help me j'ai un virus ! Fermé

Question

Bonjour,

Mon pc a planté hier de maniere intempestive quand j'ai voulu le rallumer l'ecran etait noir.

j'ai reinstallé le pc grace au programme du probook 4540s de HP (sans toucher à mes dossiers perso)
L'internet est complement planté avec 
un message en bas à droite : Assistant de notification" Est'ce que votre ordinateur marche lente ? Pour Assitance Technique Appelez gratuitement maintenant - Disponible 24/7 01 70 72 65 48

Le pare feu laisse passer bing, bonjour, blue soleil, crossbrows, cyberlink power director, et beaucoup d'autres choses. 

J'ai reinstallé avast pour faire un scann total : 1ere fois ca à planté
Est ce que quelqu'un peu m'aider ?  MErci

lilidurhone · Answer

Bonsoir

As tu accès au mode sans échec avec réseau?

lilidurhone · Answer

Si t'as accès à internet en mode normal ça suffira faut juste me le confirmer
Tu es sous quel système d'exploitation?

lilidurhone · Answer

As tu accès à internet ?

lilidurhone · Answer

ok :)
ZHPCleaner




Désactiver l'Anti-virus

Ton moteur de recherche va se fermer il faudra le réouvrir pour poster les rapports

téléchargement : https://nicolascoolman.eu




- Cet outil ne nécessite aucune installation, il est très rapide car basé sur l'éxécution de scripts.
- Clique droit sur le dossier téléchargé


- Clique sur Scanner :

- Savoir que tous les navigateurs ou onglets ouvert seront fermés et qu'il faudra les remettre

- En cas de présence d'un proxy, un message apparaît avec la question suivante
- Avez-vous installé ce proxy ? suivi de l'adresse IP du proxy
- Si vous n'avez pas installé de Proxy, cliquer sur "NON" pour accepter la réparation du proxy.

- En cas de présence d'un serveur inconnu, un message peut apparaître avec la question suivante 
- Avez-vous installé ce serveur ? suivi du nom du serveur 
- Si vous n'avez pas installé de serveur,, cliquer sur "NON" pour accepter la réparation 



- Fournir le rapport

calice19 · Answer

Je n avais pas vu ta reponse et entre temps j ai perdu la connection internet il me dit que cest un pb de carte reseau.
Je ne peux plus aller sur ton lien :-s...une vraie quiche !

lilidurhone · Answer

Tente une restauration à une date antérieure

calice19 · Answer

Je viens de recupérer ma connection internet et de passer adware cleaner. J'ai l'impression qu'il reste encore des trucs bizarre comme les pub par exemple.
Adware m'a envoyé ce rapport est ce que tu peux m'aider ? 

# AdwCleaner v3.215 - Rapport créé le 09/07/2014 à 17:23:18
# Mis à jour le 09/07/2014 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : karelle - CALICE
# Exécuté depuis : C:\Users\karelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HSJ9ONG8\AdwCleaner-3.215.exe
# Option : Nettoyer

 [ Services ] *****

Service Supprimé : BackupStack
[#] Service Supprimé : savesenselive
[#] Service Supprimé : savesenselivem
[#] Service Supprimé : Update FindRight
[#] Service Supprimé : Util FindRight

 [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\SaveSenseLive
Dossier Supprimé : C:\ProgramData\Systweak
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Dossier Supprimé : C:\Program Files (x86)\Advanced System Protector
[!] Dossier Supprimé : C:\Program Files (x86)\FindRight
Dossier Supprimé : C:\Program Files (x86)\Mobogenie
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
Dossier Supprimé : C:\Program Files (x86)\Mysearchdial
Dossier Supprimé : C:\Program Files (x86)\PC Speed Maximizer
Dossier Supprimé : C:\Program Files (x86)\RegClean Pro
Dossier Supprimé : C:\Program Files (x86)\SaveSenseLive
Dossier Supprimé : C:\Users\karelle\AppData\Local\Mobogenie
Dossier Supprimé : C:\Users\karelle\AppData\Local\SaveSense
Dossier Supprimé : C:\Users\karelle\AppData\Local\SaveSenseLive
Dossier Supprimé : C:\Users\karelle\AppData\LocalLow\Mysearchdial
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\0V1L2Z2Z1T1I1L1T
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Mysearchdial
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\PC Speed Maximizer
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\SaveSense
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
Dossier Supprimé : C:\Users\karelle\Documents\Mobogenie
Dossier Supprimé : C:\Users\karelle\Documents\PC Speed Maximizer
Dossier Supprimé : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Fichier Supprimé : C:\Windows\System32oboot64.exe
Fichier Supprimé : C:\Windows\System32\sasnative64.exe
Fichier Supprimé : C:\Users\karelle\daemonprocess.txt
Fichier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Fichier Supprimé : C:\Users\karelle\Desktop\MyPC Backup.lnk
Fichier Supprimé : C:\Users\karelle\Desktop\Nettoyez votre registre gratuitement!.lnk
Fichier Supprimé : C:\Users\karelle\Desktop\Sync Folder.lnk
Fichier Supprimé : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
Fichier Supprimé : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Supprimé : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Fichier Supprimé : C:\Windows\System32\Tasks\Advanced System Protector_startup
Fichier Supprimé : C:\Windows\Tasks\MySearchDial.job
Fichier Supprimé : C:\Windows\System32\Tasks\MySearchDial
Fichier Supprimé : C:\Windows\System32\Tasks\RegClean Pro
Fichier Supprimé : C:\Windows\Tasks\RegClean Pro_DEFAULT.job
Fichier Supprimé : C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
Fichier Supprimé : C:\Windows\Tasks\RegClean Pro_UPDATES.job
Fichier Supprimé : C:\Windows\System32\Tasks\RegClean Pro_UPDATES
Fichier Supprimé : C:\Windows\Tasks\SaveSense.job
Fichier Supprimé : C:\Windows\System32\Tasks\SaveSense
Fichier Supprimé : C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
Fichier Supprimé : C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
Fichier Supprimé : C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
Fichier Supprimé : C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA

 [ Raccourcis ] *****
 [ Registre ] *****

Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [PC Speed Maximizer]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\SaveSenseLive.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickCtrl.9
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLive.Update3WebControl.3
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\FindRight_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\FindRight_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateFindRight_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateFindRight_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilFindRight_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\utilFindRight_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{A2D3FB7A-6873-45E8-AF96-57092D721828}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A2D3FB7A-6873-45E8-AF96-57092D721828}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{FBC322D5-407E-4854-8C0B-555B951FD8E3}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3004627E-F8E9-4E8B-909D-316753CBA923}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\FindRight
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\mysearchdial
Clé Supprimée : HKCU\Software\pc speed maximizer
Clé Supprimée : HKCU\Software\SaveSense
Clé Supprimée : HKCU\Software\SaveSenseLive
Clé Supprimée : HKCU\Software\systweak
Clé Supprimée : HKCU\Software\UpdateStar
Clé Supprimée : HKCU\Software\Vittalia
Clé Supprimée : HKLM\Software\DealPlyLive
Clé Supprimée : HKLM\Software\FindRight
Clé Supprimée : HKLM\Software\InstallCore
Clé Supprimée : HKLM\Software\mysearchdial
Clé Supprimée : HKLM\Software\SaveSenseLive
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Speed Maximizer_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FindRight
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SaveSenseLive.exe

 [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16921

Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\ Google Chrome v35.0.1916.153

[ Fichier : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Startup_urls] : hxxp://search.conduit.com/?ctid=CT3297966&SearchSource=48&CUI=UN75409199025998122&UM=1
Supprimée [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1Qzu0ByE0ByDtB0FzytD0C0C0FtCtDtCtDtCtN0D0Tzu0SyBzzyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1720212793&ir=
Supprimée [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=vit_14_13_ch&cd=2XzuyEtN2Y1L1QzutC0CtA0EzzyEyB0D0CyDyD0CtDtCtDtCtN0D0Tzu0SzztCyCtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0E0AtDtD0D0FtDtGzzyB0AzztGtA0ByC0BtG0AzytBtAtGyDtD0FyEtC0CyByDtCyCyE0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0DtD0EtD0DzyyEtG0FtC0EyDtGtD0C0F0CtGzzyB0EtCtGyDyE0D0CyE0EyE0AtC0EtCtD2Q&cr=831145959&ir=
Supprimée [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=tele_14_15_ch&cd=2XzuyEtN2Y1L1QzutC0CtA0EzzyEyB0D0CyDyD0CtDtCtDtCtN0D0Tzu0SzztBzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StA0AtD0E0FyB0A0AtG0D0E0A0DtG0BtCyEyBtG0B0C0C0CtGyB0FyD0E0CyE0CzzzytCtAtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0DtD0EtD0DzyyEtG0FtC0EyDtGtD0C0F0CtGzzyB0EtCtGyDyE0D0CyE0EyE0AtC0EtCtD2Q&cr=924828062&ir=
Supprimée [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=tele_14_26_ch&cd=2XzuyEtN2Y1L1Qzu0ByE0ByDtB0FzytD0C0C0FtCtDtCtDtCtN0D0Tzu0SzytDyCtN1L2XzutBtFtBtCtFyEtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StB0DtCtC0A0Dzy0CtG0AyBzz0AtGyCtCzy0FtGzzzy0EyBtGtAyC0CtAzyzzzy0AtCtB0BtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0DtD0EtD0DzyyEtG0FtC0EyDtGtD0C0F0CtGzzyB0EtCtGyDyE0D0CyE0EyE0AtC0EtCtD2Q&cr=1597266201&ir=
Supprimée [Extension] : pflphaooapbgpeakohlggbpidpppgdff



AdwCleaner[R0].txt - [20608 octets] - [09/07/2014 17:20:32]
AdwCleaner[S0].txt - [19376 octets] - [09/07/2014 17:23:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19437 octets] ##########
# AdwCleaner v4.202 - Rapport créé le 26/04/2015 à 16:45:19
# Mis à jour le 23/04/2015 par Xplode
# Base de données : 2015-04-23.2 [Serveur]
# Système d'exploitation : Windows 8  (x64)
# Nom d'utilisateur : karelle - CALICE
# Exécuté depuis : C:\Users\karelle\Downloads\adwcleaner_4.202.exe
# Option : Nettoyer

 [ Services ] *****

[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem
[#] Service Supprimé : IHProtect Service
[#] Service Supprimé : wbsvc
[#] Service Supprimé : WindowsMangerProtect
[#] Service Supprimé : LiveUpdateWPP Manager
[#] Service Supprimé : cae99edb

 [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\WindowsMangerProtect
Dossier Supprimé : C:\ProgramData\IHProtectUpDate
Dossier Supprimé : C:\ProgramData\InstallSightSDK
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetEnhance
Dossier Supprimé : C:\Program Files (x86)\Easy Speed Check
Dossier Supprimé : C:\Program Files (x86)\globalUpdate
Dossier Supprimé : C:\Program Files (x86)\Probit Software
Dossier Supprimé : C:\Program Files (x86)\Wajam
Dossier Supprimé : C:\Program Files (x86)\Super Optimizer
Dossier Supprimé : C:\Program Files (x86)\XTab
Dossier Supprimé : C:\Program Files (x86)\Crossbrowse
Dossier Supprimé : C:\Program Files (x86)\WaNetEnhance
Dossier Supprimé : C:\Program Files (x86)\WebProtector
Dossier Supprimé : C:\Program Files (x86)\BrowserV22.04
Dossier Supprimé : C:\Program Files (x86)\MediaPlayerVid2.3
Dossier Supprimé : C:\Program Files\WebBar
Dossier Supprimé : C:\Users\karelle\AppData\Local\globalUpdate
Dossier Supprimé : C:\Users\karelle\AppData\Local\WebBar
Dossier Supprimé : C:\Users\karelle\AppData\Local\Crossbrowse
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\0A1Q1B1P1T1C1R1M1P1B
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\istartsurf
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\WebExtend
Dossier Supprimé : C:\Users\karelle\AppData\Roaming\Super Optimizer
Dossier Supprimé : C:\Users\karelle\Documents\Probit Software
Dossier Supprimé : C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions
cffjdbbodifgldkcbhmiiljfcnbgjab
Fichier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\crossbrowse.lnk
Fichier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Driver Pro on the Web.lnk
Fichier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Driver Pro.lnk
Fichier Supprimé : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk
Fichier Supprimé : C:\Users\karelle\Desktop\Super Optimizer.lnk

 [ Tâches planifiées ] *****

Tâche Supprimée : Crossbrowse
Tâche Supprimée : globalUpdateUpdateTaskMachineCore
Tâche Supprimée : globalUpdateUpdateTaskMachineUA
Tâche Supprimée : Super Optimizer Schedule
Tâche Supprimée : WebBarLaunchTask
Tâche Supprimée : WebBarUpdateTask
Tâche Supprimée : 57766685-5091-4356-9614-a4652cbd895a-1-6
Tâche Supprimée : ebb1827a-9e6e-4797-8e84-498b97f52ef7-1-6
Tâche Supprimée : ebb1827a-9e6e-4797-8e84-498b97f52ef7-10_user

 [ Raccourcis ] *****

Raccourci Désinfecté : C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\karelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Raccourci Désinfecté : C:\Users\karelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk
Raccourci Désinfecté : C:\Users\karelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

 [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions
cffjdbbodifgldkcbhmiiljfcnbgjab
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Easy Driver Pro]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Super Optimizer]
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\CRSBRWSHTML
Clé Supprimée : HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
Clé Supprimée : HKLM\SOFTWARE\7ba24b48-c254-4ddd-b02c-90bc8da2ffb9
Clé Supprimée : HKLM\SOFTWARE\b323c01d-e397-d657-1705-3510aff5fc73
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CCC7B152-1D8C-11E3-B2AD-F3EF3D58318D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software
uevos-programas.com
Clé Supprimée : HKCU\Software\Easy Speed Check
Clé Supprimée : HKCU\Software\WajIEnhance
Clé Supprimée : HKCU\Software\Super Optimizer
Clé Supprimée : HKCU\Software\CrossBrowser
Clé Supprimée : HKCU\Software\Crossbrowse
Clé Supprimée : HKCU\Software\Linkey
Clé Supprimée : HKCU\Software\BrowserV22.04-nv
Clé Supprimée : HKCU\Software\BrowserV22.04-nv-ie
Clé Supprimée : HKCU\Software\MediaPlayerVid2.3
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLM\SOFTWARE\GlobalUpdate
Clé Supprimée : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : HKLM\SOFTWARE\istartsurfSoftware
Clé Supprimée : HKLM\SOFTWARE\SmdmF
Clé Supprimée : HKLM\SOFTWARE\SupDp
Clé Supprimée : HKLM\SOFTWARE\SupTab
Clé Supprimée : HKLM\SOFTWARE\IHProtect
Clé Supprimée : HKLM\SOFTWARE\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\BrowserV22.04
Clé Supprimée : HKLM\SOFTWARE\BrowserV22.04-nv
Clé Supprimée : HKLM\SOFTWARE\BrowserV22.04-nv-ie
Clé Supprimée : HKLM\SOFTWARE\MediaPlayerVid2.3
Clé Supprimée : HKU\.DEFAULT\Software\BrowserV22.04-nv
Clé Supprimée : HKU\.DEFAULT\Software\BrowserV22.04-nv-ie
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Easy Driver Pro
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Super Optimizer_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XTab
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserV22.04
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerVid2.3
Clé Supprimée : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : [x64] HKLM\SOFTWARE\WebBar
Clé Supprimée : [x64] HKLM\SOFTWARE\Linkey
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:49899;hxxps=127.0.0.1:49899
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Donnée Supprimée : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

 [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.17267

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\ Google Chrome v42.0.2311.90

[C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
[C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : ncffjdbbodifgldkcbhmiiljfcnbgjab



AdwCleaner[R0].txt - [39844 octets] - [09/07/2014 17:20:32]
AdwCleaner[R1].txt - [2621 octets] - [22/07/2014 17:12:27]
AdwCleaner[S0].txt - [36082 octets] - [09/07/2014 17:23:18]
AdwCleaner[S1].txt - [2695 octets] - [22/07/2014 17:39:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [36203  octets] ##########

lilidurhone · Answer

Passe à zhpcleaner

calice19 · Answer

Il me bloque l'acces au telechargement sur cette adresse :-s
http://www.nicolascoolman.fr/download/zhpdiag/?wpdmdl=803

lilidurhone · Answer

désactive ton antivirus

calice19 · Answer

voici le rapport ~ ZHPCleaner v2015.4.26.190 by Nicolas Coolman (26/04/2015) ~ Run by karelle (Administrator) (26/04/2015 18:29:16) ~ Forum : http://forum.nicolascoolman.fr ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Scanner ~ Report : C:\Users\karelle\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\karelle\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) ~ Windows 8, 64-bit (Build 9200) ---\ Service. (0) ~ Aucun élément malicieux trouvé. ---\ Navigateur internet. (4) TROUVÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings [Bad : Port=49899 <-Loopback>] (Hijacker.Proxy) TROUVÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings [Bad : Port=49899 <-Loopback>] (Hijacker.Proxy) TROUVÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aide.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Driver Pro\EasyDriverPro.chm] (PUP.ProbitSoftware) TROUVÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Driver Pro\uninstall.exe] (PUP.ProbitSoftware) ---\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\ Tâche planifiée. (1) TROUVÉ tâche: [Web Protector Plus Server] [C:\Program Files (x86)\WebProtectorPlus\server64\WebProtectorPlusServer.exe (Not File) ] (PUP.WebProtector) ---\ Explorateur ( Dossiers, Fichiers ). (51) TROUVÉ fichier: C:\Program Files (x86)\99094df7-f026-4ece-aa68-00d2efe669e1\532c946c-4733-49e1-84c9-a9836fcf736f.dll (Adware.CrossRider) [3B846FEAAC642C4D55B268F25B42227E] TROUVÉ fichier: C:\Program Files (x86)\99094df7-f026-4ece-aa68-00d2efe669e1\69717da9-6b39-4886-9558-a341a7c0dd79.dll (Adware.CrossRider) [336F179E523A91631DC21F9037384FA1] TROUVÉ dossier: C:\Program Files (x86)\99094df7-f026-4ece-aa68-00d2efe669e1 (Adware.CrossRider) TROUVÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aide.lnk (PUP.ProbitSoftware) [11E33FF41DD7DE2427E0A1385A966B9B] TROUVÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk (PUP.ProbitSoftware) [4D9B2D4F6FD2C0881AA894D3133D3254] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\Setup32.bat (PUP.WebProtect) [8BBE3BAF38880BE62A91241D6D709BBA] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\Setup64.bat (PUP.WebProtect) [13E0822CA2F1933FDEA24E4EE795F737] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\SetupComponents.exe (PUP.WebProtect) [D8AAE88C042C04776FBAE040436363CA] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\SetupOld32.bat (PUP.WebProtect) [50B96ADD0D88FDE7EB021756B7C0848A] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\SetupOld64.bat (PUP.WebProtect) [DCA8B8CDE7EEB9CE6F17CC7C95EC5207] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\SetupVista32.bat (PUP.WebProtect) [BA3090BD18D377E3708004B0061B720E] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\SetupVista64.bat (PUP.WebProtect) [8D9E677030272343DBAD292A20844EDB] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus rzE5BB.tmp (PUP.WebProtect) [935BF11B38F5C90C69FFF0730D716AC7] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\uninst.bat (PUP.WebProtect) [407E2E251F4C98C5F73816DE49F7A1C9] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\uninstall.exe (PUP.WebProtect) [8E3CE468B29C2E5419C24E4E1C060438] TROUVÉ fichier: C:\Program Files (x86)\WebProtectorPlus\verdata (PUP.WebProtect) [7D0F5CF2C6D2350DFE2E365AE5FF83E0] TROUVÉ dossier: C:\Program Files (x86)\WebProtectorPlus\server64 (PUP.WebProtect) TROUVÉ dossier: C:\Program Files (x86)\WebProtectorPlus (PUP.WebProtect) TROUVÉ fichier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Web Protector Plus\Uninstall.lnk (PUP.WebProtector) [59A4EABC7E2B51A15EFDEB185C087457] TROUVÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Web Protector Plus (PUP.WebProtector) TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\fe760c3b-0c91-428f-a4fd-f988f63d0a08\lly_istartsurf.exe [BaiSix - BaiSix](PUP.IsStart) [492FFD2F60217705B0557A3C0AD3CB43] TROUVÉ dossier: C:\Users\karelle\AppData\Local\Temp\fe760c3b-0c91-428f-a4fd-f988f63d0a08 (PUP.IsStart) TROUVÉ fichier: C:\WINDOWS\Prefetch\CROSSBROWSE.EXE-6BE4601B.pf (PUP.CrossBrowse) [757CB86242BF83325F40AE06058157D2] TROUVÉ fichier: C:\WINDOWS\Prefetch\EASYSPEEDCHECKSETUP.EXE-A8270FAF.pf (PUP.SpeedCheck) [F9759744174723C4D03C1F58A0C15834] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\goopdate.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [377305C3C6B17EC366E84D7B8CC5DD51] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL](PUP.GlobalUpdate) [75DAE5D9147AE2239BED216F7BDF14DF] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F7C0B406FA2D12717A919003F6AE0135] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\psmachine.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [FEFEF2F226FD6BE184BC4A3378B02AAF] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\psuser.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [8D90BB3A36521B50D0E512A781E36871] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\goopdate.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [377305C3C6B17EC366E84D7B8CC5DD51] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL](PUP.GlobalUpdate) [75DAE5D9147AE2239BED216F7BDF14DF] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F7C0B406FA2D12717A919003F6AE0135] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\psmachine.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [FEFEF2F226FD6BE184BC4A3378B02AAF] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\psuser.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [8D90BB3A36521B50D0E512A781E36871] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\goopdate.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [377305C3C6B17EC366E84D7B8CC5DD51] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL](PUP.GlobalUpdate) [C7813CD245C0ED1B75A63C635A3287CC] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F7C0B406FA2D12717A919003F6AE0135] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\psmachine.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [FEFEF2F226FD6BE184BC4A3378B02AAF] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\psuser.dll [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [8D90BB3A36521B50D0E512A781E36871] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [03114DADBD9977FC823F95B21FB987E7] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdate.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [D858BA2EE718B1DB1CED20646E641D08] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F98DE4108614E4BB81E95E58E36C7000] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [7E767B342E55EB1DFD74A65D24EA4B70] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [03114DADBD9977FC823F95B21FB987E7] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdate.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [D858BA2EE718B1DB1CED20646E641D08] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F98DE4108614E4BB81E95E58E36C7000] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [7E767B342E55EB1DFD74A65D24EA4B70] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [03114DADBD9977FC823F95B21FB987E7] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdate.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [D858BA2EE718B1DB1CED20646E641D08] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [F98DE4108614E4BB81E95E58E36C7000] TROUVÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update](PUP.GlobalUpdate) [7E767B342E55EB1DFD74A65D24EA4B70] ---\ Base de Registres ( Clés, Valeurs, Données ). (29) TROUVÉ valeur: [X64] HKLM\Software\Classes\.htm\OpenWithProgIDs\HKLM64\Software\Classes\.htm\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) TROUVÉ valeur: [X64] HKLM\Software\Classes\.html\OpenWithProgIDs\HKLM64\Software\Classes\.html\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) TROUVÉ valeur: [X64] HKLM\Software\Classes\.shtml\OpenWithProgIDs\HKLM64\Software\Classes\.shtml\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) TROUVÉ valeur: [X64] HKLM\Software\Classes\.webp\OpenWithProgIDs\HKLM64\Software\Classes\.webp\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) TROUVÉ valeur: [X64] HKLM\Software\Classes\.xht\OpenWithProgIDs\HKLM64\Software\Classes\.xht\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) TROUVÉ clé: HKCU\Software\MediaPlayerVid2.3-nv-ie [] (Heuristic.CrossRider) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\MediaPlayerVid2.3-nv-ie [] (Heuristic.CrossRider) TROUVÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_A37B162DB7B151813A2AB73C339B5102 ["C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window] (PUP.Vosteran) TROUVÉ clé: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) TROUVÉ clé: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\Probit Software [] (PUP.ProbitSoftware) TROUVÉ clé: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\WaNetEnhance [] (Adware.Multiplug) TROUVÉ clé: HKCU\Software\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) TROUVÉ clé: HKCU\Software\Probit Software [] (PUP.ProbitSoftware) TROUVÉ clé: HKCU\Software\WaNetEnhance [] (Adware.Multiplug) TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Avast Packages [Avast Packages] (Adware.InstallCore) TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\shoppingate.info [1301318] (PUP.ShoppinGate) TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Crossbrowse [] (PUP.CrossBrowse) TROUVÉ clé: [X64] HKLM\SOFTWARE\WebProtectorPlus [] (PUP.BProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebProtectorPlus [Web Protector Plus (uninstall only)] (PUP.BProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebProtectorPlus [Web Protector Plus (uninstall only)] (PUP.WebProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\WaNetEnhance [] (Adware.Multiplug) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\WebProtector [] (PUP.BProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LiveWPPUpdate [Anti-phishing database updater for Web Protector Plus. This service keeps your computer updated with the newest database of known Internet threats.] (PUP.WebProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WaNetEnhance [WaNetEnhance] (Adware.Multiplug) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WebProtector [WebProtector] (PUP.BProtector) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WaNetEnhance [Wajam] (PUP.Wajam) TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WebProtector [Web Protector IE] (PUP.WebProtector) ---\ Bilan de la réparation ~ Aucune réparation effectuée. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ---\ Statistiques ~ Items scannés : 67612 ~ Items trouvés : 85 ~ Items annulés : 0 ~ Items réparés : 0 End of clean at 18:41:03 =================== ZHPCleaner-[S]-26042015-18_41_03.txt

lilidurhone · Answer

Ok fais nettoyer (réparer)

calice19 · Answer

Je viens de faire reparer / relancer le pc Mais PC speed maximiser est toujours la quand je lance internet... Voici le rapport ~ ZHPCleaner v2015.4.26.190 by Nicolas Coolman (26/04/2015) ~ Run by karelle (Administrator) (26/04/2015 19:08:44) ~ Forum : http://forum.nicolascoolman.fr ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Netttoyer ~ Report : C:\Users\karelle\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\karelle\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) ~ Windows 8, 64-bit (Build 9200) ---\ Service. (0) ~ Aucun élément malicieux trouvé. ---\ Navigateur internet. (4) SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings [Bad : Port=49899 <-Loopback>] (Hijacker.Proxy) SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings [Bad : Port=49899 <-Loopback>] (Hijacker.Proxy) DEPLACÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aide.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Driver Pro\EasyDriverPro.chm] (PUP.ProbitSoftware) DEPLACÉ fichier: C:\Users\karelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Driver Pro\uninstall.exe] (PUP.ProbitSoftware) ---\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\ Tâche planifiée. (1) SUPPRIMÉ tâche: [Web Protector Plus Server] [C:\Program Files (x86)\WebProtectorPlus\server64\WebProtectorPlusServer.exe (Not File) ] (PUP.WebProtector) ---\ Explorateur ( Dossiers, Fichiers ). (34) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\fe760c3b-0c91-428f-a4fd-f988f63d0a08\lly_istartsurf.exe [BaiSix - BaiSix] (PUP.IsStart) DEPLACÉ fichier: C:\WINDOWS\Prefetch\CROSSBROWSE.EXE-6BE4601B.pf (PUP.CrossBrowse) DEPLACÉ fichier: C:\WINDOWS\Prefetch\EASYSPEEDCHECKSETUP.EXE-A8270FAF.pf (PUP.SpeedCheck) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964 pGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.411171\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.407704\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\karelle\AppData\Local\Temp\comh.130964\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ dossier: C:\Program Files (x86)\99094df7-f026-4ece-aa68-00d2efe669e1 (Adware.CrossRider) DEPLACÉ dossier: C:\Program Files (x86)\WebProtectorPlus (PUP.WebProtect) DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Web Protector Plus (PUP.WebProtector) DEPLACÉ dossier: C:\Users\karelle\AppData\Local\Temp\fe760c3b-0c91-428f-a4fd-f988f63d0a08 (PUP.IsStart) ---\ Base de Registres ( Clés, Valeurs, Données ). (23) SUPPRIMÉ clé*: HKCU\Software\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) SUPPRIMÉ clé^: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\MediaPlayerVid2.3-nv-ie [] (Adware.CrossRider) SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\Probit Software [] (PUP.ProbitSoftware) SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3813279913-3536211461-486078071-1002\Software\WaNetEnhance [] (Adware.Multiplug) SUPPRIMÉ clé^: HKCU\Software\Probit Software [] (PUP.ProbitSoftware) SUPPRIMÉ clé^: HKCU\Software\WaNetEnhance [] (Adware.Multiplug) SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Avast Packages [Avast Packages] (Adware.InstallCore) SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\shoppingate.info [1301318] (PUP.ShoppinGate) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Crossbrowse [] (PUP.CrossBrowse) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\WebProtectorPlus [] (PUP.BProtector) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebProtectorPlus [Web Protector Plus (uninstall only)] (PUP.BProtector) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\WaNetEnhance [] (Adware.Multiplug) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\WebProtector [] (PUP.BProtector) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LiveWPPUpdate [Anti-phishing database updater for Web Protector Plus. This service keeps your computer updated with the newest database of known Internet threats.] (PUP.WebProtector) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WaNetEnhance [WaNetEnhance] (Adware.Multiplug) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WebProtector [WebProtector] (PUP.BProtector) SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.htm\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.html\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.shtml\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.webp\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.xht\OpenWithProgIDs\CRSBRWSHTML [] (PUP.CrossBrowse) SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_A37B162DB7B151813A2AB73C339B5102 ["C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window] (PUP.Vosteran) ---\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\ Statistiques ~ Items scannés : 4193 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 62 End of clean at 19:09:02 =================== ZHPCleaner-[R]-26042015-19_09_02.txt ZHPCleaner-[S]-26042015-18_41_03.txt ZHPCleaner-[S]-26042015-19_06_24.txt

lilidurhone · Answer

&#9654 Télécharge ici : FRST (de Farbar)
!!! En fonction de ta version de Windows, prends la "32-Bit Version" ou la "64-Bit Version" !!!
Aide : va dans Démarrer > Panneau de configuration > Système pour savoir si tu es sous 32 bits ou 64 bits.

&#9654 Double-clique sur l'icône FRST.exe pour lancer le programme. (Sous Windows Vista, 7 et 8, il faut faire un clic droit dessus, puis exécuter en tant qu'administrateur.) Clique ensuite sur Oui lorsqu'un message d'avertissement (Disclaimer) s'affiche.

&#9654 Sur le menu principal, clique sur le bouton Scan et patiente le temps de l'analyse.

&#9654 A la fin du scan, deux rapports s'affichent, FRST.txt et Addition.txt Poste les rapports dans ta prochaine réponse.

Les rapport se trouvent ici : C:\FRST\Logs

&#9654 Envoie-les sur https://www.cjoint.com/ et poste les liens obtenus en échange.

calice19 · Answer

jsuis désolée jsuis super relou mais t'aurais pas un lien pour telecharger ce programme... mon pc ne veut pas l'executer et quand je force il me dit que ca va mettre en peril mon systeme... j'ai envie de pleurer !

calice19 · Answer

Sorry j'avais pas bien lu tes recommandations :-s

calice19 · Answer

Le rapport Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2015
Ran by karelle at 2015-04-26 19:45:09
Running from C:\Users\karelle\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrateur (S-1-5-21-3813279913-3536211461-486078071-500 - Administrator - Disabled) => C:\Users\Administrator
HomeGroupUser$ (S-1-5-21-3813279913-3536211461-486078071-1004 - Limited - Enabled)
Invité (S-1-5-21-3813279913-3536211461-486078071-501 - Limited - Disabled)
karelle (S-1-5-21-3813279913-3536211461-486078071-1002 - Administrator - Enabled) => C:\Users\karelle

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1924 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.2006 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.6.4330 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.1.3231 - CyberLink Corp.)
Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 7.1.2.0 - Hewlett-Packard Company)
Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard)
Evernote v. 4.5.7 (HKLM-x32\...\{0BE73D3C-B5AF-11E1-933A-984BE15F174E}) (Version: 4.5.7.7146 - Evernote Corp.)
Face Recognition for HP ProtectTools (HKLM\...\Face Recognition for HP ProtectTools) (Version: 7.2.0.4542 - Hewlett-Packard Company)
Face Recognition for HP ProtectTools (Version: 7.2.0.4542 - Hewlett-Packard Company) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{29989969-FED8-4EFB-8FB2-39429D37E471}) (Version: 5.1.5.1 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{FCD58C04-324A-40D1-BA9E-1A754DF1736D}) (Version: 1.2.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 8 (HKLM-x32\...\{50F16F43-54B8-43DB-B96F-255546DFB990}) (Version: 1.0.1.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1112.2_WHQL - Sonix)
HP Hotkey Support (HKLM-x32\...\{C97CC14E-4789-4FC5-BC75-79191F7CE009}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP ProtectTools Security Manager (HKLM\...\HPProtectTools) (Version: 8.0.0.1314 - Hewlett-Packard Company)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP SoftPaq Download Manager (HKLM-x32\...\{B50981AD-95E8-4E4D-912A-7C4B738387CA}) (Version: 3.4.6.0 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{835B275B-F29B-464B-BD4B-097FD55FAB0A}) (Version: 4.6.8.1 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{D1E7D876-6B86-4B35-A93D-15B0D6C43EAF}) (Version: 8.5.4.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)
HP System Default Settings (HKLM-x32\...\{A9088865-5AB9-4E37-A82F-CB264E0B5415}) (Version: 1.0.3.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.5.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6428.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2843 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.5.1006 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
PDF Complete Corporate Edition (HKLM-x32\...\PDF Complete) (Version: 4.1.8 - PDF Complete, Inc)
Ralink Bluetooth Stack64 (HKLM\...\{ED818A3C-3DF5-CDCF-3DB2-A646D7B31A16}) (Version: 9.0.717.0 - Ralink Corporation)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.2.0 - Ralink)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.2.612.2012 - Realtek)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.3 - Synaptics Incorporated)
Theft Recovery for HP ProtectTools (HKLM-x32\...\InstallShield_{10F5A72A-1E07-4FAE-A7E7-14B10CC66B17}) (Version: 7.0.0.10 - Hewlett-Packard Company)
Theft Recovery for HP ProtectTools (x32 Version: 7.0.0.10 - Hewlett-Packard Company) Hidden
Validity Fingerprint Sensor Driver (HKLM\...\{AA51ED2E-DCE7-415F-9C32-CB9B561D216D}) (Version: 4.4.228.0 - Validity Sensors, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

23-04-2015 13:59:05 Suppression du module linguistique

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1EE36782-6B6E-46EB-B96D-4139478AF696} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-16] (Hewlett-Packard Company)
Task: {3D9313CB-0041-42CC-B832-030A63C7795D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-16] (Hewlett-Packard Company)
Task: {65060854-4989-43C4-A984-4D6C49973214} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-16] (Hewlett-Packard Company)
Task: {70D82E9C-D977-4C04-9EC1-8F033E1948E1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-23] (Google Inc.)
Task: {70ED5660-E9F5-4D26-88ED-89357627FEEA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-04-01] (Microsoft Corporation)
Task: {854EE473-E091-41BA-B0B5-689CEA70655C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-23] (Avast Software s.r.o.)
Task: {BE6647BA-B6DB-4574-AA26-AEBE797FACEA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-23] (Google Inc.)
Task: {DC74F3F9-583A-4FBB-8883-C01CDEE9B03F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-08] (Hewlett-Packard Company)
Task: {E65147BF-59FF-4524-B38B-514805F8530D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-08] (Piriform Ltd)
Task: {E68E716C-72E0-4D9C-AF43-AB419D80B3E9} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-15] (Synaptics Incorporated)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2012-01-18 01:57 - 2012-01-18 01:57 - 00298368 _____ () c:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2010-09-06 22:18 - 2010-09-06 22:18 - 01412608 _____ () C:\WINDOWS\SYSTEM32\LIBEAY32.dll
2012-08-14 23:13 - 2012-08-14 23:13 - 00009728 _____ () C:\Windows\system32\BsHelpCSps.dll
2012-08-16 02:20 - 2012-08-16 02:20 - 00356352 _____ () C:\Windows\system32\BsExtendFunc.dll
2012-08-14 23:11 - 2012-08-14 23:11 - 00022528 _____ () C:\Windows\system32\BsTrace.dll
2012-08-14 23:13 - 2012-08-14 23:13 - 00052736 _____ () C:\Windows\system32\BlueSoleilCSps.dll
2012-08-23 21:08 - 2012-08-23 21:08 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-04-08 21:53 - 2015-04-08 21:53 - 00065536 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2015-04-23 18:51 - 2015-04-23 18:51 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-23 18:51 - 2015-04-23 18:51 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-26 15:47 - 2015-04-26 15:47 - 02927104 _____ () C:\Program Files\AVAST Software\Avast\defs\15042600\algo.dll
2012-08-14 23:11 - 2012-08-14 23:11 - 00022528 _____ () C:\WINDOWS\SYSTEM32\BsTrace.dll
2012-08-14 23:13 - 2012-08-14 23:13 - 00009728 _____ () C:\Windows\SYSTEM32\BsHelpCSps.dll
2012-08-14 23:13 - 2012-08-14 23:13 - 00052736 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
2012-08-14 19:24 - 2012-08-14 19:24 - 00323648 _____ () c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\USB	l_filter.dll
2012-05-03 02:28 - 2012-05-03 02:28 - 00012800 _____ () c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\AMP\IVTAMPRL.dll
2015-04-25 21:17 - 2015-04-25 21:17 - 00017920 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\306244474623207c1f22c75cb27f3481\PSIClient.ni.dll
2013-05-28 00:21 - 2012-07-18 08:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2012-08-14 23:11 - 2012-08-14 23:11 - 00022528 _____ () C:\Windows\SYSTEM32\BsTrace.dll
2015-04-23 13:41 - 2015-04-13 23:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll
2015-04-23 13:41 - 2015-04-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll
2012-08-14 23:16 - 2012-08-14 23:16 - 00072192 _____ () C:\WINDOWS\SYSTEM32\BsProfilefunc.dll
2012-08-16 02:20 - 2012-08-16 02:20 - 00356352 _____ () C:\WINDOWS\SYSTEM32\BsExtendFunc.dll
2013-05-28 00:50 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 20:34 - 2012-06-08 20:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-04-23 18:51 - 2015-04-23 18:51 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-04-23 13:41 - 2015-04-13 23:55 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\karelle\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3813279913-3536211461-486078071-1002\Control Panel\Desktop\Wallpaper -> C:\WINDOWS\web\wallpaper\Hewlett-packard\hewlett.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [Wininit-Shutdown-In-Rule-TCP-RPC] => (Allow) %systemroot%\system32\wininit.exe
FirewallRules: [Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper] => (Allow) %systemroot%\system32\wininit.exe
FirewallRules: [ProximityUxHost-Sharing-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\proximityuxhost.exe
FirewallRules: [ProximityUxHost-Sharing-Out-TCP-NoScope] => (Allow) %SystemRoot%\system32\proximityuxhost.exe
FirewallRules: [NETDIS-DAS-In-UDP-Active] => (Allow) %SystemRoot%\system32\dashost.exe
FirewallRules: [NETDIS-DAS-In-UDP] => (Allow) %SystemRoot%\system32\dashost.exe
FirewallRules: [PlayTo-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-In-UDP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-In-UDP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-Out-UDP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-Out-UDP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-In-RTSP-NoScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-In-RTSP-LocalSubnetScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [PlayTo-In-RTSP-PlayToScope] => (Allow) %SystemRoot%\system32\mdeserver.exe
FirewallRules: [TPMVSCMGR-Server-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe
FirewallRules: [TPMVSCMGR-Server-Out-TCP-NoScope] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe
FirewallRules: [TPMVSCMGR-Server-In-TCP] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe
FirewallRules: [TPMVSCMGR-Server-Out-TCP] => (Allow) %SystemRoot%\system32\RmtTpmVscMgrSvr.exe
FirewallRules: [{DE6710D6-0029-47D8-895D-6F0D3855F7ED}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D3DD9361-F5F4-4BF1-A9A1-B04F06206893}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D113018D-E9B2-4F6F-9080-20B1944D9B6E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{61912DEC-0692-4E52-A736-4A1EF6BEDF51}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{68DBE704-7231-4203-8F91-2AEE33EC9A78}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{12E33B42-253C-4D4C-9EC3-CB7E16B0CCBC}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{E893ADA3-C1AA-4C2D-B4AC-75A15BAA192B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7199BE3F-A763-4BD4-9737-882A704A10C3}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{9159D662-0C8A-4068-8437-B6D9923C949B}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{BFC881F0-4F6F-4523-B65B-A14281B9CFB8}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{FAB9730D-B1A1-438A-B7F6-B2F4D8C28E8E}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{00F97F5B-EF96-4601-B1EA-B38437D5D88C}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{DD0DE19A-4E66-4D75-8B15-3C3E41CA7C52}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 69094

Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 69094

Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/26/2015 06:29:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l'application défaillante DPAgent.exe, version : 5.4.0.1813, horodatage : 0x5037cf4c
Nom du module défaillant : ptdmlitemanagerdp.dll, version : 7.1.2.0, horodatage : 0x50aa06a8
Code d'exception : 0xc000041d
Décalage d'erreur : 0x0003eb72
ID du processus défaillant : 0x418
Heure de début de l'application défaillante : 0xDPAgent.exe0
Chemin d'accès de l'application défaillante : DPAgent.exe1
Chemin d'accès du module défaillant: DPAgent.exe2
ID de rapport : DPAgent.exe3
Nom complet du package défaillant : DPAgent.exe4
ID de l'application relative au package défaillant : DPAgent.exe5

Error: (04/26/2015 06:29:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l'application défaillante DPAgent.exe, version : 5.4.0.1813, horodatage : 0x5037cf4c
Nom du module défaillant : ptdmlitemanagerdp.dll, version : 7.1.2.0, horodatage : 0x50aa06a8
Code d'exception : 0xc0000005
Décalage d'erreur : 0x0003eb72
ID du processus défaillant : 0x418
Heure de début de l'application défaillante : 0xDPAgent.exe0
Chemin d'accès de l'application défaillante : DPAgent.exe1
Chemin d'accès du module défaillant: DPAgent.exe2
ID de rapport : DPAgent.exe3
Nom complet du package défaillant : DPAgent.exe4
ID de l'application relative au package défaillant : DPAgent.exe5

Error: (04/26/2015 05:43:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l'application défaillante BlueSoleilCS.exe, version : 9.0.716.0, horodatage : 0x5029ea6a
Nom du module défaillant : tl_filter.dll_unloaded, version : 0.0.0.0, horodatage : 0x5029b6ce
Code d'exception : 0xc0000094
Décalage d'erreur : 0x1000d53d
ID du processus défaillant : 0x760
Heure de début de l'application défaillante : 0xBlueSoleilCS.exe0
Chemin d'accès de l'application défaillante : BlueSoleilCS.exe1
Chemin d'accès du module défaillant: BlueSoleilCS.exe2
ID de rapport : BlueSoleilCS.exe3
Nom complet du package défaillant : BlueSoleilCS.exe4
ID de l'application relative au package défaillant : BlueSoleilCS.exe5

Error: (04/26/2015 03:40:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l'application défaillante BlueSoleilCS.exe, version : 9.0.716.0, horodatage : 0x5029ea6a
Nom du module défaillant : tl_filter.dll_unloaded, version : 0.0.0.0, horodatage : 0x5029b6ce
Code d'exception : 0xc0000094
Décalage d'erreur : 0x1000d53d
ID du processus défaillant : 0x778
Heure de début de l'application défaillante : 0xBlueSoleilCS.exe0
Chemin d'accès de l'application défaillante : BlueSoleilCS.exe1
Chemin d'accès du module défaillant: BlueSoleilCS.exe2
ID de rapport : BlueSoleilCS.exe3
Nom complet du package défaillant : BlueSoleilCS.exe4
ID de l'application relative au package défaillant : BlueSoleilCS.exe5

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30781

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30781

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (04/26/2015 05:44:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service BlueSoleilCS s'est terminé de façon inattendue pour la 1ème fois.

Error: (04/26/2015 05:42:18 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: AUTORITE NT)
Description: 0xc000014d0

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Intel(R) Capability Licensing Service Interface s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Service Partage réseau du Lecteur Windows Media s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 30000 millisecondes : Redémarrer le service.

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Management and Security Application User Notification Service s'est terminé de façon inattendue pour la 1ème fois.

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) ME Service s'est terminé de façon inattendue pour la 1ème fois.

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Rapid Storage Technology s'est terminé de façon inattendue pour la 1ème fois.

Error: (04/26/2015 05:41:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service HP Support Assistant Service s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service.

Error: (04/26/2015 05:41:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Windows Search s'est terminé de manière inattendue. Ceci s'est produit 1 fois. L'action corrective suivante va être effectuée dans 30000 millisecondes : Redémarrer le service.

Error: (04/26/2015 05:41:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service HP Software Framework Service s'est terminé de façon inattendue pour la 1ème fois.


Microsoft Office Sessions:
=========================
Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 69094

Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 69094

Error: (04/26/2015 07:11:42 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/26/2015 06:29:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DPAgent.exe5.4.0.18135037cf4cptdmlitemanagerdp.dll7.1.2.050aa06a8c000041d0003eb7241801d08037b0e2b95cc:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exec:\Program Files (x86)\Hewlett-Packard\DeviceAccessManager\ptdmlitemanagerdp.dll6491fb82-ec31-11e4-be7f-1c3e847dc55c

Error: (04/26/2015 06:29:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DPAgent.exe5.4.0.18135037cf4cptdmlitemanagerdp.dll7.1.2.050aa06a8c00000050003eb7241801d08037b0e2b95cc:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exec:\Program Files (x86)\Hewlett-Packard\DeviceAccessManager\ptdmlitemanagerdp.dll63ad16cd-ec31-11e4-be7f-1c3e847dc55c

Error: (04/26/2015 05:43:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BlueSoleilCS.exe9.0.716.05029ea6atl_filter.dll_unloaded0.0.0.05029b6cec00000941000d53d76001d08037adea215fC:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exetl_filter.dll075a49c5-ec2b-11e4-be7f-1c3e847dc55c

Error: (04/26/2015 03:40:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BlueSoleilCS.exe9.0.716.05029ea6atl_filter.dll_unloaded0.0.0.05029b6cec00000941000d53d77801d080268ecb25d3C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exetl_filter.dllddfef70b-ec19-11e4-be7c-1c3e847dc55c

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30781

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30781

Error: (04/26/2015 01:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
Percentage of memory in use: 49%
Total physical RAM: 6021.7 MB
Available physical RAM: 3066.96 MB
Total Pagefile: 10117.7 MB
Available Pagefile: 7316.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:447.75 GB) (Free:254.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32
Drive f: (HP_RECOVERY) (Fixed) (Total:14.37 GB) (Free:2.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A50E1C7D)

Partition: GPT Partition Type.

==================== End Of Log ============================

calice19 · Answer

Le rapport FRST 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2015
Ran by karelle (administrator) on CALICE on 26-04-2015 19:43:02
Running from C:\Users\karelle\Downloads
Loaded Profiles: karelle (Available profiles: karelle & Administrateur)
Platform: Windows 8 (X64) OS Language: Français (France)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\karelle\Downloads\FRST64 (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-20] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2013-05-04] (Intel Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [684064 2012-07-17] (PDF Complete Inc)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-08-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [BtTray] => c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-16] (IVT Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-08-31] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167024 2012-08-31] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-23] (Avast Software s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-3813279913-3536211461-486078071-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8202008 2015-04-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-23] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-23] (Avast Software s.r.o.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-23] (Avast Software s.r.o.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-04-23] (Google Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-10] (Hewlett-Packard)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-04-23] (Google Inc.)
Toolbar: HKU\S-1-5-21-3813279913-3536211461-486078071-1002 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll [2012-08-14] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9
pGoogleUpdate3.dll [2015-04-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9
pGoogleUpdate3.dll [2015-04-23] (Google Inc.)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components
pChromeDPAgent.dll [2012-08-25] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [***@***] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-05-28]
FF HKLM-x32\...\Firefox\Extensions: [***@***] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-23]

Chrome: 
=======
CHR Profile: C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-23]
CHR Extension: (Google Drive) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-23]
CHR Extension: (YouTube) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-23]
CHR Extension: (Google Search) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-23]
CHR Extension: (Google Sheets) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-23]
CHR Extension: (Bookmark Manager) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-23]
CHR Extension: (BrowserV22.04) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhkmcfanijhphphomamdkaejjadkhgn [2015-04-23]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-23]
CHR Extension: (Google Wallet) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions
mmhkkegccagdldgiimedpiccmgmieda [2015-04-23]
CHR Extension: (Gmail) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-23]
CHR HKU\S-1-5-21-3813279913-3536211461-486078071-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [akfphecggdoefopaooikpjihabjbmjea] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-23]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-23] (Avast Software s.r.o.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [488824 2012-08-25] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [477056 2012-11-19] (Hewlett-Packard Company)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-08-29] (Hewlett-Packard Company)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134624 2012-07-17] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2012-09-20] (IDT, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-23] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-23] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-23] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-23] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-23] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-23] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-23] ()
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-20] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [64832 2012-11-09] (Hewlett-Packard Company)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation)
R3 rtbth; C:\Windows\System32\driverstbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-15] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1864328 2012-10-04] ()
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Development Company, L.P.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-26 19:43 - 2015-04-26 19:43 - 00017792 _____ () C:\Users\karelle\Downloads\FRST.txt
2015-04-26 19:42 - 2015-04-26 19:43 - 00000000 ____D () C:\FRST
2015-04-26 19:42 - 2015-04-26 19:42 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (4).exe
2015-04-26 19:37 - 2015-04-26 19:38 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (3).exe
2015-04-26 19:36 - 2015-04-26 19:36 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (2).exe
2015-04-26 19:33 - 2015-04-26 19:33 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (1).exe
2015-04-26 19:30 - 2015-04-26 19:30 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64.exe
2015-04-26 19:11 - 2015-04-26 19:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-5373140.txt
2015-04-26 19:11 - 2015-04-26 19:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-5372734.txt
2015-04-26 18:41 - 2015-04-26 19:13 - 00009398 _____ () C:\Users\karelle\Desktop\ZHPCleaner.txt
2015-04-26 18:28 - 2015-04-26 19:09 - 00000000 ____D () C:\Users\karelle\AppData\Roaming\ZHP
2015-04-26 18:28 - 2015-04-26 18:56 - 00000834 _____ () C:\Users\karelle\Desktop\ZHPCleaner.lnk
2015-04-26 18:28 - 2015-04-26 18:28 - 01811968 _____ () C:\Users\karelle\ZHPCleaner.exe
2015-04-26 18:27 - 2015-04-26 18:27 - 01811968 _____ () C:\Users\karelle\Downloads\ZHPCleaner-2015.4.25.187.exe
2015-04-26 17:45 - 2015-04-26 17:45 - 00000000 ____D () C:\Users\karelle\AppData\Roaming\Google
2015-04-26 17:43 - 2015-04-26 17:43 - 00000117 _____ () C:\WINDOWS\system32
etcfg-83328.txt
2015-04-26 17:41 - 2015-04-26 17:41 - 00000117 _____ () C:\WINDOWS\system32
etcfg-3307765.txt
2015-04-26 16:48 - 2015-04-26 16:48 - 00000117 _____ () C:\WINDOWS\system32
etcfg-94953.txt
2015-04-26 16:46 - 2015-04-26 16:46 - 00000117 _____ () C:\WINDOWS\system32
etcfg-3650437.txt
2015-04-26 16:41 - 2015-04-26 16:41 - 02224640 _____ () C:\Users\karelle\Downloads\adwcleaner_4.202.exe
2015-04-26 15:47 - 2015-04-26 15:47 - 00000117 _____ () C:\WINDOWS\system32
etcfg-98062.txt
2015-04-26 03:03 - 2014-10-09 06:00 - 01519104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-04-26 03:03 - 2014-10-09 06:00 - 01484288 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-04-26 03:03 - 2014-10-09 06:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-04-26 03:03 - 2014-10-09 05:59 - 01195520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-04-26 03:03 - 2014-10-09 05:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-04-26 03:03 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-04-26 03:03 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-04-25 20:34 - 2015-04-26 16:47 - 00004174 _____ () C:\WINDOWS\PFRO.log
2015-04-25 20:34 - 2015-04-25 20:34 - 00291960 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-25 20:30 - 2015-04-25 20:30 - 00000136 _____ () C:\WINDOWS\system32
etcfg-190875.txt
2015-04-25 20:30 - 2015-04-25 20:30 - 00000134 _____ () C:\WINDOWS\system32
etcfg-190625.txt
2015-04-25 20:30 - 2015-04-25 20:30 - 00000134 _____ () C:\WINDOWS\system32
etcfg-188875.txt
2015-04-25 20:30 - 2015-04-14 00:07 - 00791520 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-25 20:30 - 2015-04-14 00:07 - 00177632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-25 19:54 - 2015-04-25 19:59 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-25 19:54 - 2015-04-25 19:54 - 00000319 _____ () C:\WINDOWS\system32
etcfg-127134984.txt
2015-04-25 19:54 - 2015-04-25 19:54 - 00000117 _____ () C:\WINDOWS\system32
etcfg-127133953.txt
2015-04-25 19:54 - 2015-04-01 11:16 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-25 19:31 - 2015-04-25 19:31 - 00000000 ___HD () C:\ProgramData\CanonBJ
2015-04-25 19:30 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMAU.DLL
2015-04-25 17:31 - 2015-03-23 07:19 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-25 17:31 - 2015-03-23 00:04 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-25 17:31 - 2014-12-03 03:48 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-25 17:29 - 2015-03-17 09:00 - 06971712 _____ (Microsoft Corporation) C:\WINDOWS\system32
toskrnl.exe
2015-04-25 17:29 - 2015-03-17 08:52 - 01822696 _____ (Microsoft Corporation) C:\WINDOWS\system32
tdll.dll
2015-04-25 17:29 - 2015-03-17 06:45 - 01409496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
tdll.dll
2015-04-25 17:29 - 2015-03-06 09:39 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-04-25 17:29 - 2015-03-06 07:48 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-04-25 17:29 - 2015-03-04 09:26 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoUpdate.exe
2015-04-25 17:29 - 2015-03-04 09:26 - 00467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2015-04-25 17:29 - 2015-03-04 09:26 - 00011105 _____ () C:\WINDOWS\system32\AutoconfigV2.cab
2015-04-25 17:29 - 2015-03-04 08:41 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-04-25 17:29 - 2015-03-04 08:41 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-25 17:29 - 2015-03-04 06:53 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-04-25 17:29 - 2015-03-04 06:53 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-25 17:29 - 2015-02-03 01:18 - 00569712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-04-25 17:29 - 2015-01-15 13:44 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2015-04-25 17:29 - 2015-01-15 13:43 - 01282560 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-04-25 17:29 - 2015-01-15 12:00 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2015-04-25 17:29 - 2015-01-15 11:38 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-04-25 17:29 - 2015-01-15 11:09 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-04-25 17:29 - 2014-10-22 03:01 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-04-25 17:29 - 2014-10-22 03:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-25 17:24 - 2015-04-25 17:24 - 00000117 _____ () C:\WINDOWS\system32
etcfg-118168109.txt
2015-04-25 14:11 - 2015-04-25 14:11 - 00000627 _____ () C:\WINDOWS\setupact.log
2015-04-25 14:11 - 2015-04-25 14:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-106559859.txt
2015-04-25 14:11 - 2015-04-25 14:11 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-04-25 14:11 - 2015-04-25 14:11 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-25 11:06 - 2015-01-09 08:43 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-04-25 11:06 - 2015-01-09 07:03 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-04-25 11:06 - 2015-01-09 01:52 - 00478296 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-04-25 11:06 - 2015-01-09 01:52 - 00478296 _____ () C:\WINDOWS\system32\locale.nls
2015-04-25 10:32 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-04-25 10:32 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-04-25 10:16 - 2015-04-25 10:16 - 00000117 _____ () C:\WINDOWS\system32
etcfg-92446109.txt
2015-04-25 10:16 - 2015-04-25 10:16 - 00000117 _____ () C:\WINDOWS\system32
etcfg-92445328.txt
2015-04-24 12:44 - 2015-04-24 12:44 - 00000117 _____ () C:\WINDOWS\system32
etcfg-14928953.txt
2015-04-24 12:44 - 2015-04-24 12:44 - 00000117 _____ () C:\WINDOWS\system32
etcfg-14928828.txt
2015-04-24 08:13 - 2015-04-24 08:13 - 00000117 _____ () C:\WINDOWS\system32
etcfg-497359.txt
2015-04-24 08:06 - 2015-04-24 08:06 - 00000117 _____ () C:\WINDOWS\system32
etcfg-77546.txt
2015-04-23 21:32 - 2014-09-25 01:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
cryptsslp.dll
2015-04-23 21:32 - 2014-09-25 01:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32
cryptsslp.dll
2015-04-23 21:30 - 2014-11-05 08:40 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-04-23 21:30 - 2014-11-05 08:39 - 01024512 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-04-23 21:30 - 2014-11-01 08:28 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-04-23 21:30 - 2014-10-29 16:21 - 00499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-04-23 21:30 - 2014-08-28 08:01 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-04-23 21:27 - 2014-07-24 05:33 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-04-23 21:27 - 2014-07-24 05:33 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-04-23 21:23 - 2014-10-09 05:59 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-04-23 21:23 - 2014-10-09 05:59 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-04-23 21:23 - 2014-10-09 05:58 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-04-23 21:23 - 2014-09-22 07:38 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-04-23 21:23 - 2014-09-22 05:56 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-04-23 21:22 - 2014-06-05 03:12 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2015-04-23 21:22 - 2014-06-04 01:12 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2015-04-23 21:21 - 2014-09-13 08:24 - 02233152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers	cpip.sys
2015-04-23 21:21 - 2014-09-03 04:48 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64pchttp.dll
2015-04-23 21:21 - 2014-09-03 04:22 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32pchttp.dll
2015-04-23 21:21 - 2014-08-29 06:17 - 02043392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2015-04-23 21:21 - 2014-08-29 06:17 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2015-04-23 21:21 - 2014-08-29 06:04 - 02837504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2015-04-23 21:21 - 2014-08-29 06:04 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2015-04-23 21:21 - 2014-08-28 08:04 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2015-04-23 21:21 - 2014-08-28 08:04 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll
2015-04-23 21:21 - 2014-07-24 15:12 - 00328512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2015-04-23 21:19 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2015-04-23 21:19 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2015-04-23 21:19 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2015-04-23 21:19 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2015-04-23 21:18 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-04-23 21:18 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2015-04-23 21:18 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-04-23 21:16 - 2014-07-07 07:53 - 01125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2015-04-23 21:16 - 2014-07-07 07:52 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32	ermsrv.dll
2015-04-23 21:16 - 2014-07-07 07:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2015-04-23 21:16 - 2014-07-07 07:51 - 05982208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-04-23 21:16 - 2014-07-07 06:01 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2015-04-23 21:16 - 2014-07-07 06:01 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2015-04-23 21:16 - 2014-07-07 06:00 - 05095424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-04-23 21:16 - 2014-07-07 05:59 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aaclient.dll
2015-04-23 21:15 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-04-23 21:15 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2015-04-23 21:15 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2015-04-23 21:15 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2015-04-23 21:15 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2015-04-23 21:15 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2015-04-23 21:15 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32	askhost.exe
2015-04-23 21:15 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32	askhostex.exe
2015-04-23 21:15 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll
2015-04-23 21:14 - 2013-02-02 12:54 - 01933544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
tfs.sys
2015-04-23 21:14 - 2013-02-02 12:28 - 00993512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
dis.sys
2015-04-23 21:14 - 2013-02-02 10:40 - 10792448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-04-23 21:14 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 13643264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2015-04-23 21:14 - 2013-02-02 10:21 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32
etprofmsvc.dll
2015-04-23 21:14 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-04-23 21:13 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-04-23 21:13 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2015-04-23 21:13 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2015-04-23 21:13 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2015-04-23 21:13 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-04-23 21:13 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2015-04-23 21:13 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2015-04-23 21:13 - 2013-02-02 13:19 - 00329960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2015-04-23 21:13 - 2013-02-02 13:19 - 00061672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2015-04-23 21:13 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	asklist.exe
2015-04-23 21:13 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	askkill.exe
2015-04-23 21:13 - 2013-02-02 10:39 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
etprofm.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
pmproxy.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
lmproxy.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
lmsprep.dll
2015-04-23 21:13 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32	askkill.exe
2015-04-23 21:13 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32	asklist.exe
2015-04-23 21:13 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2015-04-23 21:13 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2015-04-23 21:13 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2015-04-23 21:13 - 2013-02-02 10:22 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-04-23 21:13 - 2013-02-02 10:21 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2015-04-23 21:13 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2015-04-23 21:13 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2015-04-23 21:13 - 2013-02-02 09:25 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2015-04-23 21:13 - 2012-11-27 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2015-04-23 21:13 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2015-04-23 21:13 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2015-04-23 21:09 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2015-04-23 21:08 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2015-04-23 21:03 - 2015-03-10 07:27 - 19292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-23 21:03 - 2015-03-10 05:49 - 14373376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 01409024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 15409152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 02864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 01763328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-23 21:02 - 2015-03-10 05:48 - 13767680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-23 21:02 - 2015-02-23 12:52 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-23 21:02 - 2015-02-23 12:51 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-04-23 21:02 - 2015-02-23 12:51 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-04-23 21:02 - 2015-02-23 12:51 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 02656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-04-23 21:02 - 2015-02-23 12:49 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-04-23 21:02 - 2015-02-23 11:17 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-04-23 21:02 - 2015-02-23 11:15 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2015-04-23 21:02 - 2015-02-23 10:51 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-04-23 21:02 - 2015-02-21 07:31 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2015-04-23 21:02 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-04-23 21:02 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-04-23 21:02 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-04-23 21:02 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-04-23 21:02 - 2015-02-21 07:07 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2015-04-23 21:02 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-04-23 21:02 - 2015-02-21 05:00 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-04-23 21:01 - 2014-10-11 09:45 - 10115072 _____ (Microsoft Corporation) C:\WINDOWS\system32	winui.dll
2015-04-23 21:01 - 2014-10-11 09:44 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-04-23 21:01 - 2014-10-11 09:44 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2015-04-23 21:01 - 2014-10-11 09:43 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-04-23 21:01 - 2014-10-11 07:58 - 08858624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	winui.dll
2015-04-23 21:01 - 2014-10-11 07:57 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-04-23 21:01 - 2014-10-11 07:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2015-04-23 21:01 - 2014-10-11 07:56 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-04-23 21:01 - 2014-06-13 01:34 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-04-23 21:01 - 2014-06-13 01:29 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-04-23 20:59 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2015-04-23 20:59 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2015-04-23 20:59 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2015-04-23 20:59 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2015-04-23 20:59 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2015-04-23 20:59 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-04-23 20:59 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2015-04-23 20:57 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32	zres.dll
2015-04-23 20:57 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	zres.dll
2015-04-23 20:55 - 2015-02-24 09:58 - 00861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-23 20:55 - 2014-08-09 10:30 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-04-23 20:55 - 2014-08-09 10:29 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32	ssdisai.dll
2015-04-23 20:55 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-04-23 20:55 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-04-23 20:55 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2015-04-23 20:55 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-04-23 20:55 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2015-04-23 20:54 - 2014-11-15 08:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-23 20:54 - 2014-11-15 07:13 - 03286016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 01623552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-23 20:54 - 2014-11-15 07:12 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-23 20:54 - 2014-11-15 05:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-23 20:54 - 2014-11-15 05:53 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-23 20:54 - 2014-11-15 05:53 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-23 20:54 - 2014-11-15 05:53 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-23 20:54 - 2014-02-06 01:41 - 01257984 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2015-04-23 20:54 - 2014-02-06 01:19 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2015-04-23 20:54 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-04-23 20:54 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2015-04-23 20:54 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2015-04-23 20:54 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-04-23 20:54 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2015-04-23 20:54 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2015-04-23 20:54 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2015-04-23 20:54 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-04-23 20:54 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-04-23 20:54 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2015-04-23 20:53 - 2014-12-08 08:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-04-23 20:53 - 2014-12-08 07:04 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-04-23 20:52 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2015-04-23 20:52 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2015-04-23 20:52 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2015-04-23 20:52 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2015-04-23 20:52 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2015-04-23 20:52 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2015-04-23 20:52 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2015-04-23 20:52 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2015-04-23 20:52 - 2012-10-11 07:19 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2015-04-23 20:51 - 2014-12-19 08:48 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-04-23 20:51 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-04-23 20:51 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2015-04-23 20:51 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2015-04-23 20:51 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2015-04-23 20:51 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-04-23 20:51 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-04-23 20:51 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-23 20:51 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-04-23 20:51 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-04-23 20:50 - 2015-01-29 10:05 - 01627648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-04-23 20:50 - 2015-01-29 08:19 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-04-23 20:49 - 2015-01-24 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-04-23 20:49 - 2015-01-24 08:42 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-04-23 20:49 - 2015-01-24 07:00 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-04-23 20:49 - 2015-01-24 07:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2015-04-23 20:49 - 2014-12-06 09:53 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32
csi.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32
lasvc.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32
laapi.dll
2015-04-23 20:49 - 2014-12-06 09:50 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-04-23 20:49 - 2014-12-06 08:09 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
laapi.dll
2015-04-23 20:49 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-04-23 20:49 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-04-23 20:49 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-04-23 20:49 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-04-23 20:49 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2015-04-23 20:49 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2015-04-23 20:49 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2015-04-23 20:49 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2015-04-23 20:49 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2015-04-23 20:49 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2015-04-23 20:49 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2015-04-23 20:49 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2015-04-23 20:49 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2015-04-23 20:49 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2015-04-23 20:49 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2015-04-23 20:49 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2015-04-23 20:49 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2015-04-23 20:48 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-23 20:48 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-23 20:48 - 2015-02-20 15:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-04-23 20:48 - 2015-02-20 13:56 - 00366592 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-04-23 20:48 - 2015-02-20 10:10 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-04-23 20:48 - 2015-02-20 09:24 - 00304128 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-04-23 20:48 - 2014-12-06 09:53 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-04-23 20:48 - 2014-12-06 09:51 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-04-23 20:48 - 2014-12-06 09:51 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-04-23 20:48 - 2014-12-06 08:10 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-04-23 20:48 - 2014-12-06 08:10 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-04-23 20:48 - 2014-12-06 08:09 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-04-23 20:48 - 2014-10-03 03:21 - 00522728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-04-23 20:48 - 2014-10-03 00:29 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-04-23 20:48 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2015-04-23 20:48 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2015-04-23 20:48 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-23 20:48 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-04-23 20:48 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-04-23 20:48 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-04-23 20:48 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-04-23 20:48 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-04-23 20:48 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-04-23 20:48 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-04-23 20:48 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-04-23 20:48 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-04-23 20:48 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-04-23 20:48 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-04-23 20:47 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-04-23 20:47 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2015-04-23 20:47 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-04-23 20:46 - 2015-03-04 09:29 - 00361280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-23 20:46 - 2015-03-04 08:39 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-23 20:46 - 2015-03-04 06:52 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-23 20:46 - 2014-08-01 01:40 - 01287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-04-23 20:46 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-04-23 20:46 - 2013-02-06 00:31 - 00622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2015-04-23 20:46 - 2013-02-06 00:29 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-04-23 20:46 - 2013-02-06 00:28 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2015-04-23 20:46 - 2013-02-06 00:28 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-04-23 20:46 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-04-23 20:46 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-04-23 20:43 - 2015-03-06 09:39 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-04-23 20:43 - 2015-03-06 07:48 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-04-23 20:43 - 2015-02-26 06:35 - 04063232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-04-23 20:43 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32dpudd.dll
2015-04-23 20:43 - 2014-10-11 09:44 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32dpcorets.dll
2015-04-23 20:43 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2015-04-23 20:43 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2015-04-23 20:43 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2015-04-23 20:43 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2015-04-23 20:43 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2015-04-23 20:43 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2015-04-23 20:43 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2015-04-23 20:43 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2015-04-23 20:43 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2015-04-23 20:43 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Driversdpvideominiport.sys
2015-04-23 20:43 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32fxvmt.dll
2015-04-23 20:41 - 2014-12-19 06:35 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-04-23 20:41 - 2014-12-18 10:51 - 00096576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-04-23 20:41 - 2014-12-18 08:52 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\system32
shwfp.dll
2015-04-23 20:41 - 2014-12-18 08:51 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-04-23 20:41 - 2014-12-18 08:50 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-04-23 20:41 - 2014-12-18 08:20 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
shwfp.dll
2015-04-23 20:41 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-04-23 20:41 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-04-23 20:41 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-04-23 20:41 - 2013-06-10 2

lilidurhone · Answer

Héberge les 2 rapports

calice19 · Answer

Le e FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2015
Ran by karelle (administrator) on CALICE on 26-04-2015 19:43:02
Running from C:\Users\karelle\Downloads
Loaded Profiles: karelle (Available profiles: karelle & Administrateur)
Platform: Windows 8 (X64) OS Language: Français (France)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\karelle\Downloads\FRST64 (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-20] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2013-05-04] (Intel Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [684064 2012-07-17] (PDF Complete Inc)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-08-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [BtTray] => c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-16] (IVT Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-08-31] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167024 2012-08-31] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-23] (Avast Software s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-3813279913-3536211461-486078071-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8202008 2015-04-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-23] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-23] (Avast Software s.r.o.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-23] (Avast Software s.r.o.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-04-23] (Google Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-10] (Hewlett-Packard)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-04-23] (Google Inc.)
Toolbar: HKU\S-1-5-21-3813279913-3536211461-486078071-1002 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-04-23] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll [2012-08-14] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9
pGoogleUpdate3.dll [2015-04-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9
pGoogleUpdate3.dll [2015-04-23] (Google Inc.)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components
pChromeDPAgent.dll [2012-08-25] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [***@***] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-05-28]
FF HKLM-x32\...\Firefox\Extensions: [***@***] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-23]

Chrome: 
=======
CHR Profile: C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-23]
CHR Extension: (Google Drive) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-23]
CHR Extension: (YouTube) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-23]
CHR Extension: (Google Search) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-23]
CHR Extension: (Google Sheets) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-23]
CHR Extension: (Bookmark Manager) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-23]
CHR Extension: (BrowserV22.04) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhkmcfanijhphphomamdkaejjadkhgn [2015-04-23]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-23]
CHR Extension: (Google Wallet) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions
mmhkkegccagdldgiimedpiccmgmieda [2015-04-23]
CHR Extension: (Gmail) - C:\Users\karelle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-23]
CHR HKU\S-1-5-21-3813279913-3536211461-486078071-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [akfphecggdoefopaooikpjihabjbmjea] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-23]
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-23] (Avast Software s.r.o.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [488824 2012-08-25] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [477056 2012-11-19] (Hewlett-Packard Company)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-08-29] (Hewlett-Packard Company)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134624 2012-07-17] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2012-09-20] (IDT, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16024 2015-01-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-23] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-23] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-23] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-23] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-23] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-23] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-23] ()
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-20] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [64832 2012-11-09] (Hewlett-Packard Company)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation)
R3 rtbth; C:\Windows\System32\driverstbth.sys [1204424 2013-12-02] (Ralink Technology, Corp.)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-15] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1864328 2012-10-04] ()
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Development Company, L.P.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-26 19:43 - 2015-04-26 19:43 - 00017792 _____ () C:\Users\karelle\Downloads\FRST.txt
2015-04-26 19:42 - 2015-04-26 19:43 - 00000000 ____D () C:\FRST
2015-04-26 19:42 - 2015-04-26 19:42 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (4).exe
2015-04-26 19:37 - 2015-04-26 19:38 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (3).exe
2015-04-26 19:36 - 2015-04-26 19:36 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (2).exe
2015-04-26 19:33 - 2015-04-26 19:33 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64 (1).exe
2015-04-26 19:30 - 2015-04-26 19:30 - 02101248 _____ (Farbar) C:\Users\karelle\Downloads\FRST64.exe
2015-04-26 19:11 - 2015-04-26 19:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-5373140.txt
2015-04-26 19:11 - 2015-04-26 19:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-5372734.txt
2015-04-26 18:41 - 2015-04-26 19:13 - 00009398 _____ () C:\Users\karelle\Desktop\ZHPCleaner.txt
2015-04-26 18:28 - 2015-04-26 19:09 - 00000000 ____D () C:\Users\karelle\AppData\Roaming\ZHP
2015-04-26 18:28 - 2015-04-26 18:56 - 00000834 _____ () C:\Users\karelle\Desktop\ZHPCleaner.lnk
2015-04-26 18:28 - 2015-04-26 18:28 - 01811968 _____ () C:\Users\karelle\ZHPCleaner.exe
2015-04-26 18:27 - 2015-04-26 18:27 - 01811968 _____ () C:\Users\karelle\Downloads\ZHPCleaner-2015.4.25.187.exe
2015-04-26 17:45 - 2015-04-26 17:45 - 00000000 ____D () C:\Users\karelle\AppData\Roaming\Google
2015-04-26 17:43 - 2015-04-26 17:43 - 00000117 _____ () C:\WINDOWS\system32
etcfg-83328.txt
2015-04-26 17:41 - 2015-04-26 17:41 - 00000117 _____ () C:\WINDOWS\system32
etcfg-3307765.txt
2015-04-26 16:48 - 2015-04-26 16:48 - 00000117 _____ () C:\WINDOWS\system32
etcfg-94953.txt
2015-04-26 16:46 - 2015-04-26 16:46 - 00000117 _____ () C:\WINDOWS\system32
etcfg-3650437.txt
2015-04-26 16:41 - 2015-04-26 16:41 - 02224640 _____ () C:\Users\karelle\Downloads\adwcleaner_4.202.exe
2015-04-26 15:47 - 2015-04-26 15:47 - 00000117 _____ () C:\WINDOWS\system32
etcfg-98062.txt
2015-04-26 03:03 - 2014-10-09 06:00 - 01519104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-04-26 03:03 - 2014-10-09 06:00 - 01484288 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-04-26 03:03 - 2014-10-09 06:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-04-26 03:03 - 2014-10-09 05:59 - 01195520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-04-26 03:03 - 2014-10-09 05:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-04-26 03:03 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-04-26 03:03 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-04-25 20:34 - 2015-04-26 16:47 - 00004174 _____ () C:\WINDOWS\PFRO.log
2015-04-25 20:34 - 2015-04-25 20:34 - 00291960 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-25 20:30 - 2015-04-25 20:30 - 00000136 _____ () C:\WINDOWS\system32
etcfg-190875.txt
2015-04-25 20:30 - 2015-04-25 20:30 - 00000134 _____ () C:\WINDOWS\system32
etcfg-190625.txt
2015-04-25 20:30 - 2015-04-25 20:30 - 00000134 _____ () C:\WINDOWS\system32
etcfg-188875.txt
2015-04-25 20:30 - 2015-04-14 00:07 - 00791520 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-25 20:30 - 2015-04-14 00:07 - 00177632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-04-25 20:25 - 2015-04-25 20:25 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-25 19:54 - 2015-04-25 19:59 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-25 19:54 - 2015-04-25 19:54 - 00000319 _____ () C:\WINDOWS\system32
etcfg-127134984.txt
2015-04-25 19:54 - 2015-04-25 19:54 - 00000117 _____ () C:\WINDOWS\system32
etcfg-127133953.txt
2015-04-25 19:54 - 2015-04-01 11:16 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-25 19:31 - 2015-04-25 19:31 - 00000000 ___HD () C:\ProgramData\CanonBJ
2015-04-25 19:30 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMAU.DLL
2015-04-25 17:31 - 2015-03-23 07:19 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-25 17:31 - 2015-03-23 07:17 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-25 17:31 - 2015-03-23 00:04 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-25 17:31 - 2014-12-03 03:48 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-25 17:29 - 2015-03-17 09:00 - 06971712 _____ (Microsoft Corporation) C:\WINDOWS\system32
toskrnl.exe
2015-04-25 17:29 - 2015-03-17 08:52 - 01822696 _____ (Microsoft Corporation) C:\WINDOWS\system32
tdll.dll
2015-04-25 17:29 - 2015-03-17 06:45 - 01409496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
tdll.dll
2015-04-25 17:29 - 2015-03-06 09:39 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-04-25 17:29 - 2015-03-06 07:48 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-04-25 17:29 - 2015-03-04 09:26 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AutoUpdate.exe
2015-04-25 17:29 - 2015-03-04 09:26 - 00467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2015-04-25 17:29 - 2015-03-04 09:26 - 00011105 _____ () C:\WINDOWS\system32\AutoconfigV2.cab
2015-04-25 17:29 - 2015-03-04 08:41 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-04-25 17:29 - 2015-03-04 08:41 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-25 17:29 - 2015-03-04 06:53 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-04-25 17:29 - 2015-03-04 06:53 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-25 17:29 - 2015-02-03 01:18 - 00569712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-04-25 17:29 - 2015-01-15 13:44 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2015-04-25 17:29 - 2015-01-15 13:43 - 01282560 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-04-25 17:29 - 2015-01-15 12:00 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2015-04-25 17:29 - 2015-01-15 11:38 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-04-25 17:29 - 2015-01-15 11:09 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-04-25 17:29 - 2014-10-22 03:01 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-04-25 17:29 - 2014-10-22 03:00 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-25 17:24 - 2015-04-25 17:24 - 00000117 _____ () C:\WINDOWS\system32
etcfg-118168109.txt
2015-04-25 14:11 - 2015-04-25 14:11 - 00000627 _____ () C:\WINDOWS\setupact.log
2015-04-25 14:11 - 2015-04-25 14:11 - 00000117 _____ () C:\WINDOWS\system32
etcfg-106559859.txt
2015-04-25 14:11 - 2015-04-25 14:11 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-04-25 14:11 - 2015-04-25 14:11 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-25 11:06 - 2015-01-09 08:43 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-04-25 11:06 - 2015-01-09 07:03 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-04-25 11:06 - 2015-01-09 01:52 - 00478296 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-04-25 11:06 - 2015-01-09 01:52 - 00478296 _____ () C:\WINDOWS\system32\locale.nls
2015-04-25 10:32 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-04-25 10:32 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-04-25 10:16 - 2015-04-25 10:16 - 00000117 _____ () C:\WINDOWS\system32
etcfg-92446109.txt
2015-04-25 10:16 - 2015-04-25 10:16 - 00000117 _____ () C:\WINDOWS\system32
etcfg-92445328.txt
2015-04-24 12:44 - 2015-04-24 12:44 - 00000117 _____ () C:\WINDOWS\system32
etcfg-14928953.txt
2015-04-24 12:44 - 2015-04-24 12:44 - 00000117 _____ () C:\WINDOWS\system32
etcfg-14928828.txt
2015-04-24 08:13 - 2015-04-24 08:13 - 00000117 _____ () C:\WINDOWS\system32
etcfg-497359.txt
2015-04-24 08:06 - 2015-04-24 08:06 - 00000117 _____ () C:\WINDOWS\system32
etcfg-77546.txt
2015-04-23 21:32 - 2014-09-25 01:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
cryptsslp.dll
2015-04-23 21:32 - 2014-09-25 01:01 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32
cryptsslp.dll
2015-04-23 21:30 - 2014-11-05 08:40 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-04-23 21:30 - 2014-11-05 08:39 - 01024512 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-04-23 21:30 - 2014-11-01 08:28 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-04-23 21:30 - 2014-10-29 16:21 - 00499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-04-23 21:30 - 2014-08-28 08:01 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-04-23 21:27 - 2014-07-24 05:33 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-04-23 21:27 - 2014-07-24 05:33 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-04-23 21:23 - 2014-10-09 05:59 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-04-23 21:23 - 2014-10-09 05:59 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-04-23 21:23 - 2014-10-09 05:58 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-04-23 21:23 - 2014-09-22 07:38 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-04-23 21:23 - 2014-09-22 05:56 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-04-23 21:22 - 2014-06-05 03:12 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2015-04-23 21:22 - 2014-06-04 01:12 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2015-04-23 21:21 - 2014-09-13 08:24 - 02233152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers	cpip.sys
2015-04-23 21:21 - 2014-09-03 04:48 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64pchttp.dll
2015-04-23 21:21 - 2014-09-03 04:22 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32pchttp.dll
2015-04-23 21:21 - 2014-08-29 06:17 - 02043392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2015-04-23 21:21 - 2014-08-29 06:17 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2015-04-23 21:21 - 2014-08-29 06:04 - 02837504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2015-04-23 21:21 - 2014-08-29 06:04 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2015-04-23 21:21 - 2014-08-28 08:04 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2015-04-23 21:21 - 2014-08-28 08:04 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSTIFF.dll
2015-04-23 21:21 - 2014-08-28 07:59 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXST30.dll
2015-04-23 21:21 - 2014-07-24 15:12 - 00328512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2015-04-23 21:19 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2015-04-23 21:19 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2015-04-23 21:19 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2015-04-23 21:19 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2015-04-23 21:18 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-04-23 21:18 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2015-04-23 21:18 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-04-23 21:16 - 2014-07-07 07:53 - 01125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2015-04-23 21:16 - 2014-07-07 07:52 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32	ermsrv.dll
2015-04-23 21:16 - 2014-07-07 07:52 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2015-04-23 21:16 - 2014-07-07 07:51 - 05982208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-04-23 21:16 - 2014-07-07 06:01 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2015-04-23 21:16 - 2014-07-07 06:01 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2015-04-23 21:16 - 2014-07-07 06:00 - 05095424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-04-23 21:16 - 2014-07-07 05:59 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aaclient.dll
2015-04-23 21:15 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-04-23 21:15 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2015-04-23 21:15 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2015-04-23 21:15 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2015-04-23 21:15 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2015-04-23 21:15 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2015-04-23 21:15 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2015-04-23 21:15 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2015-04-23 21:15 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32	askhost.exe
2015-04-23 21:15 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32	askhostex.exe
2015-04-23 21:15 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll
2015-04-23 21:14 - 2013-02-02 12:54 - 01933544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
tfs.sys
2015-04-23 21:14 - 2013-02-02 12:28 - 00993512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
dis.sys
2015-04-23 21:14 - 2013-02-02 10:40 - 10792448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-04-23 21:14 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 13643264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-04-23 21:14 - 2013-02-02 10:23 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2015-04-23 21:14 - 2013-02-02 10:21 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32
etprofmsvc.dll
2015-04-23 21:14 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-04-23 21:13 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-04-23 21:13 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2015-04-23 21:13 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2015-04-23 21:13 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2015-04-23 21:13 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-04-23 21:13 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2015-04-23 21:13 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2015-04-23 21:13 - 2013-02-02 13:19 - 00329960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2015-04-23 21:13 - 2013-02-02 13:19 - 00061672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2015-04-23 21:13 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2015-04-23 21:13 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	asklist.exe
2015-04-23 21:13 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	askkill.exe
2015-04-23 21:13 - 2013-02-02 10:39 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
etprofm.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
pmproxy.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
lmproxy.dll
2015-04-23 21:13 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
lmsprep.dll
2015-04-23 21:13 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32	askkill.exe
2015-04-23 21:13 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32	asklist.exe
2015-04-23 21:13 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2015-04-23 21:13 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2015-04-23 21:13 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2015-04-23 21:13 - 2013-02-02 10:22 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-04-23 21:13 - 2013-02-02 10:21 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2015-04-23 21:13 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2015-04-23 21:13 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2015-04-23 21:13 - 2013-02-02 09:25 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2015-04-23 21:13 - 2012-11-27 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2015-04-23 21:13 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2015-04-23 21:13 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2015-04-23 21:09 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2015-04-23 21:08 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2015-04-23 21:03 - 2015-03-10 07:27 - 19292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-23 21:03 - 2015-03-10 05:49 - 14373376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 01409024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-23 21:02 - 2015-03-10 07:28 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 15409152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-23 21:02 - 2015-03-10 07:27 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 02864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 01763328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-23 21:02 - 2015-03-10 05:49 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-23 21:02 - 2015-03-10 05:48 - 13767680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-23 21:02 - 2015-02-23 12:52 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-23 21:02 - 2015-02-23 12:51 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-04-23 21:02 - 2015-02-23 12:51 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-04-23 21:02 - 2015-02-23 12:51 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 02656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-04-23 21:02 - 2015-02-23 12:50 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-04-23 21:02 - 2015-02-23 12:49 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-04-23 21:02 - 2015-02-23 11:17 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-04-23 21:02 - 2015-02-23 11:15 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2015-04-23 21:02 - 2015-02-23 10:51 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-04-23 21:02 - 2015-02-21 07:31 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-04-23 21:02 - 2015-02-21 07:30 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2015-04-23 21:02 - 2015-02-21 07:29 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-04-23 21:02 - 2015-02-21 07:29 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-04-23 21:02 - 2015-02-21 07:29 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-04-23 21:02 - 2015-02-21 07:09 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-04-23 21:02 - 2015-02-21 07:07 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2015-04-23 21:02 - 2015-02-21 06:42 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-04-23 21:02 - 2015-02-21 05:00 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-04-23 21:01 - 2014-10-11 09:45 - 10115072 _____ (Microsoft Corporation) C:\WINDOWS\system32	winui.dll
2015-04-23 21:01 - 2014-10-11 09:44 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-04-23 21:01 - 2014-10-11 09:44 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2015-04-23 21:01 - 2014-10-11 09:43 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-04-23 21:01 - 2014-10-11 07:58 - 08858624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	winui.dll
2015-04-23 21:01 - 2014-10-11 07:57 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-04-23 21:01 - 2014-10-11 07:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2015-04-23 21:01 - 2014-10-11 07:56 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-04-23 21:01 - 2014-06-13 01:34 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-04-23 21:01 - 2014-06-13 01:29 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-04-23 20:59 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2015-04-23 20:59 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2015-04-23 20:59 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2015-04-23 20:59 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2015-04-23 20:59 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2015-04-23 20:59 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2015-04-23 20:59 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-04-23 20:59 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2015-04-23 20:57 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32	zres.dll
2015-04-23 20:57 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64	zres.dll
2015-04-23 20:55 - 2015-02-24 09:58 - 00861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-23 20:55 - 2014-08-09 10:30 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-04-23 20:55 - 2014-08-09 10:29 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32	ssdisai.dll
2015-04-23 20:55 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-04-23 20:55 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-04-23 20:55 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2015-04-23 20:55 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2015-04-23 20:55 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2015-04-23 20:54 - 2014-11-15 08:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-23 20:54 - 2014-11-15 07:13 - 03286016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 01623552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-23 20:54 - 2014-11-15 07:13 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-23 20:54 - 2014-11-15 07:12 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-23 20:54 - 2014-11-15 05:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-23 20:54 - 2014-11-15 05:53 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-23 20:54 - 2014-11-15 05:53 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-23 20:54 - 2014-11-15 05:53 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-23 20:54 - 2014-02-06 01:41 - 01257984 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2015-04-23 20:54 - 2014-02-06 01:19 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2015-04-23 20:54 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-04-23 20:54 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2015-04-23 20:54 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2015-04-23 20:54 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-04-23 20:54 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2015-04-23 20:54 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2015-04-23 20:54 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2015-04-23 20:54 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2015-04-23 20:54 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-04-23 20:54 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-04-23 20:54 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2015-04-23 20:53 - 2014-12-08 08:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-04-23 20:53 - 2014-12-08 07:04 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-04-23 20:52 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2015-04-23 20:52 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2015-04-23 20:52 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2015-04-23 20:52 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2015-04-23 20:52 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2015-04-23 20:52 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2015-04-23 20:52 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2015-04-23 20:52 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2015-04-23 20:52 - 2012-10-11 07:19 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2015-04-23 20:51 - 2014-12-19 08:48 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-04-23 20:51 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-04-23 20:51 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2015-04-23 20:51 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2015-04-23 20:51 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2015-04-23 20:51 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-04-23 20:51 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-04-23 20:51 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-23 20:51 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-04-23 20:51 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-04-23 20:50 - 2015-01-29 10:05 - 01627648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-04-23 20:50 - 2015-01-29 08:19 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-04-23 20:49 - 2015-01-24 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-04-23 20:49 - 2015-01-24 08:42 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-04-23 20:49 - 2015-01-24 07:00 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-04-23 20:49 - 2015-01-24 07:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2015-04-23 20:49 - 2014-12-06 09:53 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32
csi.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32
lasvc.dll
2015-04-23 20:49 - 2014-12-06 09:52 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32
laapi.dll
2015-04-23 20:49 - 2014-12-06 09:50 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-04-23 20:49 - 2014-12-06 08:09 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
laapi.dll
2015-04-23 20:49 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-04-23 20:49 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-04-23 20:49 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-04-23 20:49 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-04-23 20:49 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2015-04-23 20:49 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2015-04-23 20:49 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2015-04-23 20:49 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2015-04-23 20:49 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2015-04-23 20:49 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2015-04-23 20:49 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2015-04-23 20:49 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2015-04-23 20:49 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2015-04-23 20:49 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2015-04-23 20:49 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2015-04-23 20:49 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2015-04-23 20:49 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2015-04-23 20:49 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2015-04-23 20:48 - 2015-03-14 10:07 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-23 20:48 - 2015-03-14 08:33 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-23 20:48 - 2015-02-20 15:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-04-23 20:48 - 2015-02-20 13:56 - 00366592 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-04-23 20:48 - 2015-02-20 10:10 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-04-23 20:48 - 2015-02-20 09:24 - 00304128 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-04-23 20:48 - 2014-12-06 09:53 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-04-23 20:48 - 2014-12-06 09:51 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-04-23 20:48 - 2014-12-06 09:51 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-04-23 20:48 - 2014-12-06 08:10 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-04-23 20:48 - 2014-12-06 08:10 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-04-23 20:48 - 2014-12-06 08:09 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-04-23 20:48 - 2014-10-03 03:21 - 00522728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-04-23 20:48 - 2014-10-03 00:29 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-04-23 20:48 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2015-04-23 20:48 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2015-04-23 20:48 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-23 20:48 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-04-23 20:48 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-04-23 20:48 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-04-23 20:48 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-04-23 20:48 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-04-23 20:48 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-04-23 20:48 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-04-23 20:48 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-04-23 20:48 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-04-23 20:48 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-04-23 20:48 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-04-23 20:47 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-04-23 20:47 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2015-04-23 20:47 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-04-23 20:46 - 2015-03-04 09:29 - 00361280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-23 20:46 - 2015-03-04 08:39 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-23 20:46 - 2015-03-04 06:52 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-23 20:46 - 2014-08-01 01:40 - 01287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-04-23 20:46 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-04-23 20:46 - 2013-02-06 00:31 - 00622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2015-04-23 20:46 - 2013-02-06 00:29 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-04-23 20:46 - 2013-02-06 00:28 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2015-04-23 20:46 - 2013-02-06 00:28 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-04-23 20:46 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-04-23 20:46 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-04-23 20:43 - 2015-03-06 09:39 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-04-23 20:43 - 2015-03-06 07:48 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-04-23 20:43 - 2015-02-26 06:35 - 04063232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-04-23 20:43 - 2015-01-24 06:31 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32dpudd.dll
2015-04-23 20:43 - 2014-10-11 09:44 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32dpcorets.dll
2015-04-23 20:43 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2015-04-23 20:43 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2015-04-23 20:43 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2015-04-23 20:43 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2015-04-23 20:43 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2015-04-23 20:43 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2015-04-23 20:43 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2015-04-23 20:43 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2015-04-23 20:43 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2015-04-23 20:43 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Driversdpvideominiport.sys
2015-04-23 20:43 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32fxvmt.dll
2015-04-23 20:41 - 2014-12-19 06:35 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-04-23 20:41 - 2014-12-18 10:51 - 00096576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-04-23 20:41 - 2014-12-18 08:52 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\system32
shwfp.dll
2015-04-23 20:41 - 2014-12-18 08:51 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-04-23 20:41 - 2014-12-18 08:50 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-04-23 20:41 - 2014-12-18 08:20 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64
shwfp.dll
2015-04-23 20:41 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-04-23 20:41 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-04-23 20:41 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-04-23 20:41 - 2013-06-10 21:10 -

calice19 · Answer

Ca veut dire quoi "heberger" ?

calice19 · Answer

1er FRST
http://cjoint.com/?3DAumlxJlrW  

1er Addition
http://cjoint.com/?3DAuoht50nw  


2e FRST
http://cjoint.com/?3DAupk92CTv 

2e addition
http://cjoint.com/?3DAuqaIGwKK

lilidurhone · Answer

Télécharge Malwaresbytes anti malware ici 
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/ 

 Installe le (choisis bien français ; ne modifie pas les paramètres d'installe 
 Décoche la case Activer l'essai gratuit de Malwarebytes Anti-Malware Premium à la fin de l'installation 
 /!\ Utilisateurs de Vista/7/8/8.1 : faire un clic droit sur le raccourci de MalwareBytes' Anti-Malware et choisir Exécuter en tant qu'administrateur
 Clique sur Mettre à jour dans le Tableau de bord afin de mettre à jour la base de données. 
 Dans l'onglet Examen, sélectionnez Examen Menaces puis clique sur Examiner maintenant. 
 Une fois le scan terminé, clique sur Tout mettre en quarantaine puis sur Appliquez les actions 
 (Si un message demande de redémarrer le PC pour terminer la suppression, accepte) 
 Le rapport est disponible dans Historique > Journaux de l'application. (Choisis bien le dernier en date 
 Tu sélectionnes le fichier et tu demandes l'affichage 
 En bas à gauche un bouton exporter ; tu cliques dessus et tu choisis fichier texte et tu choisis ensuite ou l'enregistrer pour ensuite pouvoir le poster dans ta prochaine réponse en l'hébergeant sur cjoint
 Pour t'aider  https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

calice19 · Answer

bonjour, 

voici le rapport 
http://cjoint.com/?3DBumM1U5Po

lilidurhone · Answer

ça doit aller mieux?

calice19 · Answer

Oui je n'ai plus les pub on dirait...il reste une tool bar et un fichier bonjour...
Si ce souci revient, je pourrais faire la même procedures ?
Est ce que je dois faire autre chose?
et merci beaucoup pour ton aide !!! :-D

lilidurhone · Answer

Refais frst

Help me j'ai un virus !

27 réponses

Discussions similaires