API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 10th, 2014
70
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.23 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 ([color=red]ATTENTION: ====> FRST version is 28 days old and could be outdated[/color])
  2. Ran by Cyrille (administrator) on PC-DE-CYRILLE on 10-04-2014 18:41:00
  3. Running from C:\Users\Cyrille\Desktop
  4. Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: French Standard
  5. Internet Explorer Version 7
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (Comodo Security Solutions Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
  17. (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
  18. (Microsoft Corporation) C:\Windows\system32\SLsvc.exe
  19. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  20. (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
  21. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
  22. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  23. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  24. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  25. (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
  26. (Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
  27. (Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
  28. (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
  29. (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
  30. (Hewlett-Packard) c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
  31. () C:\Program Files (x86)\X-Chat 2\xchat.exe
  32. (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
  33. (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  34.  
  35.  
  36. ==================== Registry (Whitelisted) ==================
  37.  
  38. HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] - "C:\Users\Cyrille\AppData\Local\Temp\cisA288.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82} <===== ATTENTION
  39. HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
  40. HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
  41. HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
  42. HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
  43. HKU\S-1-5-21-2329206531-638254772-3556205003-1000\...\MountPoints2: {3368417a-a83e-11e3-a329-00261832dbc0} - L:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2088.1.A01B06 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
  44. HKU\S-1-5-21-2329206531-638254772-3556205003-1000\...\MountPoints2: {9d8bf184-04b6-11e3-9c6b-00261832dbc0} - J:\setup.exe
  45. HKU\S-1-5-21-2329206531-638254772-3556205003-1000\...\MountPoints2: {d0d1fa1f-dfb6-11e2-9c9d-00261832dbc0} - K:\DVAP.exe
  46.  
  47. ==================== Internet (Whitelisted) ====================
  48.  
  49. HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
  50. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
  51. StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  52. SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  53. SearchScopes: HKLM - {73FFB89E-264A-447D-B2B9-7D7369B6B316} URL = http://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
  54. SearchScopes: HKLM - {B3BBA286-2BF7-4F08-821F-CB8633771E47} URL = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
  55. SearchScopes: HKLM - {BD916422-3927-40AB-91C6-2676F5E2A4FE} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
  56. BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  57. BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  58. BHO-x32: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
  59. BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  60. BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  61. Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  62. Toolbar: HKLM-x32 - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
  63. Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  64. Toolbar: HKCU - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - No File
  65. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  66. ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52272 2009-06-08] (EasyBits Software Corp.)
  67. Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
  68. Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
  69. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  70. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  71.  
  72. FireFox:
  73. ========
  74. FF ProfilePath: C:\Users\Cyrille\AppData\Roaming\Mozilla\Firefox\Profiles\64n43o7b.default-1394363596064
  75. FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
  76. FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
  77. FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  78. FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  79. FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  80. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  81. FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
  82. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  83. FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
  84. FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
  85. FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  86. FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  87. FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  88. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml
  89. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
  90. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml
  91. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml
  92. FF Extension: Adblock Plus - C:\Users\Cyrille\AppData\Roaming\Mozilla\Firefox\Profiles\64n43o7b.default-1394363596064\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-09]
  93. FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
  94. FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
  95. FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
  96. FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-07-04]
  97.  
  98. Chrome:
  99. =======
  100. Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
  101.  
  102. ==================== Services (Whitelisted) =================
  103.  
  104. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
  105. R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70344 2013-04-17] (Comodo Security Solutions Inc.)
  106. R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [1851088 2013-04-17] (Comodo Security Solutions, Inc.)
  107. S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
  108. S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
  109. S3 wxpSvc; C:\Program Files (x86)\wLite\wService.exe [3709440 2009-10-05] (Moonware Studios)
  110. R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [X]
  111.  
  112. ==================== Drivers (Whitelisted) ====================
  113.  
  114. R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
  115. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
  116. R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [59144 2013-05-09] (AVAST Software)
  117. R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
  118. R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-04] (AVAST Software)
  119. R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-04] (AVAST Software)
  120. R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
  121. R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-04] ()
  122. S1 CFRMD; C:\Windows\SysWOW64\DRIVERS\CFRMD.sys [40256 2012-09-03] (Windows (R) Win 7 DDK provider)
  123. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-08-14] (Disc Soft Ltd)
  124. S3 massfilter_hs; C:\Windows\System32\DRIVERS\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
  125. S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
  126. S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
  127. S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
  128. S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
  129. S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
  130. S3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0; \??\c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms [X]
  131.  
  132. ==================== NetSvcs (Whitelisted) ===================
  133.  
  134.  
  135. ==================== One Month Created Files and Folders ========
  136.  
  137. 2014-04-10 15:40 - 2014-04-10 15:40 - 00870728 _____ () C:\Users\Cyrille\Downloads\Norton_Removal_Tool.exe
  138. 2014-04-10 15:32 - 2014-04-10 15:45 - 00016362 _____ () C:\Windows\PFRO.log
  139. 2014-04-10 12:20 - 2014-04-10 12:20 - 00044898 _____ () C:\Users\Cyrille\Desktop\Extras.Txt
  140. 2014-04-10 12:18 - 2014-04-10 12:18 - 00082514 _____ () C:\Users\Cyrille\Desktop\OTL.Txt
  141. 2014-04-10 11:56 - 2014-04-10 12:23 - 00045014 _____ () C:\Users\Cyrille\Desktop\Addition.txt
  142. 2014-04-10 11:55 - 2014-04-10 18:41 - 00011824 _____ () C:\Users\Cyrille\Desktop\FRST.txt
  143. 2014-04-10 11:54 - 2014-04-10 18:41 - 00000000 ____D () C:\FRST
  144. 2014-04-10 11:53 - 2014-04-10 11:53 - 02157056 _____ (Farbar) C:\Users\Cyrille\Desktop\FRST64.exe
  145. 2014-04-10 11:48 - 2014-04-10 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Cyrille\Desktop\OTL.exe
  146. 2014-04-10 11:40 - 2014-04-10 11:40 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
  147. 2014-04-10 11:40 - 2014-04-10 11:40 - 00000772 _____ () C:\Users\Public\Desktop\CCleaner.lnk
  148. 2014-04-10 11:40 - 2014-04-10 11:40 - 00000000 ____D () C:\Program Files\CCleaner
  149. 2014-04-10 11:39 - 2014-04-10 11:39 - 04765152 _____ (Piriform Ltd) C:\Users\Cyrille\Downloads\ccleaner_4-11_fr_14492.exe
  150. 2014-04-10 11:07 - 2014-04-10 11:07 - 01426178 _____ () C:\Users\Cyrille\Downloads\adwcleaner.exe
  151. 2014-04-08 12:11 - 2014-04-08 12:13 - 00000054 _____ () C:\Users\Cyrille\liste.txt
  152. 2014-04-07 22:13 - 2014-04-07 22:28 - 734255104 ____R () C:\Users\Cyrille\Downloads\les nul,la cité de la peur.avi
  153. 2014-04-07 18:38 - 2014-04-07 19:02 - 00002669 _____ () C:\Users\Cyrille\taki.txt
  154. 2014-04-06 11:11 - 2014-04-06 11:11 - 04562152 _____ () C:\Users\Cyrille\Downloads\Net_Tarot_Installer.exe.part
  155. 2014-03-31 12:16 - 2014-03-31 12:16 - 00003036 _____ () C:\Users\Cyrille\Documents\Tous_les_garçons_et_les_filles_(guitare).mscz
  156. 2014-03-29 15:16 - 2014-03-29 15:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  157. 2014-03-29 08:08 - 2014-03-29 08:08 - 00040448 _____ () C:\Users\Cyrille\Downloads\dispo_1_640.xls
  158. 2014-03-27 20:18 - 2014-03-27 20:18 - 00000155 _____ () C:\Users\Cyrille\ggg.txt
  159. 2014-03-26 14:19 - 2014-03-26 14:19 - 37205133 _____ () C:\Users\Cyrille\Downloads\ut_alljumps_fixed.pk3
  160. 2014-03-20 14:48 - 2014-03-20 14:48 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\eTeks
  161. 2014-03-20 14:40 - 2014-03-20 14:41 - 00000000 ____D () C:\ProgramData\AVG
  162. 2014-03-20 14:40 - 2014-03-20 14:40 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
  163. 2014-03-20 14:40 - 2014-03-20 14:40 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\AVG
  164. 2014-03-20 14:38 - 2014-03-20 14:38 - 00000976 _____ () C:\Users\Cyrille\Desktop\Sweet Home 3D.lnk
  165. 2014-03-20 14:38 - 2014-03-20 14:38 - 00000000 ____D () C:\Program Files (x86)\Sweet Home 3D
  166. 2014-03-20 14:35 - 2014-03-20 14:35 - 33746304 _____ (eTeks ) C:\Users\Cyrille\Downloads\84680-673375-sweet-home-3d.exe
  167. 2014-03-13 15:18 - 2014-03-13 15:19 - 00000000 ____D () C:\Users\Cyrille\Desktop\Nouveau dossier
  168. 2014-03-11 03:01 - 2014-03-11 03:02 - 00000000 ____D () C:\Users\Cyrille\Downloads\Mr Bean - Complete Mr Bean
  169.  
  170. ==================== One Month Modified Files and Folders =======
  171.  
  172. 2014-04-10 18:41 - 2014-04-10 11:55 - 00011824 _____ () C:\Users\Cyrille\Desktop\FRST.txt
  173. 2014-04-10 18:41 - 2014-04-10 11:54 - 00000000 ____D () C:\FRST
  174. 2014-04-10 18:23 - 2014-02-16 19:00 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\Skype
  175. 2014-04-10 18:14 - 2013-07-04 18:25 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  176. 2014-04-10 17:57 - 2006-11-02 17:22 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
  177. 2014-04-10 17:57 - 2006-11-02 17:22 - 00003744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
  178. 2014-04-10 17:53 - 2013-04-14 15:05 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  179. 2014-04-10 16:14 - 2013-07-04 18:25 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  180. 2014-04-10 16:09 - 2013-07-04 18:25 - 00004066 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  181. 2014-04-10 16:09 - 2013-07-04 18:25 - 00003814 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  182. 2014-04-10 15:57 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  183. 2014-04-10 15:55 - 2006-11-02 17:42 - 00032612 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  184. 2014-04-10 15:52 - 2009-06-08 22:34 - 00678804 _____ () C:\Windows\system32\perfh00C.dat
  185. 2014-04-10 15:52 - 2009-06-08 22:34 - 00126420 _____ () C:\Windows\system32\perfc00C.dat
  186. 2014-04-10 15:52 - 2006-11-02 14:46 - 01495774 _____ () C:\Windows\system32\PerfStringBackup.INI
  187. 2014-04-10 15:48 - 2013-07-04 18:24 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
  188. 2014-04-10 15:46 - 2013-07-07 08:41 - 00009768 _____ () C:\Windows\system32\spsys.log
  189. 2014-04-10 15:45 - 2014-04-10 15:32 - 00016362 _____ () C:\Windows\PFRO.log
  190. 2014-04-10 15:42 - 2013-04-14 14:59 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
  191. 2014-04-10 15:40 - 2014-04-10 15:40 - 00870728 _____ () C:\Users\Cyrille\Downloads\Norton_Removal_Tool.exe
  192. 2014-04-10 12:25 - 2014-01-23 14:31 - 00000000 ____D () C:\Users\Cyrille\Desktop\Chantuoses
  193. 2014-04-10 12:23 - 2014-04-10 11:56 - 00045014 _____ () C:\Users\Cyrille\Desktop\Addition.txt
  194. 2014-04-10 12:20 - 2014-04-10 12:20 - 00044898 _____ () C:\Users\Cyrille\Desktop\Extras.Txt
  195. 2014-04-10 12:18 - 2014-04-10 12:18 - 00082514 _____ () C:\Users\Cyrille\Desktop\OTL.Txt
  196. 2014-04-10 11:53 - 2014-04-10 11:53 - 02157056 _____ (Farbar) C:\Users\Cyrille\Desktop\FRST64.exe
  197. 2014-04-10 11:48 - 2014-04-10 11:48 - 00602112 _____ (OldTimer Tools) C:\Users\Cyrille\Desktop\OTL.exe
  198. 2014-04-10 11:45 - 2013-08-14 14:23 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\DAEMON Tools Lite
  199. 2014-04-10 11:45 - 2013-07-04 00:37 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\Media Player Classic
  200. 2014-04-10 11:45 - 2013-04-26 15:47 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\TS3Client
  201. 2014-04-10 11:45 - 2013-04-15 00:46 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\uTorrent
  202. 2014-04-10 11:45 - 2013-04-14 15:15 - 00000000 ____D () C:\Program Files (x86)\Steam
  203. 2014-04-10 11:45 - 2013-04-14 14:45 - 00000000 ____D () C:\Windows\Minidump
  204. 2014-04-10 11:45 - 2009-06-08 22:35 - 00000000 ____D () C:\Windows\Panther
  205. 2014-04-10 11:40 - 2014-04-10 11:40 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
  206. 2014-04-10 11:40 - 2014-04-10 11:40 - 00000772 _____ () C:\Users\Public\Desktop\CCleaner.lnk
  207. 2014-04-10 11:40 - 2014-04-10 11:40 - 00000000 ____D () C:\Program Files\CCleaner
  208. 2014-04-10 11:39 - 2014-04-10 11:39 - 04765152 _____ (Piriform Ltd) C:\Users\Cyrille\Downloads\ccleaner_4-11_fr_14492.exe
  209. 2014-04-10 11:17 - 2013-09-27 13:35 - 00000000 ____D () C:\AdwCleaner
  210. 2014-04-10 11:09 - 2006-11-02 14:34 - 00000277 _____ () C:\Windows\win.ini
  211. 2014-04-10 11:07 - 2014-04-10 11:07 - 01426178 _____ () C:\Users\Cyrille\Downloads\adwcleaner.exe
  212. 2014-04-10 01:39 - 2013-04-14 15:00 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\X-Chat 2
  213. 2014-04-10 01:28 - 2013-04-16 00:55 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\vlc
  214. 2014-04-09 18:27 - 2013-04-19 21:01 - 00000000 ____D () C:\Users\Cyrille\AppData\Local\PMB Files
  215. 2014-04-09 18:27 - 2013-04-19 21:01 - 00000000 ____D () C:\ProgramData\PMB Files
  216. 2014-04-09 12:58 - 2014-01-01 22:03 - 00000000 ____D () C:\Users\Cyrille\Downloads\Snes9x_1.53_7886
  217. 2014-04-08 12:13 - 2014-04-08 12:11 - 00000054 _____ () C:\Users\Cyrille\liste.txt
  218. 2014-04-08 12:11 - 2013-04-14 14:52 - 00000000 ____D () C:\Users\Cyrille
  219. 2014-04-07 22:28 - 2014-04-07 22:13 - 734255104 ____R () C:\Users\Cyrille\Downloads\les nul,la cité de la peur.avi
  220. 2014-04-07 19:02 - 2014-04-07 18:38 - 00002669 _____ () C:\Users\Cyrille\taki.txt
  221. 2014-04-06 13:02 - 2013-04-14 23:51 - 00000000 ____D () C:\Users\Cyrille\AppData\Local\Adobe
  222. 2014-04-06 13:02 - 2013-04-14 15:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  223. 2014-04-06 13:02 - 2013-04-14 15:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  224. 2014-04-06 13:02 - 2013-04-14 15:05 - 00003856 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
  225. 2014-04-06 11:11 - 2014-04-06 11:11 - 04562152 _____ () C:\Users\Cyrille\Downloads\Net_Tarot_Installer.exe.part
  226. 2014-04-05 21:53 - 2013-06-24 02:06 - 00000000 ____D () C:\Users\Cyrille\Red Moon
  227. 2014-04-05 17:20 - 2013-07-23 22:04 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\gtk-2.0
  228. 2014-04-04 22:59 - 2013-04-26 15:47 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
  229. 2014-04-01 06:53 - 2013-12-05 12:02 - 00000000 ____D () C:\Users\Cyrille\Desktop\Michelle
  230. 2014-03-31 12:16 - 2014-03-31 12:16 - 00003036 _____ () C:\Users\Cyrille\Documents\Tous_les_garçons_et_les_filles_(guitare).mscz
  231. 2014-03-31 10:39 - 2013-04-15 01:19 - 00000552 _____ () C:\Windows\Tasks\PCDRScheduledMaintenance.job
  232. 2014-03-31 07:48 - 2013-04-14 15:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
  233. 2014-03-30 12:23 - 2013-04-21 10:52 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
  234. 2014-03-29 15:17 - 2014-03-29 15:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  235. 2014-03-29 08:08 - 2014-03-29 08:08 - 00040448 _____ () C:\Users\Cyrille\Downloads\dispo_1_640.xls
  236. 2014-03-29 08:08 - 2013-05-25 00:53 - 00000772 _____ () C:\Users\Cyrille\AppData\Roaming\wklnhst.dat
  237. 2014-03-27 20:18 - 2014-03-27 20:18 - 00000155 _____ () C:\Users\Cyrille\ggg.txt
  238. 2014-03-26 14:19 - 2014-03-26 14:19 - 37205133 _____ () C:\Users\Cyrille\Downloads\ut_alljumps_fixed.pk3
  239. 2014-03-20 14:48 - 2014-03-20 14:48 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\eTeks
  240. 2014-03-20 14:41 - 2014-03-20 14:40 - 00000000 ____D () C:\ProgramData\AVG
  241. 2014-03-20 14:40 - 2014-03-20 14:40 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
  242. 2014-03-20 14:40 - 2014-03-20 14:40 - 00000000 ____D () C:\Users\Cyrille\AppData\Roaming\AVG
  243. 2014-03-20 14:38 - 2014-03-20 14:38 - 00000976 _____ () C:\Users\Cyrille\Desktop\Sweet Home 3D.lnk
  244. 2014-03-20 14:38 - 2014-03-20 14:38 - 00000000 ____D () C:\Program Files (x86)\Sweet Home 3D
  245. 2014-03-20 14:35 - 2014-03-20 14:35 - 33746304 _____ (eTeks ) C:\Users\Cyrille\Downloads\84680-673375-sweet-home-3d.exe
  246. 2014-03-18 17:01 - 2013-04-15 22:46 - 00000620 _____ () C:\Users\Cyrille\Documents\anynosq
  247. 2014-03-13 15:19 - 2014-03-13 15:18 - 00000000 ____D () C:\Users\Cyrille\Desktop\Nouveau dossier
  248. 2014-03-12 20:28 - 2014-02-27 12:33 - 00000000 ____D () C:\Users\Cyrille\Documents\contrechants
  249. 2014-03-11 03:02 - 2014-03-11 03:01 - 00000000 ____D () C:\Users\Cyrille\Downloads\Mr Bean - Complete Mr Bean
  250. 2014-03-11 02:05 - 2013-04-14 15:04 - 00000489 _____ () C:\Users\Cyrille\Desktop\irc.txt
  251.  
  252. ZeroAccess:
  253. C:\Windows\Installer\{b60304b7-7485-4d98-9726-b2896117c12e}
  254.  
  255. ==================== Bamital & volsnap Check =================
  256.  
  257. C:\Windows\System32\winlogon.exe => MD5 is legit
  258. C:\Windows\System32\wininit.exe => MD5 is legit
  259. C:\Windows\SysWOW64\wininit.exe => MD5 is legit
  260. C:\Windows\explorer.exe => MD5 is legit
  261. C:\Windows\SysWOW64\explorer.exe => MD5 is legit
  262. C:\Windows\System32\svchost.exe => MD5 is legit
  263. C:\Windows\SysWOW64\svchost.exe => MD5 is legit
  264. C:\Windows\System32\services.exe => MD5 is legit
  265. C:\Windows\System32\User32.dll => MD5 is legit
  266. C:\Windows\SysWOW64\User32.dll => MD5 is legit
  267. C:\Windows\System32\userinit.exe => MD5 is legit
  268. C:\Windows\SysWOW64\userinit.exe => MD5 is legit
  269. C:\Windows\System32\rpcss.dll => MD5 is legit
  270. C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
  271.  
  272.  
  273. LastRegBack: 2014-04-10 16:11
  274.  
  275. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!