18:59 - 000000000 ____D C:\Program Files\Epic Games
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\UnrealEngineLauncher
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\UnrealEngine
2018-10-12 18:52 - 2018-10-12 18:52 - 000000000 ____D C:\Users\Luis\AppData\Local\EpicGamesLauncher
2018-10-12 18:51 - 2018-10-12 18:51 - 000001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2018-10-12 18:51 - 2018-10-12 18:51 - 000001230 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2018-10-12 18:50 - 2018-10-12 18:58 - 000000000 ____D C:\ProgramData\Epic
2018-10-12 18:50 - 2018-10-12 18:50 - 000000000 ____D C:\Program Files (x86)\Epic Games
2018-09-26 22:35 - 2018-09-26 22:37 - 000000000 ____D C:\Users\Luis\Desktop\ECN 2
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-10-14 00:20 - 2016-11-21 09:10 - 000000000 ____D C:\Users\Luis\AppData\LocalLow\Mozilla
2018-10-14 00:14 - 2016-03-09 11:09 - 000000000 ____D C:\Users\Luis\AppData\Local\ESET
2018-10-13 22:49 - 2013-05-17 04:40 - 000000000 ____D C:\ProgramData\WinClon
2018-10-13 22:43 - 2015-11-23 16:52 - 000000435 _____ C:\windows\system32\Drivers\etc\hosts.ics
2018-10-13 22:42 - 2016-09-24 12:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-10-13 22:42 - 2012-07-26 09:22 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-10-13 22:42 - 2012-07-26 07:26 - 001048576 ___SH C:\windows\system32\config\BBI
2018-10-13 22:40 - 2018-04-12 16:26 - 000109864 _____ (ESET) C:\windows\system32\Drivers\epfwwfp.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000188824 _____ (ESET) C:\windows\system32\Drivers\ehdrv.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000141512 _____ (ESET) C:\windows\system32\Drivers\eamonm.sys
2018-10-13 22:40 - 2015-11-06 12:33 - 000109232 _____ (ESET) C:\windows\system32\Drivers\edevmon.sys
2018-10-13 22:40 - 2012-07-26 07:37 - 000000000 ____D C:\windows\Inf
2018-10-13 22:37 - 2014-03-02 18:53 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-10-13 19:22 - 2014-03-02 20:03 - 000000000 ____D C:\Users\Luis\AppData\Roaming\vlc
2018-10-13 18:19 - 2017-06-20 11:51 - 000000000 ____D C:\Users\Luis\Desktop\MELISSA
2018-10-13 08:12 - 2012-07-26 10:12 - 000000000 __SHD C:\Users\Public\Libraries
2018-10-12 18:57 - 2018-03-14 23:32 - 000004624 _____ C:\windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-10-12 18:57 - 2017-11-25 12:02 - 000004496 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2018-10-12 18:57 - 2016-01-17 23:19 - 000000000 ____D C:\ProgramData\Package Cache
2018-10-12 18:57 - 2012-07-26 10:12 - 000000000 ____D C:\windows\SysWOW64\Macromed
2018-10-12 18:57 - 2012-07-26 10:12 - 000000000 ____D C:\windows\system32\Macromed
2018-10-03 14:23 - 2018-09-03 23:20 - 000001232 _____ C:\Users\Luis\Desktop\Tencent Gaming Buddy.lnk
2018-10-03 14:23 - 2015-10-07 22:19 - 015036416 ___SH C:\Users\Luis\Desktop\Thumbs.db
2018-09-26 22:23 - 2014-03-02 00:20 - 000000000 ____D C:\Users\Luis\AppData\Local\Packages
2018-09-24 17:47 - 2013-05-17 05:27 - 004540340 _____ C:\windows\system32\perfh00C.dat
2018-09-24 17:47 - 2013-05-17 05:27 - 001329226 _____ C:\windows\system32\perfc00C.dat
2018-09-24 17:47 - 2012-07-26 09:28 - 000005692 _____ C:\windows\system32\PerfStringBackup.INI
==================== Fichiers à la racine de certains dossiers =======
2015-11-10 03:28 - 2015-11-14 01:28 - 000000104 _____ () C:\Users\Luis\AppData\Roaming\WB.CFG
2014-12-07 13:17 - 2014-12-07 13:17 - 000000000 _____ () C:\Users\Luis\AppData\Roaming\Microsoft\3652.tmp
2015-12-29 10:54 - 2015-12-29 10:54 - 000000000 _____ () C:\Users\Luis\AppData\Roaming\Microsoft\DBB1.tmp
2014-07-11 23:31 - 2014-07-11 23:31 - 000000092 _____ () C:\Users\Luis\AppData\Local\fusioncache.dat
2018-10-04 10:15 - 2018-10-04 10:15 - 000000000 _____ () C:\Users\Luis\AppData\Local\oobelibMkey.log
2017-03-03 01:01 - 2017-04-11 18:31 - 000000552 _____ () C:\Users\Luis\AppData\Local\TroubleshooterConfig.json
Certains fichiers dans TEMP:
====================
2018-09-04 10:20 - 2018-06-21 11:50 - 000826376 _____ (BlueStack Systems, Inc.) C:\Users\Luis\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-09-04 10:20 - 2018-06-21 11:50 - 000421344 _____ (CodeTitans) C:\Users\Luis\AppData\Local\Temp\JSON.dll
Certains de taille zéro octet fichiers/dossiers:
==========================
C:\Windows\SysWOW64\nsprs.dll
C:\Windows\SysWOW64\serauth1.dll
C:\Windows\SysWOW64\serauth2.dll
C:\Windows\SysWOW64\ssprs.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-10-13 04:35
==================== Fin de FRST.txt ============================