Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 13-07-2017 Exécuté par bea (administrateur) sur PC-BEATRIX (13-07-2017 23:00:33) Exécuté depuis C:\Users\bea\Downloads Profils chargés: bea (Profils disponibles: bea) Platform: Windows 8.1 (Update) (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\afwServ.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe () C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\avgui.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\ui\updateui.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7642328 2014-10-07] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2473800 2014-09-09] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard) HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard) HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2014-06-17] (Synaptics Incorporated) HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-07-03] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [263232 2017-07-05] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-04-01] (Hewlett-Packard Company) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [653576 2015-06-29] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065968 2015-07-23] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-07-03] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27219928 2016-11-15] (Skype Technologies S.A.) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\Run: [BingSvc] => C:\Users\bea\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\Run: [Google Update] => C:\Users\bea\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-27] (Google Inc.) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\Run: [Google Photos Backup] => C:\Users\bea\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd) HKU\S-1-5-21-3868288410-959334833-1471527125-1001\...\MountPoints2: {e26b0428-58bf-11e7-82a2-2c337a50392a} - "F:\iLinker.exe" Startup: C:\Users\bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-11-06] ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\bea\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{07B6398C-FB53-4EDC-BCB7-9967B37DB29B}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{C5123417-C08A-44F6-9D15-4177C30BA9C5}: [DhcpNameServer] 40.20.1.201 40.20.1.202 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp13.msn.com HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp13.msn.com HKU\S-1-5-21-3868288410-959334833-1471527125-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp13.msn.com SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {8AD08297-B01A-459F-A677-A215053EB977} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-3868288410-959334833-1471527125-1001 -> {8AD08297-B01A-459F-A677-A215053EB977} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-04-11] (Microsoft Corporation) BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.) BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-07-25] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (Seiko Epson Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.) Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation) FireFox: ======== FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-11-16] [non signé] FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-06-19] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-06-19] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-05-05] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3868288410-959334833-1471527125-1001: @tools.google.com/Google Update;version=3 -> C:\Users\bea\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.) FF Plugin HKU\S-1-5-21-3868288410-959334833-1471527125-1001: @tools.google.com/Google Update;version=9 -> C:\Users\bea\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR DefaultSearchURL: Default -> hxxp://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&redirect=CPC CHR DefaultSearchKeyword: Default -> askwebsearch CHR DefaultSuggestURL: Default -> hxxp://ss.search.ask.com/ss?li=ff&sstype=prefix&limit=10&hl=en&q={searchTerms} CHR Profile: C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default [2017-07-13] CHR Extension: (Google Slides) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-27] CHR Extension: (Google Docs) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-27] CHR Extension: (Google Drive) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-27] CHR Extension: (YouTube) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-27] CHR Extension: (G Maps) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjgdgpfadpmcoephcgoocclepphofjld [2017-05-20] CHR Extension: (Recherche Google) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-27] CHR Extension: (Google Sheets) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-27] CHR Extension: (Google Docs hors connexion) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (AdBlock) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-07-12] CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-04-22] CHR Extension: (Fraudscore) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilgbnnfhdpdbmjkgoakbijhopnnkdljl [2017-01-07] CHR Extension: (Lilo Search) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldhcdlnondjolfdmlagafpjnhglkfefl [2017-03-02] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09] CHR Extension: (Lilo.org) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejnkhmeilmiplpmenkegjaibnjbappo [2017-03-02] CHR Extension: (Gmail) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-27] CHR Extension: (Chrome Media Router) - C:\Users\bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13] CHR Profile: C:\Users\bea\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-12] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [264432 2017-07-05] (AVG Technologies CZ, s.r.o.) R2 AVG Firewall; C:\Program Files (x86)\AVG\Antivirus\afwServ.exe [312712 2017-07-06] (AVG Technologies CZ, s.r.o.) R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [7481648 2017-07-05] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-07-03] (AVG Technologies CZ, s.r.o.) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] () [Fichier non signé] R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3042544 2017-03-14] (Microsoft Corporation) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [255040 2014-08-25] (WildTangent) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.) R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [602888 2015-06-29] (Hewlett-Packard Development Company, L.P.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-06-25] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328296 2014-10-07] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-09-03] (Intel Corporation) R3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-04-09] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation) S2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703984 2014-09-22] (SEIKO EPSON CORPORATION) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-09] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19438920 2014-09-09] (NVIDIA Corporation) R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [Fichier non signé] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] () R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [292568 2014-09-04] (Realtek Semiconductor) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [191728 2014-06-17] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 avgbdisk; C:\Windows\system32\drivers\avgbdiska.sys [166624 2017-07-05] (AVG Technologies CZ, s.r.o.) R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdrivera.sys [313616 2017-07-05] (AVG Technologies CZ, s.r.o.) R0 avgbidsh; C:\Windows\system32\drivers\avgbidsha.sys [192584 2017-07-05] (AVG Technologies CZ, s.r.o.) R0 avgblog; C:\Windows\system32\drivers\avgbloga.sys [336896 2017-07-05] (AVG Technologies CZ, s.r.o.) R0 avgbuniv; C:\Windows\system32\drivers\avgbuniva.sys [51336 2017-07-05] (AVG Technologies CZ, s.r.o.) S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [39424 2017-07-05] (AVG Technologies CZ, s.r.o.) R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [139112 2017-07-05] (AVG Technologies CZ, s.r.o.) R1 avgNetSec; C:\Windows\system32\drivers\avgNetSec.sys [546968 2017-07-06] (AVG Technologies CZ, s.r.o.) R1 avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [102792 2017-07-05] (AVG Technologies CZ, s.r.o.) R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [76832 2017-07-05] (AVG Technologies CZ, s.r.o.) R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [1008288 2017-07-05] (AVG Technologies CZ, s.r.o.) R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [578048 2017-07-05] (AVG Technologies CZ, s.r.o.) R2 avgStm; C:\Windows\system32\drivers\avgStm.sys [191208 2017-07-05] (AVG Technologies CZ, s.r.o.) R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [353744 2017-07-05] (AVG Technologies CZ, s.r.o.) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [126976 2014-09-03] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-09] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [580824 2014-09-10] (Realtek Semiconductor Corporation) S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [506072 2014-06-20] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3593432 2014-10-08] (Realtek Semiconductor Corporation ) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-06-17] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-06-17] (Synaptics Incorporated) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-07-13 22:58 - 2017-07-13 23:00 - 00053481 _____ C:\Users\bea\Downloads\Addition.txt 2017-07-13 22:55 - 2017-07-13 23:00 - 00026109 _____ C:\Users\bea\Downloads\FRST.txt 2017-07-13 22:54 - 2017-07-13 23:00 - 00000000 ____D C:\FRST 2017-07-13 22:53 - 2017-07-13 22:53 - 02435584 _____ (Farbar) C:\Users\bea\Downloads\FRST64.exe 2017-07-12 23:38 - 2017-07-12 23:38 - 00002098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 2.5 64 bits.lnk 2017-07-12 23:38 - 2017-07-12 23:38 - 00002090 _____ C:\Users\Public\Desktop\Adobe Photoshop Lightroom 2.5 64-bits.lnk 2017-07-12 23:38 - 2017-07-12 23:38 - 00000000 ____D C:\Program Files\Adobe 2017-07-12 23:38 - 2009-09-03 10:45 - 00053488 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys 2017-07-12 23:38 - 2009-09-03 10:45 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys 2017-07-12 23:38 - 2009-09-03 10:45 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys 2017-07-12 16:46 - 2017-07-12 16:46 - 00140849 _____ C:\Users\bea\Desktop\ZHPDiag2.txt 2017-07-12 16:13 - 2017-07-12 16:13 - 00001545 _____ C:\Users\bea\Desktop\ZHPCleaner.txt 2017-07-12 15:57 - 2017-07-12 15:57 - 02823552 _____ C:\Users\bea\Downloads\ZHPCleaner (1).exe 2017-07-12 15:13 - 2017-07-12 15:13 - 00002766 _____ C:\Users\bea\Desktop\ZHPFixReport.txt 2017-07-12 14:33 - 2017-07-12 14:33 - 02781056 _____ C:\Users\bea\Downloads\ZHPDiag3 (2).exe 2017-07-12 14:31 - 2017-07-12 14:31 - 00315000 _____ C:\Users\bea\Downloads\winchk_2.0.exe 2017-07-12 14:29 - 2017-07-12 14:29 - 00000127 _____ C:\Users\bea\Downloads\ckfiles.txt 2017-07-12 14:26 - 2017-07-12 14:26 - 00468480 _____ () C:\Users\bea\Downloads\CKScanner (1).exe 2017-07-12 14:20 - 2017-07-12 14:20 - 00468480 _____ () C:\Users\bea\Downloads\CKScanner.exe 2017-07-12 14:17 - 2017-07-12 14:17 - 00055371 _____ C:\Users\bea\Desktop\Impression de ma configuration matérielle et logicielle -Résumé (page 1).pdf 2017-07-12 14:13 - 2017-07-12 14:13 - 00000994 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk 2017-07-12 14:13 - 2017-07-12 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com 2017-07-12 14:13 - 2017-07-12 14:13 - 00000000 ____D C:\ProgramData\DriversCloud.com 2017-07-12 14:13 - 2017-07-12 14:13 - 00000000 ____D C:\Program Files\DriversCloud.com 2017-07-12 14:10 - 2017-07-12 14:10 - 00234112 _____ C:\Users\bea\Downloads\DriversCloud_Win.exe 2017-07-12 12:18 - 2017-07-12 16:45 - 00140846 _____ C:\Users\bea\Desktop\ZHPDiag.txt 2017-07-12 12:11 - 2017-07-12 12:11 - 03061760 _____ (Nicolas Coolman) C:\Users\bea\Downloads\ZHPFix (1).exe 2017-07-12 12:09 - 2017-07-12 12:09 - 03061760 _____ (Nicolas Coolman) C:\Users\bea\Downloads\ZHPFix.exe 2017-07-12 12:09 - 2017-07-12 12:09 - 00000000 ____D C:\Users\bea\Downloads\Quarantine 2017-07-12 11:06 - 2017-07-12 14:34 - 00000874 _____ C:\Users\bea\Desktop\ZHPDiag.lnk 2017-07-12 11:05 - 2017-07-12 11:05 - 02781056 _____ C:\Users\bea\Downloads\ZHPDiag3.exe 2017-07-12 11:05 - 2017-07-12 11:05 - 02781056 _____ C:\Users\bea\Downloads\ZHPDiag3 (1).exe 2017-07-12 10:29 - 2017-07-12 10:29 - 64025992 _____ (Malwarebytes ) C:\Users\bea\Downloads\mb3-setup-35891.35891-3.1.2.1733-1.0.139-1.0.2060.exe 2017-07-12 10:15 - 2017-07-12 10:15 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2017-07-12 10:15 - 2017-07-12 10:15 - 00000841 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-07-12 10:15 - 2017-07-12 10:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-07-12 10:15 - 2017-07-12 10:15 - 00000000 ____D C:\Program Files\CCleaner 2017-07-12 10:14 - 2017-07-12 10:14 - 09747512 _____ (Piriform Ltd) C:\Users\bea\Downloads\ccsetup532.exe 2017-07-12 09:41 - 2017-05-04 01:11 - 00103600 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-07-12 09:41 - 2017-05-03 15:43 - 01555968 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 01206272 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00535552 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-07-12 09:41 - 2017-05-03 15:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-07-11 22:50 - 2017-07-12 16:43 - 00000000 ____D C:\Users\bea\AppData\Roaming\ZHP 2017-07-11 22:50 - 2017-07-12 15:58 - 00000884 _____ C:\Users\bea\Desktop\ZHPCleaner.lnk 2017-07-11 22:50 - 2017-07-12 11:08 - 00000000 ____D C:\Users\bea\AppData\Local\ZHP 2017-07-11 22:38 - 2017-07-11 22:38 - 02823552 _____ C:\Users\bea\Downloads\ZHPCleaner.exe 2017-07-11 22:01 - 2017-07-11 22:02 - 04110280 _____ C:\Users\bea\Downloads\adwcleaner_6.047 (1).exe 2017-07-11 22:00 - 2017-07-11 22:04 - 04110280 _____ C:\Users\bea\Downloads\adwcleaner_6.047.exe 2017-07-07 16:27 - 2017-07-07 16:28 - 00000000 ____D C:\Users\bea\Documents\film guerra civil aragon 2017-07-06 18:56 - 2017-07-06 18:57 - 114062626 _____ C:\Users\bea\Downloads\Castell de Mur .zip 2017-07-06 18:54 - 2017-07-06 18:55 - 155320395 _____ C:\Users\bea\Downloads\Valle de Vio - Nerin - Fanlo.zip 2017-07-06 18:51 - 2017-07-06 18:52 - 98112523 _____ C:\Users\bea\Downloads\Puerto Sahun.zip 2017-07-06 18:48 - 2017-07-06 18:48 - 30548221 _____ C:\Users\bea\Downloads\Belchite.zip 2017-07-06 18:41 - 2017-07-06 18:42 - 28827199 _____ C:\Users\bea\Downloads\Chez Robert et Nadège.zip 2017-07-06 14:22 - 2017-07-06 14:21 - 00546968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetSec.sys 2017-07-06 14:21 - 2017-07-05 17:06 - 00401584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe 2017-07-05 17:25 - 2017-07-05 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2017-07-05 17:07 - 2017-07-06 14:22 - 00003920 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update 2017-07-05 17:06 - 2017-07-05 17:07 - 00353744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00578048 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00191208 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00139112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00102792 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00076832 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys 2017-07-05 17:06 - 2017-07-05 17:06 - 00039424 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 01008288 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 00336896 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 00313616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 00192584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 00166624 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiska.sys 2017-07-05 17:06 - 2017-07-05 17:05 - 00051336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys 2017-07-05 17:03 - 2017-07-05 17:03 - 00001028 _____ C:\Users\Public\Desktop\AVG.lnk 2017-07-04 19:51 - 2017-07-04 19:51 - 00000790 _____ C:\Users\bea\Downloads\keysad2 (5).php 2017-07-04 19:51 - 2017-07-04 19:51 - 00000790 _____ C:\Users\bea\Downloads\keysad2 (4).php 2017-07-04 19:27 - 2017-07-04 19:27 - 00000790 _____ C:\Users\bea\Downloads\keysad2 (3).php 2017-07-04 19:23 - 2017-07-04 19:23 - 00000790 _____ C:\Users\bea\Downloads\keysad2 (2).php 2017-07-04 19:23 - 2017-07-04 19:23 - 00000790 _____ C:\Users\bea\Downloads\keysad2 (1).php 2017-07-03 20:20 - 2017-07-03 20:20 - 00000790 _____ C:\Users\bea\Downloads\keysad2.php 2017-06-24 11:35 - 2017-06-30 02:27 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-06-24 11:35 - 2017-06-30 02:27 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-06-20 21:19 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-06-20 21:18 - 2017-06-02 14:15 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-06-20 21:18 - 2017-06-02 14:12 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-06-20 21:18 - 2017-06-02 14:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-06-20 21:18 - 2017-06-02 14:06 - 01001984 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2017-06-20 21:18 - 2017-06-02 14:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-06-20 21:18 - 2017-06-02 13:30 - 03635200 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-06-20 21:18 - 2017-06-02 13:03 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-06-20 21:18 - 2017-06-02 12:58 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-06-20 21:18 - 2017-06-02 12:25 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-06-20 21:18 - 2017-06-02 12:24 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-06-20 21:18 - 2017-06-02 12:17 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-06-20 21:18 - 2017-06-02 12:02 - 02751488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-06-20 21:18 - 2017-06-02 11:43 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-06-20 21:18 - 2017-06-02 11:43 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-06-20 21:18 - 2017-05-15 21:58 - 00121184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys 2017-06-20 21:18 - 2017-05-14 22:44 - 04170240 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-06-20 21:18 - 2017-05-14 22:42 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-06-20 21:18 - 2017-05-14 22:19 - 01364040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-06-20 21:18 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-06-20 21:18 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-06-20 21:18 - 2017-05-14 21:32 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2017-06-20 21:18 - 2017-05-14 21:31 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2017-06-20 21:18 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-06-20 21:18 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-06-20 21:18 - 2017-05-14 21:04 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2017-06-20 21:18 - 2017-05-14 21:03 - 00373080 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2017-06-20 21:18 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-06-20 21:18 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-06-20 21:18 - 2017-05-14 20:48 - 05274112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2017-06-20 21:18 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-06-20 21:18 - 2017-05-14 20:38 - 07796736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2017-06-20 21:18 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-06-20 21:18 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-06-20 21:18 - 2017-05-14 20:16 - 05268992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2017-06-20 21:18 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-06-20 21:18 - 2017-05-14 20:13 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2017-06-20 21:18 - 2017-05-14 20:06 - 07441240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-06-20 21:18 - 2017-05-14 20:06 - 01737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-06-20 21:18 - 2017-05-14 20:06 - 01502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-06-20 21:18 - 2017-05-12 18:16 - 01084928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2017-06-20 21:18 - 2017-05-12 18:13 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2017-06-20 21:18 - 2017-05-12 04:58 - 01985536 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2017-06-20 21:18 - 2017-05-12 04:48 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2017-06-20 21:18 - 2017-05-12 04:18 - 03714560 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-06-20 21:18 - 2017-05-12 04:07 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2017-06-20 21:18 - 2017-05-12 04:04 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-06-20 21:18 - 2017-05-12 04:00 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2017-06-20 21:18 - 2017-05-12 01:36 - 22361848 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-06-20 21:18 - 2017-05-12 01:32 - 19788672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-06-20 21:18 - 2017-05-10 20:19 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2017-06-20 21:18 - 2017-05-06 18:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-06-20 21:18 - 2017-05-06 18:04 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-06-20 21:18 - 2017-04-06 19:37 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-06-20 21:18 - 2017-04-06 19:16 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2017-06-20 21:18 - 2017-04-06 18:50 - 01436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-06-20 21:18 - 2017-04-06 18:46 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-06-20 21:18 - 2017-04-06 18:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-06-20 21:18 - 2017-04-06 18:35 - 01362432 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2017-06-20 21:18 - 2017-04-06 18:15 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-06-20 21:18 - 2017-04-06 17:44 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2017-06-20 21:18 - 2017-04-02 16:49 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2017-06-20 21:18 - 2017-04-02 15:40 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-06-20 21:17 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-06-20 21:17 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-06-20 21:17 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-06-20 21:17 - 2017-05-14 20:46 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2017-06-20 21:17 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-06-20 21:17 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-06-20 21:17 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-06-20 21:17 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-06-20 21:17 - 2017-05-12 19:05 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2017-06-20 21:17 - 2017-05-12 17:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2017-06-20 21:17 - 2017-05-12 17:50 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2017-06-20 21:17 - 2017-05-12 17:48 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-06-20 21:17 - 2017-05-12 17:47 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-06-20 21:17 - 2017-05-12 06:10 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2017-06-20 21:17 - 2017-05-12 04:11 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2017-06-20 21:17 - 2017-05-12 04:10 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2017-06-20 21:17 - 2017-05-12 04:06 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-07-13 22:58 - 2015-04-18 12:31 - 00003936 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{10449943-829D-4443-ACCE-9D54B1906A1D} 2017-07-13 22:54 - 2014-10-31 10:27 - 00847512 _____ C:\Windows\system32\perfh00C.dat 2017-07-13 22:54 - 2014-10-31 10:27 - 00175100 _____ C:\Windows\system32\perfc00C.dat 2017-07-13 22:54 - 2014-03-18 11:53 - 01970480 _____ C:\Windows\system32\PerfStringBackup.INI 2017-07-13 22:54 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf 2017-07-13 13:00 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2017-07-13 12:56 - 2015-04-18 12:27 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3868288410-959334833-1471527125-1001 2017-07-13 12:48 - 2015-05-12 14:15 - 00037888 ___SH C:\Users\bea\Desktop\Thumbs.db 2017-07-13 12:24 - 2017-01-07 17:21 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task 2017-07-13 12:13 - 2016-04-04 10:13 - 00000941 _____ C:\Windows\Tasks\EPSON XP-225 Series Update {3582C4FF-A03D-4529-AEC2-0B8EE5E67FDF}.job 2017-07-12 23:39 - 2015-11-27 19:07 - 00000000 ____D C:\ProgramData\Adobe 2017-07-12 23:39 - 2015-11-27 19:06 - 00000000 ____D C:\Users\bea\AppData\Local\Adobe 2017-07-12 23:39 - 2015-04-18 12:22 - 00000000 ____D C:\Users\bea\AppData\Roaming\Adobe 2017-07-12 23:06 - 2015-04-18 12:26 - 00000000 ____D C:\Users\bea\Documents\Youcam 2017-07-12 22:59 - 2016-05-14 20:27 - 00000000 ___DO C:\Users\bea\OneDrive 2017-07-12 22:56 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-07-12 22:55 - 2017-01-07 17:06 - 00395192 _____ C:\Windows\system32\FNTCACHE.DAT 2017-07-12 22:55 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2017-07-12 11:54 - 2015-05-25 19:54 - 03830272 ___SH C:\Users\bea\Downloads\Thumbs.db 2017-07-12 11:33 - 2017-01-07 16:55 - 00000000 ____D C:\AdwCleaner 2017-07-12 09:54 - 2015-04-29 21:49 - 00000000 ____D C:\Windows\system32\appraiser 2017-07-12 09:54 - 2015-04-25 20:53 - 00000000 ____D C:\Windows\system32\MRT 2017-07-12 09:51 - 2015-04-25 20:53 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-07-11 22:22 - 2017-04-02 13:25 - 00000346 _____ C:\Windows\Tasks\HPCeeScheduleForbea.job 2017-07-11 22:22 - 2017-01-07 17:22 - 00000000 ____D C:\ProgramData\MFAData 2017-07-11 22:22 - 2017-01-07 17:18 - 00000000 ____D C:\Users\bea\AppData\Local\Avg 2017-07-11 22:22 - 2015-07-22 07:59 - 00000000 ____D C:\Program Files\Common Files\AV 2017-07-09 18:18 - 2017-04-02 13:25 - 00003156 _____ C:\Windows\System32\Tasks\HPCeeScheduleForbea 2017-07-06 14:45 - 2017-01-07 17:18 - 00000000 ____D C:\ProgramData\Avg 2017-07-06 11:20 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2017-07-05 17:24 - 2013-08-22 17:36 - 00000000 ___HD C:\Windows\ELAMBKUP 2017-07-05 17:08 - 2017-01-07 17:31 - 00000000 ____D C:\Users\bea\AppData\Roaming\AVG 2017-07-05 17:04 - 2017-01-07 17:21 - 00000000 ____D C:\Program Files (x86)\AVG 2017-07-02 21:35 - 2015-11-27 19:10 - 00002220 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-07-02 21:03 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2017-06-24 14:44 - 2017-01-13 13:42 - 00520776 _____ C:\Users\bea\Documents\comptes 2017.xlsx 2017-06-24 11:26 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData 2017-06-22 08:27 - 2016-12-20 14:54 - 00003172 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2 2017-06-22 08:27 - 2016-04-26 11:35 - 00002384 _____ C:\Users\bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive Entreprise.lnk 2017-06-22 08:27 - 2015-04-20 17:17 - 00003180 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3868288410-959334833-1471527125-1001 2017-06-20 23:22 - 2015-04-18 12:22 - 00000000 ____D C:\Users\bea\AppData\Local\Packages 2017-06-20 23:22 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-20 23:22 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2017-06-20 20:06 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-06-20 20:05 - 2015-04-20 17:10 - 00000000 ____D C:\Program Files\Microsoft Office 15 2017-06-15 15:46 - 2017-04-13 23:48 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-06-15 15:46 - 2017-04-13 23:48 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-06-15 15:44 - 2017-04-13 23:48 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys ==================== Fichiers à la racine de certains dossiers ======= 2016-02-14 15:31 - 2016-02-14 15:31 - 0000000 _____ () C:\Users\bea\AppData\Local\{69A010FE-B002-445E-9086-F2E696B144DE} Certains fichiers dans TEMP: ==================== 2009-09-03 10:45 - 2009-09-03 10:45 - 0223728 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\primosdk.DLL 2009-09-03 10:45 - 2009-09-03 10:45 - 0584176 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\px.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0129520 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxafs.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0066296 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\PxCpyA64.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 0120568 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\PxCpyI64.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 0539120 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxdrv.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0072176 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxhpinst.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 0065008 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\PxInsA64.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 0118256 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\PxInsI64.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 0186864 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxmas.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0072440 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxsetup.exe 2009-09-03 10:45 - 2009-09-03 10:45 - 1690096 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxsfs.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0379376 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\pxwave.dll 2009-09-03 10:45 - 2009-09-03 10:45 - 0088560 _____ (Sonic Solutions) C:\Users\bea\AppData\Local\Temp\vxblock.dll ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-07-02 21:40 ==================== Fin de FRST.txt ============================