Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.05.2018
Ran by tiles (administrator) on DESKTOP-TSTKEDT (13-05-2018 09:29:29)
Running from C:\Users\tiles\Desktop
Loaded Profiles: tiles (Available Profiles: tiles)
Platform: Windows 10 Pro Version 1709 16299.371 (X64) Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
Failed to access process -> WTabletServicePro.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Piriform) C:\Program Files (x86)\CCleaner Cloud\CCleanerCloudAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files (x86)\Everything\Everything.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
(Microsoft Corporation) C:\Program Files\internet explorer\ielowutil.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2016-02-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2380480 2016-06-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CCleanerCloudTray] => C:\Program Files (x86)\CCleaner Cloud\CCleanerCloudTray.exe [3331728 2018-02-15] (Piriform)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-03-27] (AVAST Software)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC.)
HKLM-x32\...\Run: [DNS7reminder] => "C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking13\Ereg.ini"
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3199776 2018-04-03] (Valve Corporation)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2075480 2013-06-24] (Flexera Software LLC.)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [MP3 Skype recorder] => C:\Users\tiles\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [2527360 2017-06-01] (Domit UK LTD)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [EPSON SX125 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [Spotify] => C:\Users\tiles\AppData\Roaming\Spotify\Spotify.exe [22454160 2018-04-03] (Spotify Ltd)
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\...\Run: [Spotify Web Helper] => C:\Users\tiles\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-04-03] (Spotify Ltd)
Startup: C:\Users\tiles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-04-14]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\tiles\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
Startup: C:\Users\tiles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Enregistrement du produit.lnk [2016-12-10]
ShortcutTarget: Logitech . Enregistrement du produit.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
BootExecute: ampa

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 platform.wondershare.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0244bc96-7e85-4458-8768-90be280155f7}: [NameServer] 77.234.40.79
Tcpip\..\Interfaces\{2adf4237-b9a9-460e-b48f-5fd15dcb337b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a38dde38-0272-4380-adaa-cdc2dbc64b75}: [DhcpNameServer] 91.217.154.9 93.174.33.2

Internet Explorer:
==================
HKU\S-1-5-21-1663164167-2339489011-2821599755-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
SearchScopes: HKU\S-1-5-21-1663164167-2339489011-2821599755-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-12-12] (Microsoft Corporation)
BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2014-11-04] (Nuance Communications, Inc.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnriaie.dll [2014-11-04] (Nuance Communications, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - No File

FireFox:
========
FF DefaultProfile: 32hsez77.default
FF DefaultProfile: lstkdknc.default-1511117723034
FF ProfilePath: C:\Users\tiles\AppData\Roaming\Zotero\Zotero\Profiles\32hsez77.default [2018-04-26]
FF Extension: (Zotero LibreOffice Integration) - C:\Program Files (x86)\Zotero\extensions\zoteroOpenOfficeIntegration@zotero.org [2018-04-25] [Legacy] [not signed]
FF Extension: (Zotero Word for Windows Integration) - C:\Program Files (x86)\Zotero\extensions\zoteroWinWordIntegration@zotero.org [2018-04-25] [Legacy] [not signed]
FF ProfilePath: C:\Users\tiles\AppData\Roaming\Mozilla\Firefox\Profiles\lstkdknc.default-1511117723034 [2018-05-11]
FF Homepage: Mozilla\Firefox\Profiles\lstkdknc.default-1511117723034 -> hxxps://www.google.fr/
FF NetworkProxy: Mozilla\Firefox\Profiles\lstkdknc.default-1511117723034 -> type", 0
FF Extension: (Adblock Plus) - C:\Users\tiles\AppData\Roaming\Mozilla\Firefox\Profiles\lstkdknc.default-1511117723034\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-04-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-03-27]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-03-27]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-09] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-06-08] (Adobe Systems)
FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc.)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-09] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-22] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-06-08] (Adobe Systems)
FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome:
=======
CHR Profile: C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default [2018-05-11]
CHR Extension: (Docs) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-03]
CHR Extension: (Google Drive) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-04-03]
CHR Extension: (YouTube) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-03]
CHR Extension: (Adblock Plus) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-04-13]
CHR Extension: (Adobe Acrobat) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-04-03]
CHR Extension: (Zotero Connector) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2018-05-11]
CHR Extension: (Avast SafePrice) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-04-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-04-03]
CHR Extension: (Avast Online Security) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\tiles\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-03]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7147320 2017-03-27] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-03-27] (AVAST Software)
R2 CCleanerCloudAgentService; C:\Program Files (x86)\CCleaner Cloud\CCleanerCloudAgent.exe [18818672 2018-02-15] (Piriform)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc.)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1668200 2018-02-09] ()
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332656 2018-05-02] (HP Inc.)
S2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-26] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201872 2016-02-27] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2018-02-10] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\TunesGo Retro\DriverInstall.exe [103576 2015-11-04] (Wondershare)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [652240 2016-07-14] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; C:\WINDOWS\system32\ampa.sys [17008 2013-11-29] () [File not signed]
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [17008 2013-11-29] () [File not signed]
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309272 2017-03-27] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-03-27] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-03-27] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-03-27] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-03-27] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-03-27] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126600 2017-03-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-03-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-03-27] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [993608 2017-03-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [548928 2017-03-27] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-03-27] (AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2017-02-25] (The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337592 2017-03-27] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2016-02-27] (Advanced Micro Devices)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-03-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-03-04] (Disc Soft Ltd)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2009-02-10] (EZB Systems, Inc.)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-05-13] (Malwarebytes)
S3 PVUSB; C:\WINDOWS\System32\drivers\CESG64.sys [63808 2007-02-19] (CASIO COMPUTER CO.,LTD.)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51392 2016-02-27] (Synaptics Incorporated)
S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2017-05-12] (Anchorfree Inc.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [45720 2016-02-27] (Toshiba Corporation)
S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [43152 2010-06-25] (Oracle Corporation)
S3 WacHidRouterPro; C:\WINDOWS\System32\drivers\wachidrouter.sys [102864 2016-03-03] (Wacom Technology)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
S3 YMIDUSBW; C:\WINDOWS\system32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-13 09:29 - 2018-05-13 09:30 - 000022801 _____ C:\Users\tiles\Desktop\FRST.txt
2018-05-13 09:29 - 2018-05-13 09:15 - 002404864 _____ (Farbar) C:\Users\tiles\Desktop\FRST64.exe
2018-05-13 09:26 - 2018-05-13 09:27 - 000000000 ____D C:\FRST
2018-05-13 09:26 - 2018-05-13 09:26 - 000000000 ___HD C:\Users\Public\Documents\AdobeGC
2018-05-11 18:05 - 2018-05-11 18:05 - 000544656 _____ C:\Users\tiles\Desktop\CV, Lesec-Rolland Titouan.pdf
2018-05-05 14:19 - 2018-05-05 14:21 - 113824396 _____ C:\Users\tiles\Desktop\Anniv Romain.mp4
2018-05-05 11:24 - 2018-05-05 11:24 - 000049217 _____ C:\Users\tiles\Downloads\Non confirmé 700876.crdownload
2018-05-05 11:09 - 2018-05-05 11:09 - 000001114 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2018-05-05 11:08 - 2017-03-17 11:43 - 001250304 _____ (CineForm Inc.) C:\WINDOWS\system32\CFDecode64.ax
2018-05-05 11:07 - 2018-05-05 14:17 - 000000000 ____D C:\Users\tiles\Documents\Wondershare Filmora
2018-05-05 11:07 - 2018-05-05 11:07 - 000000000 ____D C:\ProgramData\Wondershare Video Editor
2018-05-05 11:07 - 2018-05-05 11:07 - 000000000 ____D C:\Program Files\Wondershare
2018-05-05 11:00 - 2018-05-05 11:01 - 001213664 _____ C:\Users\tiles\Downloads\filmora_setup_full1084.exe
2018-05-05 10:44 - 2018-05-05 14:17 - 000000000 ____D C:\Users\tiles\Desktop\Doosier
2018-04-27 09:15 - 2018-04-27 09:15 - 000225057 _____ C:\Users\tiles\Downloads\MorpionS2-Conception.odt
2018-04-27 08:48 - 2018-04-27 08:48 - 000978214 _____ C:\Users\tiles\Downloads\Dossier sceptique mode demploi (1).pdf
2018-04-26 16:35 - 2018-04-26 16:35 - 000050756 _____ C:\Users\tiles\Downloads\Expérience-shi-pnl (3).odt
2018-04-26 16:30 - 2018-04-26 16:30 - 000978214 _____ C:\Users\tiles\Downloads\Dossier sceptique mode demploi.pdf
2018-04-26 16:16 - 2018-04-26 16:16 - 000013809 _____ C:\Users\tiles\Downloads\SHIEnquêteSceptique-Analyse-des-résultats (1).ods
2018-04-26 14:36 - 2018-04-26 14:36 - 000001112 _____ C:\Users\tiles\Downloads\SHI-correction-pdf.txt
2018-04-26 13:44 - 2018-04-26 13:44 - 003287423 _____ C:\Users\tiles\Downloads\La-Programmation-Neurolinguistique-Oculaire (4).pdf
2018-04-26 13:40 - 2018-04-26 13:40 - 000012562 _____ C:\Users\tiles\Downloads\SHI-conclusion.odt
2018-04-25 20:37 - 2018-04-26 17:51 - 000000000 ____D C:\Users\tiles\Zotero
2018-04-25 20:36 - 2018-04-25 20:36 - 000001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zotero.lnk
2018-04-25 20:36 - 2018-04-25 20:36 - 000000000 ____D C:\Users\tiles\AppData\Roaming\Zotero
2018-04-25 20:36 - 2018-04-25 20:36 - 000000000 ____D C:\Users\tiles\AppData\Local\Zotero
2018-04-25 20:35 - 2018-04-25 20:35 - 000000000 ____D C:\Program Files (x86)\Zotero
2018-04-25 20:34 - 2018-04-25 20:34 - 043606736 _____ (Mozilla) C:\Users\tiles\Downloads\Zotero-5.0.45_setup (1).exe
2018-04-25 20:33 - 2018-04-25 20:34 - 043606736 _____ (Mozilla) C:\Users\tiles\Downloads\Non confirmé 474697.crdownload
2018-04-25 20:29 - 2018-04-25 20:29 - 002623418 _____ C:\Users\tiles\Downloads\La-Programmation-Neurolinguistique-Oculaire (3).pdf
2018-04-25 20:08 - 2018-04-25 20:08 - 002623418 _____ C:\Users\tiles\Downloads\La-Programmation-Neurolinguistique-Oculaire (2).pdf
2018-04-25 19:37 - 2018-04-25 19:37 - 002664799 _____ C:\Users\tiles\Downloads\La-Programmation-Neurolinguistique-Oculaire (1).pdf
2018-04-25 19:18 - 2018-04-25 19:18 - 000022128 _____ C:\Users\tiles\Downloads\SHIEnquêteSceptique-Quelqes-trucs-à-rajouter-et-développer (1).odt
2018-04-25 18:31 - 2018-04-25 18:31 - 000050770 _____ C:\Users\tiles\Downloads\Expérience-shi-pnl (2).odt
2018-04-25 16:20 - 2018-04-25 16:20 - 000013809 _____ C:\Users\tiles\Downloads\SHIEnquêteSceptique-Analyse-des-résultats.ods
2018-04-25 16:16 - 2018-04-25 16:16 - 000046231 _____ C:\Users\tiles\Downloads\Expérience-shi-pnl (1).odt
2018-04-25 15:20 - 2018-04-25 15:20 - 000185728 _____ C:\Users\tiles\Downloads\Les-mouvements-oculaires-dans-la-pnl.odt
2018-04-25 15:20 - 2018-04-25 15:20 - 000019584 _____ C:\Users\tiles\Downloads\SHIEnquêteSceptique-Quelqes-trucs-à-rajouter-et-développer.odt
2018-04-24 23:22 - 2018-04-24 23:23 - 000000000 ____D C:\Users\tiles\Desktop\DS ALG
2018-04-23 21:29 - 2018-04-23 21:29 - 001644525 _____ C:\Users\tiles\Downloads\La-Programmation-Neurolinguistique-Oculaire.pdf
2018-04-23 19:44 - 2018-04-23 19:44 - 000052787 _____ C:\Users\tiles\Downloads\Expérience-shi-pnl.odt
2018-04-23 19:37 - 2018-04-23 19:37 - 000020786 _____ C:\Users\tiles\Downloads\SHI-correction-truc-titouan.odt
2018-04-23 19:36 - 2018-04-23 19:36 - 000434882 _____ C:\Users\tiles\Downloads\Fondements-scientifiques.pdf
2018-04-23 19:29 - 2018-04-23 19:29 - 000022457 _____ C:\Users\tiles\Downloads\SHIEnquêteSceptique-Compterendudébut.odt
2018-04-23 19:08 - 2018-04-23 19:08 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2018-04-23 19:07 - 2018-04-23 19:07 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-04-22 14:19 - 2018-04-22 14:19 - 000266091 _____ C:\Users\tiles\Downloads\Introduction.pdf
2018-04-22 14:13 - 2018-04-27 09:11 - 000000000 ____D C:\Users\tiles\Desktop\SHI
2018-04-22 13:18 - 2018-04-22 13:18 - 000123096 _____ C:\Users\tiles\Downloads\SHI-PNL.odt
2018-04-16 16:23 - 2018-04-17 14:57 - 000000000 ____D C:\Users\tiles\AppData\Local\PlaceholderTileLogoFolder
2018-04-15 22:02 - 2018-04-15 22:04 - 734164992 ____R C:\Users\tiles\Downloads\the devil wears prada.FRENCH.DVDRiP.XviD.MZISYS.avi
2018-04-15 22:02 - 2018-04-15 22:02 - 000015931 _____ C:\Users\tiles\Downloads\le-diable-s-habille-en-prada-dvdrip-french-2006.torrent
2018-04-15 21:56 - 2018-04-15 21:56 - 000088167 _____ C:\Users\tiles\Desktop\OPT_S2P_TD0.pdf
2018-04-15 17:19 - 2018-04-15 17:19 - 000026008 _____ C:\Users\tiles\Downloads\Orange.Is.The.New.Black.1x03.DVDRip.Z1.TT.zip
2018-04-15 17:19 - 2018-04-15 17:19 - 000019271 _____ C:\Users\tiles\Downloads\Orange.Is.The.New.Black.1x02.DVDRip.Z1.TT.zip
2018-04-15 16:25 - 2018-04-15 16:25 - 000046759 _____ C:\Users\tiles\Downloads\Orange.Is.The.New.Black.1x01.DVDRip.Z1.TT.zip
2018-04-15 16:25 - 2018-04-15 16:25 - 000026438 _____ C:\Users\tiles\Downloads\Orange.Is.The.New.Black.1x13.DVDRip.Z1.TT.zip
2018-04-15 10:57 - 2018-04-15 10:57 - 000000000 ____D C:\Users\tiles\Downloads\Orange.Is.The.New.Black.S01.720p.WEBRip.AAC2.0.H.264-Abjex
2018-04-13 17:57 - 2018-04-13 17:57 - 000368962 _____ C:\Users\tiles\Desktop\Lesec--Rolland Mayeux.odt
2018-04-13 17:21 - 2018-04-13 17:56 - 000368971 _____ C:\Users\tiles\Downloads\Eval-simu-4 (1).odt
2018-04-13 16:21 - 2018-04-13 17:49 - 000039797 _____ C:\Users\tiles\Downloads\Simul3_S2P_2017.raw
2018-04-13 16:21 - 2018-04-13 17:49 - 000001598 _____ C:\Users\tiles\Downloads\Simul3_S2P_2017.op.raw
2018-04-13 16:13 - 2018-04-13 17:16 - 000380606 _____ C:\Users\tiles\Downloads\Eval-simu-4.odt
2018-04-13 16:13 - 2018-04-13 16:13 - 000005404 _____ C:\Users\tiles\Downloads\Simul3_S2P_2017.asc
2018-04-13 14:11 - 2018-04-13 14:11 - 000002239 _____ C:\Users\tiles\Desktop\SHI TEXTE.txt
2018-04-13 08:12 - 2018-04-15 22:04 - 000000000 ____D C:\Users\tiles\AppData\LocalLow\BitTorrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-13 09:30 - 2018-02-18 17:01 - 000004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2A5F0DDF-C4A3-4896-BEEF-5A6717A9832A}
2018-05-13 09:23 - 2018-04-03 20:59 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-05-13 09:22 - 2018-02-09 23:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-05-13 09:22 - 2017-11-19 20:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-13 09:22 - 2016-03-04 19:52 - 000000000 ____D C:\Program Files\WinRAR
2018-05-11 19:17 - 2017-09-29 10:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-05-11 19:16 - 2018-04-12 23:26 - 000000000 ____D C:\Users\tiles\Desktop\IPI S2
2018-05-11 19:13 - 2017-11-19 20:44 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-05-11 19:12 - 2016-03-04 19:52 - 000000000 ____D C:\Users\tiles\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-11 19:12 - 2016-03-04 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-11 19:10 - 2018-02-09 23:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-05-11 18:04 - 2017-10-05 19:47 - 000000000 ____D C:\Users\tiles\Desktop\ENIB
2018-05-11 17:43 - 2017-04-16 23:42 - 000000000 ____D C:\Users\tiles\AppData\LocalLow\Mozilla
2018-05-11 14:49 - 2017-11-19 20:44 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-05-11 14:07 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-05-11 14:07 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-05-11 13:53 - 2017-01-31 22:08 - 000000000 ____D C:\Program Files (x86)\CCleaner Cloud
2018-05-11 13:52 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-05-11 13:41 - 2018-02-09 23:02 - 005072864 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-05 23:52 - 2016-02-29 23:42 - 000000000 ____D C:\Users\tiles\AppData\Roaming\vlc
2018-05-05 11:09 - 2018-01-08 14:38 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2018-05-05 11:09 - 2018-01-08 14:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2018-05-05 10:28 - 2018-02-28 20:50 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-04-27 23:35 - 2017-12-18 18:40 - 000000597 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2018-04-27 12:31 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF
2018-04-27 12:31 - 2016-03-02 23:06 - 000000000 ____D C:\ProgramData\HP
2018-04-27 09:17 - 2018-02-09 23:11 - 000000000 ____D C:\Users\tiles\AppData\Local\Packages
2018-04-25 20:37 - 2018-02-09 23:09 - 000000000 ____D C:\Users\tiles
2018-04-23 21:11 - 2017-12-07 17:04 - 000000000 ____D C:\Users\tiles\Documents\Proyecto electrico
2018-04-23 19:08 - 2017-04-14 12:03 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-04-23 15:54 - 2018-02-10 07:40 - 000976182 _____ C:\WINDOWS\system32\perfh00C.dat
2018-04-23 15:54 - 2018-02-10 07:40 - 000200130 _____ C:\WINDOWS\system32\perfc00C.dat
2018-04-23 15:54 - 2018-02-09 23:32 - 002144718 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-04-22 14:32 - 2017-03-16 00:02 - 000000000 ____D C:\ProgramData\TEMP
2018-04-22 13:13 - 2017-03-16 00:05 - 000001315 _____ C:\Users\tiles\AppData\Roaming\SAS7_000.DAT
2018-04-16 12:40 - 2017-06-29 14:28 - 000000305 _____ C:\Users\tiles\Documents\pokerstar compte.txt
2018-04-15 22:05 - 2016-03-12 14:03 - 000000000 ____D C:\Users\tiles\AppData\Roaming\BitTorrent
2018-04-13 19:07 - 2017-10-08 15:26 - 000004118 _____ C:\Users\tiles\AppData\Roaming\LTspiceIV.ini
2018-04-13 00:18 - 2018-04-03 21:48 - 000000000 ____D C:\Users\tiles\AppData\Local\Spotify
2018-04-13 00:04 - 2018-03-15 19:21 - 000000000 ____D C:\Users\tiles\AppData\Roaming\Spotify

==================== Files in the root of some directories =======

2017-10-08 15:26 - 2018-04-13 19:07 - 000004118 _____ () C:\Users\tiles\AppData\Roaming\LTspiceIV.ini
2016-05-03 23:23 - 2017-12-02 19:35 - 000000112 _____ () C:\Users\tiles\AppData\Roaming\Préfs JP2K CS6
2017-03-16 00:05 - 2018-04-22 13:13 - 000001315 _____ () C:\Users\tiles\AppData\Roaming\SAS7_000.DAT
2017-04-17 01:23 - 2017-04-17 01:23 - 000000552 _____ () C:\Users\tiles\AppData\Local\TroubleshooterConfig.json
2018-03-04 21:07 - 2018-03-04 21:07 - 000000000 _____ () C:\Users\tiles\AppData\Local\{F283C6E2-A144-49BB-A5EA-545DD3D20B6C}

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-02-09 23:02

==================== End of FRST.txt ============================