Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:23-11-2015 Exécuté par Mike (administrateur) sur MIKEW8 (24-11-2015 15:18:41) Exécuté depuis C:\Users\Mike\Downloads Profils chargés: Mike & MSSQL$TFTIC2012 & MsDtsServer110 & ReportServer$TFTIC2012 & MSOLAP$TFTIC2012 & MSSQLFDLauncher$TFTIC2012 (Profils disponibles: Mike & MSSQL$TFTIC2012 & SQLAgent$TFTIC2012 & MsDtsServer110 & ReportServer$TFTIC2012 & MSOLAP$TFTIC2012 & MSSQLFDLauncher$TFTIC2012 & Classic .NET AppPool & .NET v4.5 & MVCSite & DefaultAppPool & .NET v2.0 & .NET v4.5 Classic & .NET v2.0 Classic) Platform: Windows 8.1 Pro (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe (SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe (LeapFrog Enterprises, Inc.) C:\Program Files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSAS11.TFTIC2012\OLAP\bin\msmdsrv.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS11.TFTIC2012\Reporting Services\ReportServer\bin\ReportingServicesService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (Microsoft Corporation) C:\Windows\System32\vmms.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\fdlauncher.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\fdhost.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\fdlauncher.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\fdhost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe () C:\Program Files (x86)\Nixory\nixory.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (LeapFrog Enterprises, Inc.) C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\Ssms.exe () C:\Program Files\WindowsApps\Disney.StarWarsCommander_3.1.2.5_x86__6rarf9sa4v8jt\Template.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTools.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8447192 2015-01-28] (Realtek Semiconductor) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM-x32\...\Run: [Monitor] => C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe [124536 2014-09-09] (LeapFrog Enterprises, Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-24] (AVAST Software) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2015-01-04] (Qualcomm®Atheros®) HKU\PE_D_ASP.NET V4.0\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\PE_D_ASP.NET V4.0\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\PE_D_CLASSIC .NET APPPOOL2\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\PE_D_CLASSIC .NET APPPOOL2\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\PE_D_DEFAULT1\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\PE_D_DEFAULT1\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\PE_D_DEFAULTAPPPOOL2\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\PE_D_DEFAULTAPPPOOL2\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\PE_D_MIKE1\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun HKU\PE_D_MIKE1\...\Run: [DAEMON Tools Lite] => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun HKU\PE_D_MIKE1\...\Run: [SkyDrive] => "C:\Users\Mike\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background HKU\PE_D_MIKE1\...\Run: [LaCie Desktop Manager Startup] => "C:\Program Files\LaCie\Desktop Manager\LaCieDesktopManagerStatusItem.exe" HKU\PE_D_MIKE1\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.) HKU\PE_D_MIKE1\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.) HKU\PE_D_MIKE1\...\MountPoints2: {e84a397b-2898-11e4-a9d4-806e6f6e6963} - E:\setup.exe HKU\PE_D_SQLSERVICEUSER\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\PE_D_SQLSERVICEUSER\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe HKU\S-1-5-21-3663535435-816766445-493384537-1001\...\Run: [Viber] => C:\Users\Mike\AppData\Local\Viber\Viber.exe [72389840 2015-08-12] () HKU\S-1-5-21-3663535435-816766445-493384537-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.) HKU\S-1-5-21-3663535435-816766445-493384537-1001\...\Run: [Bitrix24 Desktop] => C:\Program Files (x86)\Bitrix24\BitrixDesktop.exe [3703440 2015-05-19] (Bitrix) HKU\S-1-5-21-3663535435-816766445-493384537-1001\...\Run: [Nixory] => C:\Program Files (x86)\Nixory\nixory.exe [1057403 2011-12-02] () HKU\S-1-5-21-3663535435-816766445-493384537-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd) HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177416 2015-11-16] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [155976 2015-11-16] (NVIDIA Corporation) AppInit_DLLs-x32: , C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155976 2015-11-16] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ 00BitrixShellExt] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506B} => C:\Program Files (x86)\Bitrix24\64\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers: [ 00BitrixShellExt_C] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506E} => C:\Program Files (x86)\Bitrix24\64\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers: [ 00BitrixShellExt_E] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506D} => C:\Program Files (x86)\Bitrix24\64\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers: [ 00BitrixShellExt_S] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506C} => C:\Program Files (x86)\Bitrix24\64\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-11-24] (AVAST Software) ShellIconOverlayIdentifiers-x32: [ 00BitrixShellExt] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506B} => C:\Program Files (x86)\Bitrix24\32\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers-x32: [ 00BitrixShellExt_C] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506E} => C:\Program Files (x86)\Bitrix24\32\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers-x32: [ 00BitrixShellExt_E] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506D} => C:\Program Files (x86)\Bitrix24\32\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) ShellIconOverlayIdentifiers-x32: [ 00BitrixShellExt_S] -> {A11A1EE5-F9F8-4BE0-907F-D74A49CC506C} => C:\Program Files (x86)\Bitrix24\32\BitrixShellExt.dll [2015-05-19] (Bitrix Inc.) Startup: C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2015-06-12] () GroupPolicyScripts: Restriction <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) AutoConfigURL: [S-1-5-21-3663535435-816766445-493384537-1001] => hxxp://stopblock.me/wpad.dat?4a79b40399602fc3d39e5f702611fa62621220 Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 172.28.28.1 Tcpip\..\Interfaces\{50647218-F337-41BE-9BB6-59F02FF59CC2}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{52185342-FAB6-48D6-91B7-CF6F14680EA3}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{5D8D888C-28F8-4657-BF45-FA38F81D2D99}: [NameServer] 8.8.8.8,8.8.8.4 Tcpip\..\Interfaces\{5D8D888C-28F8-4657-BF45-FA38F81D2D99}: [DhcpNameServer] 172.28.28.1 Tcpip\..\Interfaces\{75B3BD97-6662-4C26-ABC9-D865C2FAFF0A}: [DhcpNameServer] 172.28.28.1 Tcpip\..\Interfaces\{DF132F3A-F365-4E1E-ACA2-46844633E2CD}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\PE_D_MIKE1\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://be.msn.com/defaultf.aspx?ocid=iehp HKU\S-1-5-21-3663535435-816766445-493384537-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.be URLSearchHook: [S-1-5-80-1501806596-2865878959-1111825062-1769183318-2839649222] ATTENTION => URLSearchHook par défaut est absent URLSearchHook: [S-1-5-80-1770670200-1234090253-3451813168-4041049723-2370973757] ATTENTION => URLSearchHook par défaut est absent URLSearchHook: [S-1-5-80-224100218-1134791429-365615989-3333734965-824589824] ATTENTION => URLSearchHook par défaut est absent URLSearchHook: [S-1-5-80-2283888122-90901319-1647310327-2601930390-2345212654] ATTENTION => URLSearchHook par défaut est absent URLSearchHook: [S-1-5-80-4255841827-1183750042-1357841609-1491846566-1925357657] ATTENTION => URLSearchHook par défaut est absent SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-80-1501806596-2865878959-1111825062-1769183318-2839649222 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-80-4255841827-1183750042-1357841609-1491846566-1925357657 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-10-20] (Microsoft Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-24] (AVAST Software) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-10-20] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-04] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-24] (AVAST Software) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-04] (Oracle Corporation) FireFox: ======== FF ProfilePath: C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\63ggl3cv.default-1448287953095 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-12] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-12] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-04] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-04] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-14] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-14] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin-x32: @vmware.com/vmrc,version=5.1.0.00000 -> C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.1\Firefox\np-vmware-vmrc.dll [2012-07-13] (VMware, Inc.) FF Plugin HKU\PE_D_MIKE1: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mike\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-11] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3663535435-816766445-493384537-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mike\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-11] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3663535435-816766445-493384537-1001: vasco.com/VascoCardReaderPlugin -> C:\Users\Mike\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll [2014-10-27] (VASCO Data Security) FF Plugin HKU\S-1-5-21-3663535435-816766445-493384537-1001: vasco.com/VascoCardReaderPlugin64 -> C:\Users\Mike\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll [2014-10-27] (VASCO Data Security) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-09-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-09-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-09-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-09-08] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-09-08] (Apple Inc.) FF Extension: Firebug - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\63ggl3cv.default-1448287953095\Extensions\[removed] [2015-11-24] FF Extension: Ghostery - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\63ggl3cv.default-1448287953095\Extensions\[removed] [2015-11-24] FF Extension: Belgium eID - C:\Program Files (x86)\Mozilla Firefox\extensions\[removed] [2015-11-23] [non signé] FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Free Download Manager\Firefox\Extension FF Extension: Free Download Manager plugin - C:\Program Files (x86)\Free Download Manager\Firefox\Extension [2015-05-08] [non signé] FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files\Mozilla Firefox\extensions\[removed] => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Fiddler2\FiddlerHook FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2015-11-02] [non signé] FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-24] Chrome: ======= CHR dev: Chrome dev build détecté(e)! <======= ATTENTION CHR Profile: C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Postman Interceptor) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aicmkgpgakddgnaphhhpliifpcfhicfo [2015-11-24] CHR Extension: (Postman) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhbjgbiflinjbdggehcddcbncdddomop [2015-11-24] CHR Extension: (Avast Online Security) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-24] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-26] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-24] ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [323200 2015-01-04] (Windows (R) Win 7 DDK provider) [Fichier non signé] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-24] (AVAST Software) R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [384512 2015-07-14] (Apple Inc.) [Fichier non signé] S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-12-22] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation) R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [4108104 2015-11-24] (SurfRight B.V.) R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe [21744 2015-07-09] (Microsoft Corporation) R2 LeapFrog Connect Device Service; C:\Program Files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe [7241728 2014-09-09] (LeapFrog Enterprises, Inc.) [Fichier non signé] R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [48128 2014-12-22] (Microsoft Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S3 MsDtsServer100; C:\Program Files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe [220104 2012-06-12] (Microsoft Corporation) R2 MsDtsServer110; C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe [218816 2015-05-05] (Microsoft Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2014-12-22] (Microsoft Corporation) S3 MSOLAP$TFTIC; C:\Program Files\Microsoft SQL Server\MSAS10_50.TFTIC\OLAP\bin\msmdsrv.exe [54791520 2011-06-17] (Microsoft Corporation) R2 MSOLAP$TFTIC2012; C:\Program Files\Microsoft SQL Server\MSAS11.TFTIC2012\OLAP\bin\msmdsrv.exe [72497640 2012-10-20] (Microsoft Corporation) R2 MSSQL$TFTIC; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\sqlservr.exe [62118344 2012-06-12] (Microsoft Corporation) R2 MSSQL$TFTIC2012; C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\sqlservr.exe [192192 2015-05-05] (Microsoft Corporation) R3 MSSQLFDLauncher$TFTIC; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\fdlauncher.exe [32096 2010-04-03] (Microsoft Corporation) R3 MSSQLFDLauncher$TFTIC2012; C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\fdlauncher.exe [49752 2012-02-11] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation) S3 ReportServer$TFTIC; C:\Program Files\Microsoft SQL Server\MSRS10_50.TFTIC\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2180960 2011-06-17] (Microsoft Corporation) R2 ReportServer$TFTIC2012; C:\Program Files\Microsoft SQL Server\MSRS11.TFTIC2012\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2423792 2012-10-20] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [293080 2014-12-23] (Realtek Semiconductor) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S3 SQLAgent$TFTIC; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TFTIC\MSSQL\Binn\SQLAGENT.EXE [441288 2012-06-12] (Microsoft Corporation) S3 SQLAgent$TFTIC2012; C:\Program Files\Microsoft SQL Server\MSSQL11.TFTIC2012\MSSQL\Binn\SQLAGENT.EXE [613056 2015-05-05] (Microsoft Corporation) S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [134656 2015-07-09] (Microsoft Corporation) [Fichier non signé] S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49040 2014-07-24] (Synaptics Incorporated) R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [32256 2014-07-24] (Synaptics Incorporated) R2 vmms; C:\Windows\system32\vmms.exe [13784064 2015-04-01] (Microsoft Corporation) S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation) S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation) S3 w3logsvc; C:\WINDOWS\SysWOW64\inetsrv\w3logsvc.dll [66560 2014-07-02] (Microsoft Corporation) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2014-12-22] (Microsoft Corporation) R2 W3SVC; C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll [475648 2014-12-22] (Microsoft Corporation) S3 wampapache; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [22016 2014-05-01] (Apache Software Foundation) [Fichier non signé] S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [10959360 2014-05-01] () [Fichier non signé] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2015-07-19] (Microsoft Corporation) S2 ZAMSvc; "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /service [X] ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-11-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-11-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-11-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-11-24] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-24] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [154256 2015-11-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-11-24] (AVAST Software) R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.) R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2015-01-04] (Qualcomm Atheros) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R3 hmpalert; C:\WINDOWS\system32\drivers\hmpalert.sys [198216 2015-11-24] (SurfRight B.V.) R3 hmpnet; C:\WINDOWS\system32\drivers\hmpnet.sys [69960 2015-11-24] (SurfRight B.V.) R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68952 2015-05-12] (Microsoft Corporation) S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2014-12-22] (Microsoft Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-24] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2014-12-22] (Microsoft Corporation) S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2014-10-29] (Microsoft Corporation) R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [299312 2015-11-16] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2014-12-22] (Microsoft Corporation) S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2014-12-22] (Microsoft Corporation) S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [336880 2012-10-20] (Microsoft Corporation) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation) S3 VascoCCIDFlt; C:\Windows\system32\DRIVERS\VascoCCIDFlt.sys [13312 2013-06-26] (VASCO Data Security) S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [18944 2014-12-22] (Microsoft Corporation) R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [689152 2015-08-05] (Microsoft Corporation) R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-05-21] (VMware, Inc.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) R3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation) S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X] S1 ZAM_Guard; \??\C:\WINDOWS\System32\drivers\zamguard64.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2015-11-24 15:10 - 2015-11-24 15:10 - 00000000 ____D C:\Users\Mike\Documents\ProcAlyzer Dumps 2015-11-24 14:55 - 2015-11-24 15:10 - 00112513 _____ C:\Users\Mike\Downloads\Addition.txt 2015-11-24 14:55 - 2015-11-24 14:55 - 02348544 _____ (Farbar) C:\Users\Mike\Downloads\FRST64 (1).exe 2015-11-24 14:55 - 2015-11-24 14:55 - 01733632 _____ C:\Users\Mike\Downloads\AdwCleaner.exe 2015-11-24 14:51 - 2015-11-24 15:18 - 00035947 _____ C:\Users\Mike\Downloads\FRST.txt 2015-11-24 14:50 - 2015-11-24 15:18 - 00000000 ____D C:\FRST 2015-11-24 14:50 - 2015-11-24 14:50 - 02348544 _____ (Farbar) C:\Users\Mike\Downloads\FRST64.exe 2015-11-24 14:33 - 2015-11-24 14:34 - 55560920 _____ (Microsoft Corporation) C:\Users\Mike\Downloads\Windows-KB890830-x64-V5.30.exe 2015-11-24 13:56 - 2015-11-24 13:56 - 00000165 ____H C:\Users\Mike\Documents\~$evoltransdb.xlsx 2015-11-24 13:43 - 2015-11-24 13:43 - 00000000 ___RD C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2015-11-24 13:39 - 2015-11-24 13:39 - 00004978 _____ C:\WINDOWS\PFRO.log 2015-11-24 12:25 - 2015-11-24 12:21 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2015-11-24 12:22 - 2015-11-24 12:22 - 00001938 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2015-11-24 12:22 - 2015-11-24 12:22 - 00000000 ____D C:\Users\Mike\AppData\Roaming\AVAST Software 2015-11-24 12:22 - 2015-11-24 12:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-11-24 12:21 - 2015-11-24 12:25 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-11-24 12:21 - 2015-11-24 12:21 - 00449992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00154256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2015-11-24 12:21 - 2015-11-24 12:21 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2015-11-24 12:21 - 2015-11-24 12:21 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2015-11-24 12:21 - 2015-11-24 12:20 - 01059656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2015-11-24 12:19 - 2015-11-24 12:19 - 05082360 _____ (AVAST Software) C:\Users\Mike\Downloads\avast_free_antivirus_setup_online.exe 2015-11-24 12:19 - 2015-11-24 12:19 - 00000000 ____D C:\ProgramData\AVAST Software 2015-11-24 12:19 - 2015-11-24 12:19 - 00000000 ____D C:\Program Files\AVAST Software 2015-11-24 11:26 - 2015-11-24 11:36 - 00043664 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys 2015-11-24 11:18 - 2015-11-24 13:39 - 00000000 ____D C:\ProgramData\HitmanPro.Alert 2015-11-24 11:18 - 2015-11-24 13:39 - 00000000 ____D C:\Program Files (x86)\HitmanPro.Alert 2015-11-24 11:18 - 2015-11-24 11:19 - 00830288 _____ (SurfRight B.V.) C:\WINDOWS\system32\hmpalert.dll 2015-11-24 11:18 - 2015-11-24 11:19 - 00772944 _____ (SurfRight B.V.) C:\WINDOWS\SysWOW64\hmpalert.dll 2015-11-24 11:18 - 2015-11-24 11:19 - 00198216 _____ (SurfRight B.V.) C:\WINDOWS\system32\Drivers\hmpalert.sys 2015-11-24 11:18 - 2015-11-24 11:19 - 00069960 _____ (SurfRight B.V.) C:\WINDOWS\system32\Drivers\hmpnet.sys 2015-11-24 11:18 - 2015-11-24 11:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert 2015-11-24 11:17 - 2015-11-24 11:17 - 04093696 _____ (SurfRight B.V.) C:\Users\Mike\Downloads\hmpalert.exe 2015-11-24 11:13 - 2015-11-24 11:13 - 02195988 _____ C:\Users\Mike\Downloads\tdsskiller-2-8-14-0.zip 2015-11-24 11:06 - 2015-11-24 11:06 - 11337112 _____ (SurfRight B.V.) C:\Users\Mike\Downloads\HitmanPro_x64 (1).exe 2015-11-24 11:03 - 2015-11-24 11:03 - 00000000 _____ C:\autoexec.bat 2015-11-24 11:01 - 2015-11-24 11:02 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Mike\Downloads\SpyHunter-Installer (1).exe 2015-11-24 10:58 - 2015-11-24 13:44 - 00000506 _____ C:\WINDOWS\Tasks\ParetoLogic Update Version3 Startup Task.job 2015-11-24 10:58 - 2015-11-24 13:40 - 00000480 _____ C:\WINDOWS\Tasks\ParetoLogic Registration3.job 2015-11-24 10:58 - 2015-11-24 13:40 - 00000454 _____ C:\WINDOWS\Tasks\ParetoLogic Update Version3.job 2015-11-24 10:58 - 2015-11-24 12:16 - 00000000 ____D C:\ProgramData\ParetoLogic 2015-11-24 10:58 - 2015-11-24 10:58 - 00003242 _____ C:\WINDOWS\System32\Tasks\ParetoLogic Update Version3 2015-11-24 10:58 - 2015-11-24 10:58 - 00003122 _____ C:\WINDOWS\System32\Tasks\ParetoLogic Registration3 2015-11-24 10:58 - 2015-11-24 10:58 - 00002910 _____ C:\WINDOWS\System32\Tasks\ParetoLogic Update Version3 Startup Task 2015-11-24 10:58 - 2015-11-24 10:58 - 00000000 ____D C:\Users\Mike\AppData\Roaming\ParetoLogic 2015-11-24 10:58 - 2015-11-24 10:58 - 00000000 ____D C:\Users\Mike\AppData\Roaming\DriverCure 2015-11-24 10:57 - 2015-11-24 10:57 - 05817064 _____ (ParetoLogic Inc.) C:\Users\Mike\Downloads\ParetoLogic PC Health Advisor_fr.exe 2015-11-23 18:39 - 2015-11-23 18:39 - 00002149 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2015-11-23 18:39 - 2015-11-23 18:39 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2015-11-23 18:39 - 2015-11-23 18:39 - 00000000 ____D C:\WINDOWS\system32\NV 2015-11-23 18:39 - 2015-11-14 06:53 - 00102520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2015-11-23 18:37 - 2015-11-23 18:37 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2015-11-23 18:35 - 2015-11-16 04:35 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 37881976 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 22310008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 18363000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 17515528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 16553568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 15717864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 15122296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 14835872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 13527440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 12034248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 11130488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2015-11-23 18:35 - 2015-11-16 04:35 - 02870576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 02490672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435900.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435900.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00877176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00689272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00299312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvkflt.sys 2015-11-23 18:35 - 2015-11-16 04:35 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2015-11-23 18:35 - 2015-11-16 04:35 - 00031352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2015-11-23 17:29 - 2015-11-24 13:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-11-23 16:13 - 2015-11-23 16:13 - 00002176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk 2015-11-23 16:13 - 2015-11-23 16:13 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Google 2015-11-23 16:12 - 2015-11-23 16:12 - 00929872 _____ (Google Inc.) C:\Users\Mike\Downloads\GoogleEarthSetup.exe 2015-11-23 15:17 - 2015-11-12 19:37 - 00112712 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2015-11-23 15:16 - 2015-11-24 13:39 - 00000116 _____ C:\WINDOWS\setupact.log 2015-11-23 15:16 - 2015-11-23 15:16 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-11-23 15:12 - 2015-11-23 15:12 - 00000000 ____D C:\Users\Mike\Desktop\Anciennes données de Firefox 2015-11-23 14:54 - 2015-11-23 14:54 - 263016301 _____ C:\Users\Mike\Downloads\4b689e8c3464d7adec77ca57961ac4221402159508-1280-720-2400-h264.flv 2015-11-23 14:46 - 2015-11-23 14:46 - 00000000 ____D C:\Users\Mike\Downloads\pirates 2015-11-23 14:44 - 2015-11-23 16:09 - 00000000 ____D C:\Users\Mike\AppData\Roaming\BitLord 2015-11-23 14:44 - 2015-11-23 14:44 - 00000000 ____D C:\Users\Mike\Documents\BitLord 2015-11-23 14:44 - 2015-11-23 14:44 - 00000000 ____D C:\Users\Mike\AppData\Local\BitLord 2015-11-23 14:44 - 2015-11-23 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitlord 2015-11-23 14:43 - 2015-11-23 14:43 - 00972760 _____ (Bitlord ) C:\Users\Mike\Downloads\BitLord-Installer.exe 2015-11-23 14:37 - 2015-11-23 14:42 - 734990336 _____ C:\Users\Mike\Downloads\The Little Prince 2015 FRENCH BDRip XviD-GLUPS.zone-telechargement.com.avi 2015-11-20 19:27 - 2015-11-20 19:28 - 00000000 ____D C:\Users\Mike\Downloads\RAD 2015-11-20 19:27 - 2015-10-13 20:38 - 00045895 _____ C:\Users\Mike\Downloads\about.htm 2015-11-20 10:51 - 2015-11-20 10:56 - 351537943 _____ C:\Users\Mike\Downloads\Dominion.S01E03.FRENCH.HDTV.XviD-RNT.zone-telechargement.com.avi 2015-11-20 10:51 - 2015-11-20 10:56 - 329104984 _____ C:\Users\Mike\Downloads\Dominion.S01E04.FRENCH.HDTV.XviD-RNT.zone-telechargement.com.avi 2015-11-20 10:50 - 2015-11-20 11:43 - 325581869 _____ C:\Users\Mike\Downloads\Dominion.S01E02.FRENCH.HDTV.XviD-RNT.zone-telechargement.com.avi 2015-11-19 20:38 - 2015-11-19 20:38 - 00000000 ____D C:\Users\Mike\Downloads\RSEAPI 2015-11-18 14:25 - 2015-11-18 14:25 - 00050638 _____ C:\Users\Mike\Downloads\Planning Labo .NET 4e trim.xlsx.xlsx 2015-11-16 16:12 - 2015-11-16 16:14 - 274585064 _____ (BlueStack Systems Inc.) C:\Users\Mike\Downloads\BlueStacks-Installer_native.exe 2015-11-16 12:31 - 2015-11-16 12:35 - 211025920 _____ C:\Users\Mike\Downloads\AdventureWorksDW2012_Data.mdf 2015-11-16 12:31 - 2015-11-16 12:35 - 198180864 _____ C:\Users\Mike\Downloads\AdventureWorks2012_Data.mdf 2015-11-16 12:31 - 2015-11-16 12:32 - 38050469 _____ C:\Users\Mike\Downloads\AdventureWorks2012-Full Database Backup.zip 2015-11-16 12:30 - 2015-11-16 12:32 - 79160923 _____ C:\Users\Mike\Downloads\AdventureWorks2012_Data.zip 2015-11-16 12:18 - 2015-11-16 12:18 - 04397752 _____ (Kaspersky Lab ZAO) C:\TDSSKiller.exe 2015-11-13 16:13 - 2015-11-13 16:13 - 37635239 _____ C:\Users\Mike\Downloads\RSEAPI.zip 2015-11-13 12:27 - 2015-11-13 12:30 - 13066954 _____ C:\Users\Mike\Downloads\20483B- Part 1 - Trainer Files - Programming in C# (2).zip 2015-11-12 19:59 - 2015-11-12 19:59 - 00000000 ____D C:\Users\Public\Documents\LeapFrog 2015-11-12 19:56 - 2015-11-12 19:56 - 00000962 _____ C:\Users\Public\Desktop\LeapFrog Connect.lnk 2015-11-12 19:56 - 2015-11-12 19:56 - 00000000 ____D C:\WINDOWS\BA9EAF4E04E24BF68B6D3AC72F61DB98.TMP 2015-11-12 19:55 - 2015-11-12 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LeapFrog Connect 2015-11-12 19:40 - 2015-11-12 19:47 - 00000000 ____D C:\Program Files\Microsoft Learning 2015-11-12 19:35 - 2015-11-12 19:55 - 00000000 ____D C:\Program Files (x86)\LeapFrog 2015-11-12 19:35 - 2015-11-12 19:35 - 00000000 ____D C:\ProgramData\Leapfrog 2015-11-12 19:30 - 2015-11-12 19:34 - 13753464 _____ (LeapFrog Enterprises, Inc.) C:\Users\Mike\Downloads\LeapFrogConnectSetup_LeapPadExplorer.exe 2015-11-12 19:21 - 2015-11-12 19:21 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wpdcomp_01_11_00.Wdf 2015-11-12 19:13 - 2015-11-24 11:50 - 00786883 _____ C:\WINDOWS\WindowsUpdate.log 2015-11-12 19:04 - 2015-11-03 01:23 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-11-12 19:04 - 2015-11-03 01:23 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-12 13:05 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-11-12 13:05 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-11-12 13:05 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2015-11-12 13:05 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2015-11-12 13:05 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2015-11-12 13:05 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2015-11-12 13:05 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll 2015-11-12 13:05 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll 2015-11-12 13:05 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2015-11-12 13:05 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2015-11-12 13:05 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-11-12 13:05 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-11-12 13:05 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-11-12 13:05 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-11-12 13:05 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-11-12 13:05 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-11-12 13:05 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2015-11-12 13:05 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-11-12 13:05 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2015-11-12 13:05 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml 2015-11-12 13:05 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe 2015-11-12 13:04 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-11-12 13:04 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-11-12 13:04 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-11-12 13:04 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-11-12 13:04 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-11-12 13:04 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-11-12 13:04 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-11-12 13:04 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-11-12 13:04 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-11-12 13:04 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-11-12 13:04 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-11-12 13:04 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-11-12 13:04 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-11-12 13:04 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2015-11-12 13:04 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2015-11-12 13:04 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2015-11-12 13:04 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2015-11-12 13:04 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys 2015-11-12 13:03 - 2015-11-05 14:10 - 01398104 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2015-11-12 13:03 - 2015-11-05 14:10 - 01367384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2015-11-12 13:03 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-11-12 13:03 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-11-12 13:03 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-11-12 13:03 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-11-12 13:03 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-11-12 13:03 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-11-12 13:03 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-11-12 13:03 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-11-12 13:03 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-11-12 13:03 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-11-12 13:03 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-11-12 13:03 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-11-12 13:03 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-11-12 13:03 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-11-12 13:03 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-11-12 13:03 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-11-12 13:03 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-11-12 13:03 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-11-12 13:03 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-11-12 13:03 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-11-12 13:03 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-11-12 13:03 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-11-12 13:03 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-11-12 13:03 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-11-12 13:03 - 2015-09-30 00:41 - 01391448 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2015-11-12 13:03 - 2015-09-30 00:41 - 01264472 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2015-11-12 13:03 - 2015-09-29 13:24 - 00155480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2015-11-12 13:03 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2015-11-12 13:03 - 2015-09-07 17:21 - 00825856 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmcsnap.dll 2015-11-12 13:03 - 2015-09-07 17:17 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ppcsnap.dll 2015-11-12 13:03 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2015-11-12 13:03 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2015-11-12 13:03 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-11-12 13:03 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-11-12 13:03 - 2015-05-12 01:24 - 00068952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2015-11-12 13:03 - 2015-05-12 01:24 - 00019800 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2015-11-12 12:54 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2015-11-12 12:54 - 2015-08-10 19:15 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2015-11-12 12:54 - 2015-08-10 19:06 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2015-11-12 12:54 - 2015-08-10 18:49 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2015-11-12 12:54 - 2015-08-10 17:56 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2015-11-12 12:54 - 2015-08-10 17:46 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2015-11-10 11:07 - 2015-11-05 18:13 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435891.dll 2015-11-10 11:07 - 2015-11-05 18:13 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435891.dll 2015-11-10 09:23 - 2015-11-10 09:23 - 00002598 _____ C:\Users\Mike\Downloads\BingoExemple.7z 2015-11-10 09:04 - 2015-11-10 09:04 - 00008869 _____ C:\Users\Mike\Downloads\Resultats_javascript_wad15.xlsx 2015-11-05 15:35 - 2015-11-05 15:35 - 07132571 _____ C:\Users\Mike\Downloads\Spikes.RubenB.SignalR.zip 2015-11-02 16:16 - 2015-11-02 16:17 - 00000000 ____D C:\Users\Mike\Downloads\AngularJSAuthentication-master 2015-11-02 15:53 - 2015-11-02 15:53 - 13960493 _____ C:\Users\Mike\Downloads\AngularJSAuthentication-master.zip 2015-11-02 15:46 - 2015-11-02 15:46 - 00002353 _____ C:\Users\Mike\Desktop\Lanceur d'applications Google Chrome.lnk 2015-11-02 15:46 - 2015-11-02 15:46 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-11-02 15:46 - 2015-11-02 15:46 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome 2015-11-02 12:35 - 2015-11-02 15:43 - 00000000 ____D C:\Users\Mike\Documents\Fiddler2 2015-11-02 12:34 - 2015-11-02 12:34 - 00001900 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fiddler4.lnk 2015-11-02 12:34 - 2015-11-02 12:34 - 00000000 ____D C:\Program Files (x86)\Fiddler2 2015-11-02 12:33 - 2015-11-02 12:34 - 01265624 _____ (Telerik) C:\Users\Mike\Downloads\fiddler4setup.exe 2015-10-28 15:50 - 2015-10-28 15:50 - 00140421 _____ C:\Users\Mike\Downloads\bug7098_ZE_profil.pptx 2015-10-27 17:01 - 2015-10-27 17:01 - 00088279 _____ C:\Users\Mike\Downloads\NET Framework 4 Formatting Utility.zip 2015-10-27 16:54 - 2015-10-27 16:54 - 00665064 _____ C:\Users\Mike\Downloads\UnityDownloadAssistant-5.2.2f1.exe 2015-10-27 16:07 - 2015-10-27 16:07 - 00032582 _____ C:\Users\Mike\Documents\cc_20151027_160704.reg 2015-10-27 15:56 - 2015-10-27 15:56 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Atheros 2015-10-27 15:56 - 2015-10-27 15:56 - 00000000 ____D C:\Users\Mike\AppData\Local\BMExplorer 2015-10-27 15:56 - 2015-10-27 15:56 - 00000000 ____D C:\ProgramData\Atheros 2015-10-27 15:30 - 2015-10-27 15:56 - 00000000 ____D C:\Users\Mike\Documents\Bluetooth Folder 2015-10-27 15:29 - 2015-10-27 15:31 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth 2015-10-27 15:29 - 2015-10-27 15:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program 2015-10-27 15:29 - 2015-10-27 15:30 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite 2015-10-27 15:26 - 2015-10-27 15:26 - 00000000 ____D C:\ProgramData\{A0EA423B-829D-4A7C-ACB8-778E4EDFCD79} 2015-10-27 15:23 - 2015-10-27 15:23 - 00000000 ____D C:\Users\Mike\Downloads\K1202_BT_8.0.1.338_Win7_Win81 2015-10-27 15:18 - 2015-10-27 15:20 - 216192263 _____ C:\Users\Mike\Downloads\K1202_BT_8.0.1.338_Win7_Win81.zip 2015-10-27 14:58 - 2015-11-24 13:44 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2015-10-27 14:57 - 2015-10-27 14:57 - 00000000 ____D C:\Users\Mike\AppData\Roaming\CS Odessa 2015-10-27 14:47 - 2015-10-12 14:53 - 00450794 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151027-144740.backup 2015-10-27 14:22 - 2015-10-27 14:22 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mike\Downloads\revosetup.exe 2015-10-27 11:47 - 2015-10-27 11:47 - 01431332 _____ C:\Users\Mike\Downloads\JDelange-cognitic.toolbox-659965291e73.zip 2015-10-27 11:47 - 2015-10-27 11:47 - 00915659 _____ C:\Users\Mike\Downloads\JDelange-adehis_controls-761e43970811.zip ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2015-11-24 15:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru 2015-11-24 14:45 - 2015-03-14 18:06 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-11-24 14:40 - 2015-03-07 22:00 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-11-24 13:47 - 2014-12-22 19:59 - 27594752 _____ C:\WINDOWS\system32\vmguest.iso 2015-11-24 13:45 - 2015-10-13 10:41 - 00000000 ____D C:\Program Files (x86)\Nixory 2015-11-24 13:45 - 2014-12-21 22:41 - 00003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3663535435-816766445-493384537-1001 2015-11-24 13:43 - 2014-12-22 18:11 - 00000000 ___DO C:\Users\Mike\OneDrive 2015-11-24 13:41 - 2015-06-23 09:34 - 00000000 ____D C:\ProgramData\VMware 2015-11-24 13:41 - 2015-03-07 22:00 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-11-24 13:40 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-11-24 13:39 - 2015-10-13 15:46 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware 2015-11-24 13:39 - 2015-05-27 16:06 - 00000000 ____D C:\ProgramData\NVIDIA 2015-11-24 13:39 - 2015-02-20 11:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-11-24 13:39 - 2014-12-22 16:14 - 00000000 ____D C:\ProgramData\Validity 2015-11-24 13:15 - 2015-02-02 14:47 - 00000000 ____D C:\Program Files\KMSpico 2015-11-24 12:42 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-11-24 12:40 - 2015-09-16 10:55 - 00011804 _____ C:\Users\Mike\Documents\evoltransdb.xlsx 2015-11-24 12:26 - 2015-01-27 10:37 - 00000000 ____D C:\Users\Mike\Documents\SQL Server Management Studio 2015-11-24 12:19 - 2015-10-12 13:32 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-11-24 11:39 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-11-24 11:18 - 2015-05-29 11:55 - 00000000 ____D C:\ProgramData\HitmanPro 2015-11-24 10:46 - 2015-03-20 12:01 - 00000000 ____D C:\Users\Mike\AppData\Local\CrashDumps 2015-11-24 10:42 - 2015-03-09 12:07 - 00000000 ____D C:\Users\Mike\Documents\Visual Studio 2010 2015-11-24 10:22 - 2015-04-20 13:37 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Slack 2015-11-23 19:12 - 2015-03-09 12:34 - 00000000 ____D C:\Users\MSOLAP$TFTIC2012 2015-11-23 19:12 - 2015-03-09 12:33 - 00000000 ____D C:\Users\MsDtsServer110 2015-11-23 19:12 - 2015-03-09 12:32 - 00000000 ____D C:\Users\MSSQLFDLauncher$TFTIC2012 2015-11-23 19:12 - 2015-03-09 12:32 - 00000000 ____D C:\Users\MSSQL$TFTIC2012 2015-11-23 18:39 - 2015-01-29 12:11 - 00000000 ____D C:\temp 2015-11-23 18:39 - 2014-12-22 16:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-11-23 16:13 - 2015-03-07 22:00 - 00000000 ____D C:\Program Files (x86)\Google 2015-11-23 15:16 - 2014-12-22 12:03 - 00001393 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2015-11-23 15:16 - 2014-12-22 12:03 - 00000000 ____D C:\Users\Mike\AppData\Local\NVIDIA Corporation 2015-11-23 12:55 - 2014-12-22 18:46 - 00000000 ____D C:\Users\Mike\Documents\Visual Studio 2013 2015-11-23 12:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-11-22 18:00 - 2015-03-29 00:09 - 00000000 ____D C:\Users\Mike\AppData\Roaming\MPC-HC 2015-11-20 10:54 - 2015-05-08 10:52 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Free Download Manager 2015-11-19 17:07 - 2015-05-21 14:29 - 00002282 ____H C:\Users\Mike\Documents\Default.rdp 2015-11-19 16:04 - 2014-09-24 16:26 - 02826262 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-11-19 16:04 - 2014-09-24 15:41 - 01166778 _____ C:\WINDOWS\system32\perfh00C.dat 2015-11-19 16:04 - 2014-09-24 15:41 - 00306394 _____ C:\WINDOWS\system32\perfc00C.dat 2015-11-19 09:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-11-19 09:27 - 2015-04-20 13:37 - 00000000 ____D C:\Users\Mike\AppData\Local\slack 2015-11-19 09:26 - 2015-05-29 11:28 - 00000000 ____D C:\Users\Mike\AppData\Local\SquirrelTemp 2015-11-19 09:26 - 2015-04-20 13:37 - 00002147 _____ C:\Users\Mike\Desktop\Slack.lnk 2015-11-19 09:26 - 2015-04-20 13:37 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies 2015-11-17 17:06 - 2014-12-22 16:22 - 00000000 ____D C:\Users\Mike 2015-11-17 12:18 - 2014-12-21 22:35 - 00000000 ____D C:\Users\Mike\AppData\Local\Packages 2015-11-17 09:25 - 2015-03-09 12:34 - 00000000 ____D C:\Users\ReportServer$TFTIC2012 2015-11-16 04:35 - 2015-06-23 09:31 - 03159248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2015-11-16 04:35 - 2015-06-23 09:31 - 00033607 _____ C:\WINDOWS\system32\nvinfo.pb 2015-11-16 04:35 - 2014-12-22 12:42 - 12770944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2015-11-16 04:35 - 2014-12-22 12:42 - 03579696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2015-11-16 04:35 - 2014-12-22 12:42 - 00467912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2015-11-16 04:35 - 2014-12-22 12:42 - 00388024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2015-11-16 04:35 - 2014-12-22 12:42 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2015-11-16 04:35 - 2014-12-22 12:42 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2015-11-16 04:35 - 2014-12-22 02:06 - 00112760 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2015-11-16 04:35 - 2014-12-22 02:06 - 00105080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 06358832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 02554488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 00938800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2015-11-14 07:06 - 2014-12-22 16:15 - 00523384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 00385144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 00075056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2015-11-14 07:06 - 2014-12-22 16:15 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2015-11-12 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2015-11-12 20:34 - 2015-07-22 15:27 - 00000000 ____D C:\Users\Mike\Documents\Visual Studio 2015 2015-11-12 19:55 - 2015-09-01 08:33 - 00000000 ____D C:\Program Files\DIFX 2015-11-12 19:44 - 2015-03-07 22:01 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-11-12 19:37 - 2014-12-22 12:02 - 01828160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2015-11-12 19:37 - 2014-12-22 12:02 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2015-11-12 19:37 - 2014-12-22 12:02 - 01509824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2015-11-12 19:37 - 2014-12-22 12:02 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2015-11-12 19:02 - 2013-08-22 15:44 - 00502656 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-11-12 17:25 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2015-11-12 13:32 - 2015-06-10 13:59 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-11-12 13:32 - 2015-01-29 15:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-11-12 13:32 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-11-12 13:21 - 2014-12-22 02:08 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-11-12 13:14 - 2013-08-22 14:25 - 00000167 _____ C:\WINDOWS\win.ini 2015-11-12 12:45 - 2015-03-14 18:06 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-11-10 09:08 - 2015-06-01 12:30 - 00000059 _____ C:\WINDOWS\wpd99.drv 2015-11-10 09:08 - 2015-06-01 12:30 - 00000000 ____D C:\ProgramData\pdf995 2015-10-28 09:17 - 2014-12-22 16:15 - 06027430 _____ C:\WINDOWS\system32\nvcoproc.bin 2015-10-27 18:43 - 2014-12-22 02:08 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-10-27 16:51 - 2015-07-28 10:48 - 00000000 ____D C:\ProgramData\Unity 2015-10-27 15:00 - 2015-10-12 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-10-27 15:00 - 2015-10-12 13:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware ==================== Fichiers à la racine de certains dossiers ======= 2015-01-29 12:19 - 2015-01-29 12:38 - 0001654 _____ () C:\Users\Mike\AppData\Roaming\SvcTraceViewer.exe.settings 2015-03-28 19:28 - 2015-08-21 15:51 - 0000600 _____ () C:\Users\Mike\AppData\Roaming\winscp.rnd 2015-10-11 20:42 - 2015-10-11 20:42 - 0004001 _____ () C:\Users\Mike\AppData\Local\recently-used.xbel 2015-03-18 14:14 - 2015-09-16 11:51 - 0007607 _____ () C:\Users\Mike\AppData\Local\resmon.resmoncfg 2015-05-06 12:48 - 2015-05-06 12:48 - 0000798 _____ () C:\Users\Mike\AppData\Local\Temp-log.txt 2015-05-27 08:54 - 2015-05-27 08:54 - 0000000 _____ () C:\Users\Mike\AppData\Local\Temp.dat 2015-08-11 18:18 - 2015-09-12 17:51 - 0000125 ___SH () C:\ProgramData\.zreglib 2013-10-30 08:48 - 2013-10-30 08:48 - 0010443 _____ () C:\ProgramData\regid.2009-06.com.flexerasoftware_E8544335-72A1-47D2-B281-75B66D03EF81.swidtag Fichiers à déplacer ou supprimer: ==================== C:\Users\Mike\Setup2.bat Certains fichiers dans TEMP: ==================== C:\Users\Mike\AppData\Local\Temp\HitmanPro_x64.exe C:\Users\Mike\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Mike\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2015-11-18 09:15 ==================== Fin de FRST.txt ============================