Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 24-10-2019
Exécuté par Ska' (administrateur) sur SKA (Hewlett-Packard p6-2371ef) (25-10-2019 19:17:43)
Exécuté depuis C:\Users\Ska'\Desktop
Profils chargés: Ska' (Profils disponibles: Ska' & Invité)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices Inc.) [Fichier non signé] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Arcai.com) [Fichier non signé] C:\Program Files (x86)\netcut\services\aips.exe
(ATI Technologies Inc.) [Fichier non signé] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard ) [Fichier non signé] C:\Program Files\IDT\WDM\Beats64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(IDT, Inc.) [Fichier non signé] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [Fichier non signé] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TunnelBear -> TunnelBear) C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-09-19] (IDT, Inc.) [Fichier non signé]
HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2012-09-19] (Hewlett-Packard ) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [68920 2019-01-15] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2623032 2019-07-05] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [MKLOL] => "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [144008 2019-09-25] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Policies\system: [EnableLUA] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WN111 Smart Wizard.lnk [2012-12-24]
ShortcutTarget: NETGEAR WN111 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WN111\wn111.exe (Pas de fichier)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0DCAA6E2-318C-4662-897A-72AF02EFDF97} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-11] (Adobe Inc. -> Adobe)
Task: {0DD5F3DE-0347-439C-966E-F276421AC6A7} - System32\Tasks\4507 => wscript.exe C:\Users\Ska'\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {1A13C6FD-0098-47D2-B6C9-24E1934A48F5} - System32\Tasks\{19D887D2-896B-4DEE-9835-2DEE1F6BC58E} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.4.0.102/fr/abandoninstall?page=tsProgressBar
Task: {2047340A-2A9F-4E35-94E0-A225BDD652FA} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {2336EDDE-BFBB-4834-A176-B312E24B515D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {272CDD64-A51C-446A-BE9B-E3C88304A1D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {27DEDCA8-46EE-4858-BF16-2C70EFAF53A8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {3C279A90-B10E-4D64-993A-1A17F3292B87} - System32\Tasks\VtZWXvkQNNHMpfL => C:\Users\Ska'\AppData\Roaming\VvwbV5K\iN7kpp4.exe
Task: {451CC755-2D18-4DCD-A6CC-6F08E2C8DD02} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {48D2B65C-B996-4363-A096-AB72C7BFCDB9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {602410CD-0CF7-4FE0-B49D-9AC39CDDD7EF} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jcomptequesurmoi77000@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {74863638-5642-4BEA-A3FE-AE1149F5BDF6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {89FE234B-A0EF-4A83-A04B-1AF1D4963832} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {A64BC339-34F5-4CA3-BD2F-EA440B1A991F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_Plugin.exe [1457720 2019-09-11] (Adobe Inc. -> Adobe)
Task: {A83057F4-527C-4D3B-89B1-F637C285A9E0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2A4C823-B81E-4D47-ADBC-57493E89A5B8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1905072 2019-10-02] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.)
Task: {C8A7F137-CAF2-4B5B-B120-1CE0DFBBB7CF} - System32\Tasks\WIN-fIGbfFfEGCfFGEGbfCfE => C:\Users\Ska'\AppData\Roaming\~pghzrjw.exe <==== ATTENTION
Task: {D4BAEB5A-40FC-44F8-AACE-0E7E2024B074} - System32\Tasks\{F35A00B7-FC18-4DF9-9B0F-CCAAE03CFA0C} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.18.0.106/fr/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {DCF929EA-F21D-4E10-AB85-69DDD8C272C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {E9C71F71-E78E-4C81-ABC7-703D840D2919} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\Ska'\AppData\Roaming\~qajiocc.exe <==== ATTENTION
Task: {EE0ACDF4-BC7F-437A-A2A4-7A63181CE2BF} - System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => C:\Users\Ska'\AppData\Roaming\~rzxewtg.exe <==== ATTENTION
Task: {EE348692-F63F-4ACA-A54D-B25DE89E7236} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {EE87A3D4-42F3-4ADC-9046-9BEC4B754FC1} - System32\Tasks\0 => c:\program files\internet explorer\iexplore.exe <==== ATTENTION
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F6100D80-8F2D-44ED-AF4E-1E818C058C42} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 127.0.0.1 198.144.182.42
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{10CE6296-146B-4FCA-805B-A030FC74D577}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{2D696DAA-C5F1-499D-BBE3-5D0F3FA23FC2}: [DhcpNameServer] 172.20.10.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-3638676003-1590446409-3246845486-1001 -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3638676003-1590446409-3246845486-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FireFox:
========
FF DefaultProfile: 8y6fhtar.default
FF ProfilePath: C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default [2019-10-25]
FF Extension: (YouTube mp3) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\info@youtube-mp3.org.xpi [2016-05-29] [Legacy]
FF Extension: (XJZ Survey Remover) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\survey-remover@gmx.com.xpi [2013-08-21] [Legacy] [non signé]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-10-25]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-07-05] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2015-02-05] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN) [Fichier non signé]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-23] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-07-05] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-07-05] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AIPS; C:\Program Files (x86)\netcut\services\AIPS.exe [262144 2011-07-28] (Arcai.com) [Fichier non signé]
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [239616 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard Company -> Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation -> Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-09-19] (IDT, Inc.) [Fichier non signé]
R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [139896 2019-04-11] (TunnelBear -> TunnelBear)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [13209088 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [626688 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdW86.sys [98472 2012-07-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R3 Netaapl; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [23040 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 NPF; C:\WINDOWS\System32\drivers\NPF.sys [35344 2010-06-25] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
S3 PVUSB; C:\WINDOWS\System32\drivers\CESG64.sys [63808 2007-02-19] (CASIO COMPUTER CO.,LTD. -> CASIO COMPUTER CO.,LTD.)
S3 rdpbus; C:\WINDOWS\System32\drivers\rdpbus.sys [22528 2013-08-22] () [Fichier non signé]
R3 RTL8168; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
R3 RtlWlanu; C:\WINDOWS\system32\DRIVERS\rtwlanu.sys [3860224 2015-08-05] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [540160 2012-09-19] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R3 tap-tb-0901; C:\WINDOWS\system32\DRIVERS\tap-tb-0901.sys [38656 2016-09-21] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\WINDOWS\system32\DRIVERS\tap0901.sys [31232 2013-08-03] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WN111v2; C:\WINDOWS\system32\DRIVERS\WN111v2x.sys [553472 2008-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
S3 DNIMp50a64; System32\Drivers\DNIMp50a64.sys [X]
S3 DNISp50a64; System32\Drivers\DNISp50a64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
Error(1) reading file: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office "
2019-10-25 19:17 - 2019-10-25 19:19 - 000026885 _____ C:\Users\Ska'\Desktop\FRST.txt
2019-10-25 19:16 - 2019-10-25 19:16 - 001617920 _____ (Farbar) C:\Users\Ska'\Desktop\FRST64.exe
2019-10-25 16:20 - 2019-10-25 16:20 - 000003446 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2019-10-25 16:20 - 2019-10-25 16:20 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2019-10-25 16:20 - 2019-10-25 16:20 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2019-10-25 11:36 - 2019-10-25 11:36 - 000318908 _____ C:\Users\Ska'\Desktop\ZHPDiag.txt
2019-10-25 11:31 - 2019-10-25 11:31 - 007622344 _____ (Malwarebytes) C:\Users\Ska'\Downloads\adwcleaner_7.4.2.exe
2019-10-25 11:31 - 2019-10-25 11:31 - 000001384 _____ C:\Users\Ska'\Desktop\AdwCleaner[S00].txt
2019-10-25 11:31 - 2019-10-25 11:31 - 000000000 ____D C:\AdwCleaner
2019-10-25 11:25 - 2019-10-25 11:25 - 000001970 _____ C:\Users\Ska'\Desktop\ZHPCleaner (R).txt
2019-10-25 11:22 - 2019-10-25 11:22 - 003234688 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPDiag3.exe
2019-10-25 11:16 - 2019-10-25 11:16 - 003342720 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPCleaner.exe
2019-10-03 02:01 - 2019-10-03 02:01 - 000010616 _____ C:\Users\Ska'\AppData\Local\recently-used.xbel
2019-10-02 21:24 - 2019-10-25 11:27 - 000000000 ____D C:\Users\Ska'\AppData\Local\CrashDumps
2019-10-02 20:37 - 2019-10-02 20:37 - 2015120384 _____ C:\Users\Ska'\Desktop\ssdsqdqs.avi
2019-10-02 20:17 - 2019-10-02 20:34 - 000000323 _____ C:\Users\Ska'\Desktop\xxxxxxxxxxxxx.txt
2019-10-02 20:05 - 2019-10-25 11:16 - 000000674 _____ C:\Users\Ska'\Desktop\ZHPCleaner.lnk
2019-10-02 20:04 - 2019-10-02 20:05 - 003329920 _____ (Nicolas Coolman) C:\Users\Ska'\Downloads\ZHPCleaner.exe
2019-10-02 20:03 - 2019-10-02 20:37 - 000000000 ____D C:\Users\Ska'\Documents\My CamStudio Temp Files
2019-10-02 20:03 - 2019-10-02 20:03 - 000000000 ____D C:\Users\Ska'\Documents\My CamStudio Videos
2019-10-02 19:19 - 2019-10-02 19:19 - 000071466 _____ C:\Users\Ska'\Downloads\Shortcut.txt
2019-10-02 19:17 - 2019-10-02 19:19 - 000077079 _____ C:\Users\Ska'\Downloads\Addition.txt
2019-10-02 19:11 - 2019-10-02 19:19 - 000082793 _____ C:\Users\Ska'\Downloads\FRST.txt
2019-10-02 19:06 - 2019-10-02 19:06 - 000325350 _____ C:\Users\Ska'\Downloads\ZHPDiag.txt
2019-10-02 19:01 - 2019-10-25 19:19 - 000000000 ____D C:\FRST
2019-10-02 18:58 - 2019-10-25 11:36 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\ZHP
2019-10-02 18:58 - 2019-10-25 11:22 - 000000664 _____ C:\Users\Ska'\Desktop\ZHPDiag.lnk
2019-10-02 18:58 - 2019-10-25 11:17 - 000000000 ____D C:\Users\Ska'\AppData\Local\ZHP
2019-10-02 18:57 - 2019-10-02 18:58 - 003249024 _____ (Nicolas Coolman) C:\Users\Ska'\Downloads\ZHPDiag3.exe
2019-10-02 16:22 - 2019-10-02 20:18 - 000000000 ____D C:\Users\Ska'\AppData\Local\Avg
2019-10-02 16:21 - 2019-10-02 16:21 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2019-10-02 16:20 - 2019-10-02 16:20 - 000000000 ____D C:\Program Files\Common Files\AVG
2019-10-02 16:19 - 2019-10-02 16:20 - 000000000 ____D C:\ProgramData\AVG
2019-10-02 12:45 - 2019-10-25 10:52 - 000000000 ___HD C:\adobeTemp
2019-09-30 21:25 - 2019-10-03 02:36 - 002274213 _____ C:\Users\Ska'\AppData\Roaming\CamShapes.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000135089 _____ C:\Users\Ska'\AppData\Roaming\CamLayout.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000000158 _____ C:\Users\Ska'\AppData\Roaming\CamData.ini
2019-09-30 21:25 - 2019-10-02 20:34 - 000000096 _____ C:\Users\Ska'\AppData\Roaming\version2.xml
2019-09-30 21:25 - 2019-10-01 16:21 - 000004606 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.cfg
2019-09-30 21:25 - 2019-09-30 21:25 - 000006928 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.ini
2019-09-30 21:25 - 2019-09-30 21:25 - 000000000 ____D C:\Users\Ska'\Downloads\CamStudioPortable
2019-09-30 21:25 - 2013-02-07 07:20 - 000001206 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000000000 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.Data.ini
2019-09-30 21:24 - 2019-09-30 21:25 - 013800280 _____ (PortableApps.com) C:\Users\Ska'\Downloads\CamStudioPortable_2-2.7.2 (Build r326.7.2_English.paf.exe
2019-09-30 21:09 - 2019-10-01 12:29 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2019-09-30 21:09 - 2019-09-30 21:23 - 000000000 ____D C:\Users\Ska'\AppData\Local\BraveSoftware
2019-09-30 21:09 - 2019-09-30 21:09 - 001299864 _____ (BraveSoftware Inc.) C:\Users\Ska'\Downloads\BraveBrowserSetup-CLU884.exe
2019-09-30 15:54 - 2019-09-30 15:54 - 003825485 _____ C:\Users\Ska'\Downloads\AdobeStock_266950330.jpeg
2019-09-30 15:47 - 2019-09-30 15:47 - 004870203 _____ C:\Users\Ska'\Downloads\AdobeStock_276398095.jpeg
2019-09-30 13:34 - 2019-09-30 13:34 - 000082301 _____ C:\Users\Ska'\Downloads\png2jpg (2).zip
2019-09-30 13:33 - 2019-09-30 13:33 - 000050938 _____ C:\Users\Ska'\Downloads\png2jpg (1).zip
2019-09-30 13:32 - 2019-09-30 13:32 - 000050938 _____ C:\Users\Ska'\Downloads\png2jpg.zip
2019-09-29 21:58 - 2019-09-29 21:58 - 035817343 _____ C:\Users\Ska'\Desktop\z.psd
2019-09-29 21:01 - 2019-09-29 21:17 - 120986658 _____ C:\Users\Ska'\Desktop\x.psd
2019-09-27 01:14 - 2019-10-01 22:30 - 000001866 _____ C:\Users\Ska'\Desktop\texte AIP.txt
2019-09-25 17:40 - 2019-09-25 17:40 - 000000000 ____D C:\Users\Ska'\Downloads\Fastlane-2-91 + Montages PSD
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-10-25 16:02 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-10-25 12:10 - 2012-12-23 21:43 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3638676003-1590446409-3246845486-1001
2019-10-25 11:25 - 2016-11-20 17:24 - 000000000 ____D C:\Users\Ska'\AppData\LocalLow\Mozilla
2019-10-25 11:25 - 2014-11-13 20:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-10-25 11:25 - 2012-12-24 12:33 - 000001027 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-10-25 11:25 - 2012-12-24 12:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-10-25 11:22 - 2014-12-17 05:15 - 000000000 ____D C:\Users\Ska'
2019-10-25 10:54 - 2017-04-12 20:27 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2017-04-12 20:27 - 000002029 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2017-04-12 20:27 - 000002029 _____ C:\ProgramData\Desktop\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2016-06-15 12:47 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2019-10-25 10:52 - 2019-06-15 15:08 - 000000000 ___RD C:\Users\Ska'\Creative Cloud Files
2019-10-25 10:51 - 2012-12-24 12:36 - 000000000 ____D C:\Users\Ska'\AppData\Local\Adobe
2019-10-25 10:24 - 2016-09-12 00:34 - 000000000 ___RD C:\Users\Ska'\iCloudDrive
2019-10-25 10:24 - 2015-01-31 20:26 - 000000000 ___RD C:\Users\Ska'\OneDrive
2019-10-25 10:20 - 2019-04-29 19:29 - 000000000 ____D C:\Program Files (x86)\TunnelBear
2019-10-25 10:20 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-10-03 02:01 - 2019-08-02 18:28 - 000000000 ____D C:\Users\Ska'\.gimp-2.8
2019-10-02 20:45 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2019-10-02 20:17 - 2012-11-21 17:12 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2019-10-02 20:16 - 2012-12-23 22:04 - 000000000 ____D C:\Users\Ska'\AppData\Local\Hewlett-Packard
2019-10-02 20:16 - 2012-11-21 17:12 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2019-10-02 20:16 - 2012-10-12 21:16 - 000000000 _RSHD C:\hp
2019-10-02 19:59 - 2012-12-24 12:36 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\vlc
2019-10-02 16:26 - 2016-07-21 00:28 - 000000000 ____D C:\Program Files (x86)\Google
2019-10-02 16:25 - 2013-09-28 13:33 - 000000000 ____D C:\Users\Ska'\AppData\Local\Google
2019-10-02 14:49 - 2017-05-28 15:31 - 000000000 ____D C:\WINDOWS\Minidump
2019-10-02 14:49 - 2012-07-26 10:12 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-10-02 12:46 - 2012-12-23 21:37 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\Adobe
2019-09-30 16:35 - 2019-06-17 16:11 - 000001456 _____ C:\Users\Ska'\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-09-29 23:23 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2019-09-26 19:01 - 2019-06-28 08:34 - 000000000 ____D C:\Users\Ska'\Desktop\PROFESSIONNEL
==================== Fichiers à la racine de certains dossiers ================
2019-10-25 11:16 - 2019-10-25 11:16 - 003342720 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPCleaner.exe
2019-10-25 11:22 - 2019-10-25 11:22 - 003234688 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPDiag3.exe
2019-09-30 21:25 - 2019-10-03 02:36 - 000000158 _____ () C:\Users\Ska'\AppData\Roaming\CamData.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000135089 _____ () C:\Users\Ska'\AppData\Roaming\CamLayout.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 002274213 _____ () C:\Users\Ska'\AppData\Roaming\CamShapes.ini
2019-09-30 21:25 - 2019-10-01 16:21 - 000004606 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.cfg
2019-09-30 21:25 - 2019-09-30 21:25 - 000006928 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000000000 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.Data.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000001206 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.ini
2012-12-24 13:53 - 2016-08-12 17:22 - 000000113 _____ () C:\Users\Ska'\AppData\Roaming\D2Info0
2016-07-04 20:23 - 2016-07-04 20:34 - 000000121 _____ () C:\Users\Ska'\AppData\Roaming\D2Info1
2016-05-26 19:35 - 2016-08-12 17:31 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_1
2016-05-26 19:36 - 2016-08-12 17:28 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_2
2016-05-26 19:50 - 2016-07-29 11:50 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_3
2016-05-27 14:36 - 2016-07-28 19:57 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_4
2016-06-06 18:36 - 2016-07-28 20:18 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_5
2016-07-05 13:58 - 2016-07-13 16:26 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_6
2016-07-05 15:27 - 2016-07-05 16:55 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_7
2016-07-04 20:23 - 2016-07-04 20:38 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_1
2016-07-04 20:24 - 2016-07-04 20:41 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_2
2016-07-04 20:30 - 2016-07-04 20:42 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_3
2019-09-30 21:25 - 2019-10-02 20:34 - 000000096 _____ () C:\Users\Ska'\AppData\Roaming\version2.xml
2014-07-30 22:45 - 2014-07-30 22:45 - 000000045 _____ () C:\Users\Ska'\AppData\Roaming\WB.CFG
2015-03-27 08:34 - 2015-03-27 08:34 - 000000000 _____ () C:\Users\Ska'\AppData\Local\.w852.db
2019-06-17 16:11 - 2019-09-30 16:35 - 000001456 _____ () C:\Users\Ska'\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-06-15 15:18 - 2019-06-15 15:18 - 000000000 _____ () C:\Users\Ska'\AppData\Local\oobelibMkey.log
2019-10-03 02:01 - 2019-10-03 02:01 - 000010616 _____ () C:\Users\Ska'\AppData\Local\recently-used.xbel
2019-04-14 22:36 - 2019-04-14 22:36 - 000007603 _____ () C:\Users\Ska'\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2019-10-25 10:31
==================== Fin de FRST.txt ============================
Exécuté par Ska' (administrateur) sur SKA (Hewlett-Packard p6-2371ef) (25-10-2019 19:17:43)
Exécuté depuis C:\Users\Ska'\Desktop
Profils chargés: Ska' (Profils disponibles: Ska' & Invité)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices Inc.) [Fichier non signé] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Arcai.com) [Fichier non signé] C:\Program Files (x86)\netcut\services\aips.exe
(ATI Technologies Inc.) [Fichier non signé] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard ) [Fichier non signé] C:\Program Files\IDT\WDM\Beats64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(IDT, Inc.) [Fichier non signé] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [Fichier non signé] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TunnelBear -> TunnelBear) C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-09-19] (IDT, Inc.) [Fichier non signé]
HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2012-09-19] (Hewlett-Packard ) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [68920 2019-01-15] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2623032 2019-07-05] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [MKLOL] => "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2016-07-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [144008 2019-09-25] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3638676003-1590446409-3246845486-1001\...\Policies\system: [EnableLUA] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WN111 Smart Wizard.lnk [2012-12-24]
ShortcutTarget: NETGEAR WN111 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WN111\wn111.exe (Pas de fichier)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0DCAA6E2-318C-4662-897A-72AF02EFDF97} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-11] (Adobe Inc. -> Adobe)
Task: {0DD5F3DE-0347-439C-966E-F276421AC6A7} - System32\Tasks\4507 => wscript.exe C:\Users\Ska'\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {1A13C6FD-0098-47D2-B6C9-24E1934A48F5} - System32\Tasks\{19D887D2-896B-4DEE-9835-2DEE1F6BC58E} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.4.0.102/fr/abandoninstall?page=tsProgressBar
Task: {2047340A-2A9F-4E35-94E0-A225BDD652FA} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {2336EDDE-BFBB-4834-A176-B312E24B515D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {272CDD64-A51C-446A-BE9B-E3C88304A1D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {27DEDCA8-46EE-4858-BF16-2C70EFAF53A8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {3C279A90-B10E-4D64-993A-1A17F3292B87} - System32\Tasks\VtZWXvkQNNHMpfL => C:\Users\Ska'\AppData\Roaming\VvwbV5K\iN7kpp4.exe
Task: {451CC755-2D18-4DCD-A6CC-6F08E2C8DD02} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {48D2B65C-B996-4363-A096-AB72C7BFCDB9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {602410CD-0CF7-4FE0-B49D-9AC39CDDD7EF} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jcomptequesurmoi77000@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {74863638-5642-4BEA-A3FE-AE1149F5BDF6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {89FE234B-A0EF-4A83-A04B-1AF1D4963832} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {A64BC339-34F5-4CA3-BD2F-EA440B1A991F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_Plugin.exe [1457720 2019-09-11] (Adobe Inc. -> Adobe)
Task: {A83057F4-527C-4D3B-89B1-F637C285A9E0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [410792 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2A4C823-B81E-4D47-ADBC-57493E89A5B8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1905072 2019-10-02] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.)
Task: {C8A7F137-CAF2-4B5B-B120-1CE0DFBBB7CF} - System32\Tasks\WIN-fIGbfFfEGCfFGEGbfCfE => C:\Users\Ska'\AppData\Roaming\~pghzrjw.exe <==== ATTENTION
Task: {D4BAEB5A-40FC-44F8-AACE-0E7E2024B074} - System32\Tasks\{F35A00B7-FC18-4DF9-9B0F-CCAAE03CFA0C} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.18.0.106/fr/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {DCF929EA-F21D-4E10-AB85-69DDD8C272C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {E9C71F71-E78E-4C81-ABC7-703D840D2919} - System32\Tasks\WIN-fdfEfEfAfC => C:\Users\Ska'\AppData\Roaming\~qajiocc.exe <==== ATTENTION
Task: {EE0ACDF4-BC7F-437A-A2A4-7A63181CE2BF} - System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => C:\Users\Ska'\AppData\Roaming\~rzxewtg.exe <==== ATTENTION
Task: {EE348692-F63F-4ACA-A54D-B25DE89E7236} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {EE87A3D4-42F3-4ADC-9046-9BEC4B754FC1} - System32\Tasks\0 => c:\program files\internet explorer\iexplore.exe <==== ATTENTION
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F6100D80-8F2D-44ED-AF4E-1E818C058C42} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 127.0.0.1 198.144.182.42
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{10CE6296-146B-4FCA-805B-A030FC74D577}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{2D696DAA-C5F1-499D-BBE3-5D0F3FA23FC2}: [DhcpNameServer] 172.20.10.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-3638676003-1590446409-3246845486-1001 -> {90B8C08F-2591-4158-97DC-EF2F7B0E669D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3638676003-1590446409-3246845486-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FireFox:
========
FF DefaultProfile: 8y6fhtar.default
FF ProfilePath: C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default [2019-10-25]
FF Extension: (YouTube mp3) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\info@youtube-mp3.org.xpi [2016-05-29] [Legacy]
FF Extension: (XJZ Survey Remover) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\survey-remover@gmx.com.xpi [2013-08-21] [Legacy] [non signé]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Ska'\AppData\Roaming\Mozilla\Firefox\Profiles\8y6fhtar.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-10-25]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-07-05] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_255.dll [2019-09-11] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2015-02-05] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll [2015-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN) [Fichier non signé]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-23] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-07-05] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-07-05] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AIPS; C:\Program Files (x86)\netcut\services\AIPS.exe [262144 2011-07-28] (Arcai.com) [Fichier non signé]
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [239616 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard Company -> Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation -> Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-09-19] (IDT, Inc.) [Fichier non signé]
R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [139896 2019-04-11] (TunnelBear -> TunnelBear)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [13209088 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [626688 2014-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdW86.sys [98472 2012-07-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R3 Netaapl; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [23040 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 NPF; C:\WINDOWS\System32\drivers\NPF.sys [35344 2010-06-25] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
S3 PVUSB; C:\WINDOWS\System32\drivers\CESG64.sys [63808 2007-02-19] (CASIO COMPUTER CO.,LTD. -> CASIO COMPUTER CO.,LTD.)
S3 rdpbus; C:\WINDOWS\System32\drivers\rdpbus.sys [22528 2013-08-22] () [Fichier non signé]
R3 RTL8168; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
R3 RtlWlanu; C:\WINDOWS\system32\DRIVERS\rtwlanu.sys [3860224 2015-08-05] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [540160 2012-09-19] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R3 tap-tb-0901; C:\WINDOWS\system32\DRIVERS\tap-tb-0901.sys [38656 2016-09-21] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\WINDOWS\system32\DRIVERS\tap0901.sys [31232 2013-08-03] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WN111v2; C:\WINDOWS\system32\DRIVERS\WN111v2x.sys [553472 2008-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
S3 DNIMp50a64; System32\Drivers\DNIMp50a64.sys [X]
S3 DNISp50a64; System32\Drivers\DNISp50a64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
Error(1) reading file: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office "
2019-10-25 19:17 - 2019-10-25 19:19 - 000026885 _____ C:\Users\Ska'\Desktop\FRST.txt
2019-10-25 19:16 - 2019-10-25 19:16 - 001617920 _____ (Farbar) C:\Users\Ska'\Desktop\FRST64.exe
2019-10-25 16:20 - 2019-10-25 16:20 - 000003446 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2019-10-25 16:20 - 2019-10-25 16:20 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2019-10-25 16:20 - 2019-10-25 16:20 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2019-10-25 11:36 - 2019-10-25 11:36 - 000318908 _____ C:\Users\Ska'\Desktop\ZHPDiag.txt
2019-10-25 11:31 - 2019-10-25 11:31 - 007622344 _____ (Malwarebytes) C:\Users\Ska'\Downloads\adwcleaner_7.4.2.exe
2019-10-25 11:31 - 2019-10-25 11:31 - 000001384 _____ C:\Users\Ska'\Desktop\AdwCleaner[S00].txt
2019-10-25 11:31 - 2019-10-25 11:31 - 000000000 ____D C:\AdwCleaner
2019-10-25 11:25 - 2019-10-25 11:25 - 000001970 _____ C:\Users\Ska'\Desktop\ZHPCleaner (R).txt
2019-10-25 11:22 - 2019-10-25 11:22 - 003234688 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPDiag3.exe
2019-10-25 11:16 - 2019-10-25 11:16 - 003342720 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPCleaner.exe
2019-10-03 02:01 - 2019-10-03 02:01 - 000010616 _____ C:\Users\Ska'\AppData\Local\recently-used.xbel
2019-10-02 21:24 - 2019-10-25 11:27 - 000000000 ____D C:\Users\Ska'\AppData\Local\CrashDumps
2019-10-02 20:37 - 2019-10-02 20:37 - 2015120384 _____ C:\Users\Ska'\Desktop\ssdsqdqs.avi
2019-10-02 20:17 - 2019-10-02 20:34 - 000000323 _____ C:\Users\Ska'\Desktop\xxxxxxxxxxxxx.txt
2019-10-02 20:05 - 2019-10-25 11:16 - 000000674 _____ C:\Users\Ska'\Desktop\ZHPCleaner.lnk
2019-10-02 20:04 - 2019-10-02 20:05 - 003329920 _____ (Nicolas Coolman) C:\Users\Ska'\Downloads\ZHPCleaner.exe
2019-10-02 20:03 - 2019-10-02 20:37 - 000000000 ____D C:\Users\Ska'\Documents\My CamStudio Temp Files
2019-10-02 20:03 - 2019-10-02 20:03 - 000000000 ____D C:\Users\Ska'\Documents\My CamStudio Videos
2019-10-02 19:19 - 2019-10-02 19:19 - 000071466 _____ C:\Users\Ska'\Downloads\Shortcut.txt
2019-10-02 19:17 - 2019-10-02 19:19 - 000077079 _____ C:\Users\Ska'\Downloads\Addition.txt
2019-10-02 19:11 - 2019-10-02 19:19 - 000082793 _____ C:\Users\Ska'\Downloads\FRST.txt
2019-10-02 19:06 - 2019-10-02 19:06 - 000325350 _____ C:\Users\Ska'\Downloads\ZHPDiag.txt
2019-10-02 19:01 - 2019-10-25 19:19 - 000000000 ____D C:\FRST
2019-10-02 18:58 - 2019-10-25 11:36 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\ZHP
2019-10-02 18:58 - 2019-10-25 11:22 - 000000664 _____ C:\Users\Ska'\Desktop\ZHPDiag.lnk
2019-10-02 18:58 - 2019-10-25 11:17 - 000000000 ____D C:\Users\Ska'\AppData\Local\ZHP
2019-10-02 18:57 - 2019-10-02 18:58 - 003249024 _____ (Nicolas Coolman) C:\Users\Ska'\Downloads\ZHPDiag3.exe
2019-10-02 16:22 - 2019-10-02 20:18 - 000000000 ____D C:\Users\Ska'\AppData\Local\Avg
2019-10-02 16:21 - 2019-10-02 16:21 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2019-10-02 16:20 - 2019-10-02 16:20 - 000000000 ____D C:\Program Files\Common Files\AVG
2019-10-02 16:19 - 2019-10-02 16:20 - 000000000 ____D C:\ProgramData\AVG
2019-10-02 12:45 - 2019-10-25 10:52 - 000000000 ___HD C:\adobeTemp
2019-09-30 21:25 - 2019-10-03 02:36 - 002274213 _____ C:\Users\Ska'\AppData\Roaming\CamShapes.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000135089 _____ C:\Users\Ska'\AppData\Roaming\CamLayout.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000000158 _____ C:\Users\Ska'\AppData\Roaming\CamData.ini
2019-09-30 21:25 - 2019-10-02 20:34 - 000000096 _____ C:\Users\Ska'\AppData\Roaming\version2.xml
2019-09-30 21:25 - 2019-10-01 16:21 - 000004606 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.cfg
2019-09-30 21:25 - 2019-09-30 21:25 - 000006928 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.ini
2019-09-30 21:25 - 2019-09-30 21:25 - 000000000 ____D C:\Users\Ska'\Downloads\CamStudioPortable
2019-09-30 21:25 - 2013-02-07 07:20 - 000001206 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000000000 _____ C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.Data.ini
2019-09-30 21:24 - 2019-09-30 21:25 - 013800280 _____ (PortableApps.com) C:\Users\Ska'\Downloads\CamStudioPortable_2-2.7.2 (Build r326.7.2_English.paf.exe
2019-09-30 21:09 - 2019-10-01 12:29 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2019-09-30 21:09 - 2019-09-30 21:23 - 000000000 ____D C:\Users\Ska'\AppData\Local\BraveSoftware
2019-09-30 21:09 - 2019-09-30 21:09 - 001299864 _____ (BraveSoftware Inc.) C:\Users\Ska'\Downloads\BraveBrowserSetup-CLU884.exe
2019-09-30 15:54 - 2019-09-30 15:54 - 003825485 _____ C:\Users\Ska'\Downloads\AdobeStock_266950330.jpeg
2019-09-30 15:47 - 2019-09-30 15:47 - 004870203 _____ C:\Users\Ska'\Downloads\AdobeStock_276398095.jpeg
2019-09-30 13:34 - 2019-09-30 13:34 - 000082301 _____ C:\Users\Ska'\Downloads\png2jpg (2).zip
2019-09-30 13:33 - 2019-09-30 13:33 - 000050938 _____ C:\Users\Ska'\Downloads\png2jpg (1).zip
2019-09-30 13:32 - 2019-09-30 13:32 - 000050938 _____ C:\Users\Ska'\Downloads\png2jpg.zip
2019-09-29 21:58 - 2019-09-29 21:58 - 035817343 _____ C:\Users\Ska'\Desktop\z.psd
2019-09-29 21:01 - 2019-09-29 21:17 - 120986658 _____ C:\Users\Ska'\Desktop\x.psd
2019-09-27 01:14 - 2019-10-01 22:30 - 000001866 _____ C:\Users\Ska'\Desktop\texte AIP.txt
2019-09-25 17:40 - 2019-09-25 17:40 - 000000000 ____D C:\Users\Ska'\Downloads\Fastlane-2-91 + Montages PSD
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-10-25 16:02 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-10-25 12:10 - 2012-12-23 21:43 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3638676003-1590446409-3246845486-1001
2019-10-25 11:25 - 2016-11-20 17:24 - 000000000 ____D C:\Users\Ska'\AppData\LocalLow\Mozilla
2019-10-25 11:25 - 2014-11-13 20:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-10-25 11:25 - 2012-12-24 12:33 - 000001027 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-10-25 11:25 - 2012-12-24 12:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-10-25 11:22 - 2014-12-17 05:15 - 000000000 ____D C:\Users\Ska'
2019-10-25 10:54 - 2017-04-12 20:27 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2017-04-12 20:27 - 000002029 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2017-04-12 20:27 - 000002029 _____ C:\ProgramData\Desktop\Acrobat Reader DC.lnk
2019-10-25 10:54 - 2016-06-15 12:47 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2019-10-25 10:52 - 2019-06-15 15:08 - 000000000 ___RD C:\Users\Ska'\Creative Cloud Files
2019-10-25 10:51 - 2012-12-24 12:36 - 000000000 ____D C:\Users\Ska'\AppData\Local\Adobe
2019-10-25 10:24 - 2016-09-12 00:34 - 000000000 ___RD C:\Users\Ska'\iCloudDrive
2019-10-25 10:24 - 2015-01-31 20:26 - 000000000 ___RD C:\Users\Ska'\OneDrive
2019-10-25 10:20 - 2019-04-29 19:29 - 000000000 ____D C:\Program Files (x86)\TunnelBear
2019-10-25 10:20 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-10-03 02:01 - 2019-08-02 18:28 - 000000000 ____D C:\Users\Ska'\.gimp-2.8
2019-10-02 20:45 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2019-10-02 20:17 - 2012-11-21 17:12 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2019-10-02 20:16 - 2012-12-23 22:04 - 000000000 ____D C:\Users\Ska'\AppData\Local\Hewlett-Packard
2019-10-02 20:16 - 2012-11-21 17:12 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2019-10-02 20:16 - 2012-10-12 21:16 - 000000000 _RSHD C:\hp
2019-10-02 19:59 - 2012-12-24 12:36 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\vlc
2019-10-02 16:26 - 2016-07-21 00:28 - 000000000 ____D C:\Program Files (x86)\Google
2019-10-02 16:25 - 2013-09-28 13:33 - 000000000 ____D C:\Users\Ska'\AppData\Local\Google
2019-10-02 14:49 - 2017-05-28 15:31 - 000000000 ____D C:\WINDOWS\Minidump
2019-10-02 14:49 - 2012-07-26 10:12 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-10-02 12:46 - 2012-12-23 21:37 - 000000000 ____D C:\Users\Ska'\AppData\Roaming\Adobe
2019-09-30 16:35 - 2019-06-17 16:11 - 000001456 _____ C:\Users\Ska'\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-09-29 23:23 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2019-09-26 19:01 - 2019-06-28 08:34 - 000000000 ____D C:\Users\Ska'\Desktop\PROFESSIONNEL
==================== Fichiers à la racine de certains dossiers ================
2019-10-25 11:16 - 2019-10-25 11:16 - 003342720 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPCleaner.exe
2019-10-25 11:22 - 2019-10-25 11:22 - 003234688 _____ (Nicolas Coolman) C:\Users\Ska'\ZHPDiag3.exe
2019-09-30 21:25 - 2019-10-03 02:36 - 000000158 _____ () C:\Users\Ska'\AppData\Roaming\CamData.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 000135089 _____ () C:\Users\Ska'\AppData\Roaming\CamLayout.ini
2019-09-30 21:25 - 2019-10-03 02:36 - 002274213 _____ () C:\Users\Ska'\AppData\Roaming\CamShapes.ini
2019-09-30 21:25 - 2019-10-01 16:21 - 000004606 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.cfg
2019-09-30 21:25 - 2019-09-30 21:25 - 000006928 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000000000 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.Data.ini
2019-09-30 21:25 - 2013-02-07 07:20 - 000001206 _____ () C:\Users\Ska'\AppData\Roaming\CamStudio.Producer.ini
2012-12-24 13:53 - 2016-08-12 17:22 - 000000113 _____ () C:\Users\Ska'\AppData\Roaming\D2Info0
2016-07-04 20:23 - 2016-07-04 20:34 - 000000121 _____ () C:\Users\Ska'\AppData\Roaming\D2Info1
2016-05-26 19:35 - 2016-08-12 17:31 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_1
2016-05-26 19:36 - 2016-08-12 17:28 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_2
2016-05-26 19:50 - 2016-07-29 11:50 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_3
2016-05-27 14:36 - 2016-07-28 19:57 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_4
2016-06-06 18:36 - 2016-07-28 20:18 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_5
2016-07-05 13:58 - 2016-07-13 16:26 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_6
2016-07-05 15:27 - 2016-07-05 16:55 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId0_7
2016-07-04 20:23 - 2016-07-04 20:38 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_1
2016-07-04 20:24 - 2016-07-04 20:41 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_2
2016-07-04 20:30 - 2016-07-04 20:42 - 000000008 _____ () C:\Users\Ska'\AppData\Roaming\DofusAppId1_3
2019-09-30 21:25 - 2019-10-02 20:34 - 000000096 _____ () C:\Users\Ska'\AppData\Roaming\version2.xml
2014-07-30 22:45 - 2014-07-30 22:45 - 000000045 _____ () C:\Users\Ska'\AppData\Roaming\WB.CFG
2015-03-27 08:34 - 2015-03-27 08:34 - 000000000 _____ () C:\Users\Ska'\AppData\Local\.w852.db
2019-06-17 16:11 - 2019-09-30 16:35 - 000001456 _____ () C:\Users\Ska'\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-06-15 15:18 - 2019-06-15 15:18 - 000000000 _____ () C:\Users\Ska'\AppData\Local\oobelibMkey.log
2019-10-03 02:01 - 2019-10-03 02:01 - 000010616 _____ () C:\Users\Ska'\AppData\Local\recently-used.xbel
2019-04-14 22:36 - 2019-04-14 22:36 - 000007603 _____ () C:\Users\Ska'\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2019-10-25 10:31
==================== Fin de FRST.txt ============================