Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 18-09-2019
Exécuté par Agnès Laurent (administrateur) sur LAPTOP-HSB9PMT2 (Acer Aspire A515-51G) (18-09-2019 21:26:42)
Exécuté depuis C:\Users\Agnès Laurent\Desktop
Profils chargés: Agnès Laurent (Profils disponibles: Agnès Laurent)
Platform: Windows 10 Home Version 1903 18362.1 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\Vpn.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\IntelCpHeciSvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.53.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19072.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1923008 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Agnès Laurent\AppData\Local\Microsoft\Teams\Update.exe [1789552 2019-09-03] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\...\MountPoints2: {c7d776ed-861a-11e8-90f4-9822ef89111e} - "D:\WD SmartWare.exe" autoplay=true
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-09-14]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {00698A3D-84F2-43D2-88B3-7BA8D439D7A1} - System32\Tasks\CareCenter\RtHDVBg_CTPreset_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {039D2B19-4961-471A-991E-43C43E7BD695} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [947136 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12E747DC-859E-4B2A-885C-1421769F3E7C} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Agnès Laurent\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {1742EA8C-3AC1-4A8F-8752-E548E7659A8F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [722880 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {191AE6A8-9F6D-466D-807A-4AB3AD58BA66} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {23AF4B57-1B3E-4524-97D1-AF3BF49DDB38} - System32\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {265BBA15-EA12-469D-8D23-CB388D0C3B86} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 6970 => C:\Program Files\HP\HP OfficeJet Pro 6970\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {417EA0DD-B0F5-47AB-8A1B-39BAB141A044} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [722880 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4702CD3A-130B-47D3-A5D8-076511F1D5CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-13] (Google Inc -> Google Inc.)
Task: {4D957F00-AE03-488A-ADF1-7A7935618D36} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3942792 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
Task: {4E515682-2FBD-456D-84E8-2C2AE1A99EAC} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe
Task: {57DC3F32-B6AA-47BF-97AD-3E8B4AE0EF49} - System32\Tasks\RtHDVBg_ASC => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {63A6816D-8DFB-428F-B760-71310D105573} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [651200 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {67F23D40-AB31-4E0B-BD92-5ECF10FFCD98} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe
Task: {75A2C3DF-70FA-4F80-9824-476976CC1575} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83A6F655-DE25-4CFD-9F69-2C01510C89AB} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_pepper.exe [1453112 2019-09-10] (Adobe Inc. -> Adobe)
Task: {83D524B4-D3F3-456B-9C17-C6FF4B885D5E} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {86A2C758-EBBD-4544-822A-AB7C2E8AE0AF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8B3091D0-FCE7-4744-90F2-0796740427E2} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe [1380232 2019-08-07] (AVAST Software s.r.o. -> AVAST Software)
Task: {90B0EA1E-611D-48F4-86ED-11D7AEB399E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-13] (Google Inc -> Google Inc.)
Task: {91D82CCE-EBD2-4165-A6F5-626431A83592} - System32\Tasks\CareCenter\OfficeSyncProcess_Reg_HKCURun_S-1-5-21-3459175485-1894272334-218040335-1001 => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {9460CF9F-ADD1-42CC-B2DB-5F8653ACA78E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9476B46D-5F9C-43EC-86D9-F9F17FB94944} - System32\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {985FAC56-8983-4D50-B8BF-B7ACA419DC0D} - System32\Tasks\CareCenter\RTHDVCPL_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18391088 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {9900EDCB-D890-422D-9D5E-57A5A821B7AA} - System32\Tasks\CareCenter\EEventManager_Reg_HKLMWow6432Run => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1092304 2016-03-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {A6C646F8-6E9D-46FB-90F7-43784962A86C} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A97E1D08-D8A0-414C-A124-2510AAC4B10D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BEEE2802-6A1B-4EE2-9994-CF2E4E350595} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C9C2C954-FB4E-447D-97C6-56CD6B784E2A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DB789B5C-BEAE-4296-A8F0-E17419422D93} - System32\Tasks\CareCenter\RtHDVBg_ASC_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {DBCCE280-B3FA-4127-A61F-26F07B074894} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {DE0D9209-370F-4989-BEBD-53DBE07FB361} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1540544 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E2A78D50-CB00-40AE-A139-B1B18F9784D7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [651200 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E63B215F-9183-4A90-9239-E45542B7B5F0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2017-10-30] (Acer Incorporated -> Acer Incorporated)
Task: {EE147038-736E-43EC-9995-F115A586F2A4} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {F4B44683-4AC4-4A83-AD59-F450528C6919} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-10] (Adobe Inc. -> Adobe)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE:/EXE:{679CE7F9-0398-4419-9B29-8A93913A9005} /F:UpdateWORKGROUP\LAPTOP-HSB9PMT2$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{190d53dd-fcd9-4015-b81a-fd86731600d9}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{33949d5b-84e8-4e4b-a89f-293f2690d79e}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{5ecce3c7-96a1-4e03-a8fa-001e740db32a}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{7d6f4ca3-0d78-498c-967d-77ee5cac155c}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Internet Explorer:
==================
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-3459175485-1894272334-218040335-1001 -> DefaultScope {6DCFB924-DF70-478F-9C7F-4F07B7A4AD16} URL =
SearchScopes: HKU\S-1-5-21-3459175485-1894272334-218040335-1001 -> {6DCFB924-DF70-478F-9C7F-4F07B7A4AD16} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FireFox:
========
FF DefaultProfile: 52aowm29.default
FF ProfilePath: C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default [2019-09-17]
FF Extension: (Français Language Pack) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2018-07-16] [Legacy]
FF Extension: (Mozilla Partner Defaults) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\partnerdefaults@mozilla.com [2018-07-13] [Legacy]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\sp@avast.com.xpi [2019-06-16]
FF Extension: (Avast Online Security) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\wrc@avast.com.xpi [2018-07-19]
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2017-12-23] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-07-03] [Legacy] [non signé]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3459175485-1894272334-218040335-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Agnès Laurent\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2019-05-13] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
Chrome:
=======
CHR NewTab: Default -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html"
CHR Profile: C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default [2019-09-18]
CHR Extension: (Slides) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-07-13]
CHR Extension: (Docs) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-07-13]
CHR Extension: (Google Drive) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-13]
CHR Extension: (YouTube) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-07-13]
CHR Extension: (Ecosia Search) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2019-07-04]
CHR Extension: (Sheets) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-07-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-18]
CHR Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2019-08-30]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-13]
CHR Extension: (Gmail) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-10]
CHR Profile: C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\System Profile [2018-11-27]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5975136 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [347024 2017-06-01] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [405072 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [416576 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [83992 2017-08-23] (Dashlane -> Dashlane, Inc.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 IntelAudioService; C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe [169576 2017-07-28] (Intel(R) Smart Sound Technology -> Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-10-26] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [7343496 2019-07-19] (AVAST Software s.r.o. -> AVAST Software)
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.35\bin\httpd.exe [29696 2018-09-19] (Apache Software Foundation) [Fichier non signé]
S3 wampmariadb64; c:\wamp64\bin\mariadb\mariadb10.3.9\bin\mysqld.exe [15788968 2018-08-14] (MariaDB Corporation Ab -> )
S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.23\bin\mysqld.exe [39626752 2018-06-08] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\NisSrv.exe [3630832 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MsMpEng.exe [103168 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
S3 UEIPSvc; "C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe" [X]
S2 WildTangentHelper; "C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe" [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [209552 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [263008 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [205848 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [61472 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-07] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [169408 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [552848 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112312 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [87944 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1030784 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [478096 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [387176 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S3 cpuz143; C:\Users\Agnès Laurent\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48952 2019-09-18] (CPUID -> CPUID) <==== ATTENTION
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [22320 2017-10-30] (Acer Incorporated -> Acer Incorporated)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-09-18] (Malwarebytes Corporation -> Malwarebytes)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvac.inf_amd64_d424a07e89ab274a\nvlddmkm.sys [17036560 2018-03-08] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [16688 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-12] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [782304 2017-04-11] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [66144 2016-09-06] (Synaptics Incorporated -> Synaptics Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [346336 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-09-18 21:26 - 2019-09-18 21:32 - 000031984 _____ C:\Users\Agnès Laurent\Desktop\FRST.txt
2019-09-18 21:26 - 2019-09-18 21:26 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\FRST-OlderVersion
2019-09-18 20:51 - 2019-09-18 20:51 - 000335408 _____ C:\Users\Agnès Laurent\Desktop\ZHPDiag.txt
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
2019-09-18 13:21 - 2019-09-18 20:20 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-09-18 01:16 - 2019-09-18 01:16 - 000001553 _____ C:\Users\Agnès Laurent\Desktop\malawarebytes.txt
2019-09-18 00:50 - 2019-09-18 00:50 - 000005561 _____ C:\Users\Agnès Laurent\Desktop\AdwCleaner[C02].txt
2019-09-17 19:05 - 2019-09-17 19:05 - 007636680 _____ (Malwarebytes) C:\Users\Agnès Laurent\Downloads\adwcleaner_7.4.1.exe
2019-09-17 17:50 - 2019-09-17 17:50 - 000018959 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner (R).txt
2019-09-17 17:40 - 2019-09-17 17:40 - 000018635 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner (S).txt
2019-09-17 17:07 - 2019-09-17 17:10 - 001624684 _____ C:\WINDOWS\Minidump\091719-18062-01.dmp
2019-09-17 16:44 - 2019-09-17 16:45 - 001282108 _____ C:\WINDOWS\Minidump\091719-18640-01.dmp
2019-09-17 16:34 - 2019-09-17 16:35 - 001659012 _____ C:\WINDOWS\Minidump\091719-18359-01.dmp
2019-09-17 16:06 - 2019-09-17 16:07 - 001711356 _____ C:\WINDOWS\Minidump\091719-27921-01.dmp
2019-09-17 14:48 - 2019-09-17 14:50 - 001746804 _____ C:\WINDOWS\Minidump\091719-26437-01.dmp
2019-09-17 11:39 - 2019-09-17 11:39 - 000000000 ____D C:\WINDOWS\PCHEALTH
2019-09-17 10:15 - 2019-09-17 10:23 - 000000000 ____D C:\AdwCleaner
2019-09-15 18:40 - 2019-09-15 18:40 - 000326802 _____ C:\Users\Agnès Laurent\Desktop\speecy.pdf
2019-09-15 18:32 - 2019-09-15 18:32 - 000000841 _____ C:\Users\Public\Desktop\Speccy.lnk
2019-09-15 18:32 - 2019-09-15 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2019-09-15 18:32 - 2019-09-15 18:32 - 000000000 ____D C:\Program Files\Speccy
2019-09-15 17:56 - 2019-09-15 17:56 - 000000000 ____D C:\ESD
2019-09-15 17:54 - 2019-09-15 17:54 - 000000000 ___HD C:\$Windows.~WS
2019-09-15 17:30 - 2019-09-15 17:30 - 000000000 ____D C:\$WINDOWS.~BT
2019-09-14 16:44 - 2019-09-14 16:44 - 000272497 _____ C:\Users\Agnès Laurent\Desktop\crystal.pdf
2019-09-14 16:32 - 2019-09-18 09:11 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-09-14 16:28 - 2019-09-14 16:28 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\CrystalDiskMark
2019-09-14 10:52 - 2019-09-14 10:52 - 000001354 _____ C:\Users\Agnès Laurent\Desktop\pcastuce.txt
2019-09-13 22:40 - 2019-09-13 22:40 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\mbam
2019-09-13 22:39 - 2019-09-13 22:39 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\mbamtray
2019-09-13 22:38 - 2019-09-13 22:38 - 000001916 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-09-13 22:38 - 2019-09-13 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-09-13 22:38 - 2019-08-27 05:50 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-09-13 22:38 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-09-13 22:37 - 2019-09-13 22:37 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-09-13 22:37 - 2019-09-13 22:37 - 000000000 ____D C:\Program Files\Malwarebytes
2019-09-13 22:13 - 2019-09-13 22:13 - 000000887 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner.lnk
2019-09-13 17:36 - 2019-09-18 21:26 - 000000000 ____D C:\FRST
2019-09-13 17:36 - 2019-09-13 17:36 - 000000000 ____D C:\ProgramData\Mozilla
2019-09-13 16:48 - 2019-09-18 21:26 - 001615360 _____ (Farbar) C:\Users\Agnès Laurent\Desktop\FRST64.exe
2019-09-13 16:33 - 2019-09-18 20:51 - 000000135 _____ C:\Users\Agnès
2019-09-13 16:32 - 2019-09-18 20:51 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Roaming\ZHP
2019-09-13 16:32 - 2019-09-18 19:38 - 000000736 _____ C:\Users\Agnès Laurent\Desktop\ZHPDiag.lnk
2019-09-13 16:32 - 2019-09-13 22:13 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\ZHP
2019-09-13 15:08 - 2019-09-13 15:08 - 000000000 ___HD C:\$SysReset
2019-09-13 14:26 - 2019-09-14 09:59 - 000000000 ____D C:\WINDOWS\System32\Tasks\CareCenter
2019-09-13 11:10 - 2019-09-17 17:07 - 000000000 ____D C:\WINDOWS\Minidump
2019-09-10 17:23 - 2019-09-10 17:24 - 000000000 ____D C:\Users\Agnès Laurent\Documents\amalia
2019-09-10 17:18 - 2019-09-12 10:58 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Droon
2019-09-09 13:49 - 2019-09-09 13:49 - 000249770 _____ C:\Users\Agnès Laurent\Desktop\Forfait portrait_eric Lahurte.pdf
2019-09-08 17:08 - 2019-09-08 17:08 - 000085456 _____ C:\Users\Agnès Laurent\Desktop\instructions.pdf
2019-09-08 17:08 - 2019-09-08 17:08 - 000059778 _____ C:\Users\Agnès Laurent\Desktop\informations.pdf
2019-09-08 17:05 - 2019-09-08 17:05 - 000104416 _____ C:\Users\Agnès Laurent\Desktop\fiche_famille octave.pdf
2019-09-08 17:05 - 2019-09-08 17:05 - 000013123 _____ C:\Users\Agnès Laurent\Desktop\DSE octave.pdf
2019-09-08 00:53 - 2019-09-08 00:53 - 003978821 _____ C:\Users\Agnès Laurent\Desktop\mike impots.zip
2019-09-06 13:52 - 2019-09-06 13:52 - 000363912 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-09-06 13:52 - 2019-09-06 13:52 - 000236024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-09-06 13:52 - 2019-09-06 13:52 - 000169408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-09-05 14:47 - 2019-09-05 14:47 - 000107941 _____ C:\Users\Agnès Laurent\Documents\uber eat.pdf
2019-09-05 14:46 - 2019-09-05 14:46 - 000472351 _____ C:\Users\Agnès Laurent\Documents\uber eat.pptx
2019-09-04 11:24 - 2019-09-04 11:24 - 001768587 _____ C:\Users\Agnès Laurent\Desktop\20190827075741_TICKET_T2757E465362O31108.pdf
2019-09-02 15:26 - 2019-09-02 15:26 - 010951370 _____ C:\Users\Agnès Laurent\Desktop\linkedin-targeting-playbook-v2.pdf
2019-09-02 14:08 - 2019-09-18 21:44 - 000000000 ____D C:\Users\Agnès Laurent\Documents\les 2 oursons
2019-08-22 16:17 - 2019-08-22 16:17 - 000023509 _____ C:\Users\Agnès Laurent\Desktop\Extrait de comptes 30066 10846 000201473.. au 2019-07-31.pdf
2019-08-13 00:12 - 2019-08-13 00:30 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-08-13 00:10 - 2019-08-13 00:12 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-08-13 00:10 - 2019-08-13 00:10 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-08-13 00:02 - 2019-08-13 00:02 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-08-13 00:02 - 2019-08-13 00:02 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-08-13 00:02 - 2019-08-13 00:02 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files\MSBuild
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-08-12 23:52 - 2019-08-12 23:52 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-08-12 23:50 - 2019-08-12 23:50 - 000000020 ___SH C:\Users\Agnès Laurent\ntuser.ini
2019-08-12 23:49 - 2019-09-18 21:22 - 000003510 _____ C:\WINDOWS\System32\Tasks\DashlaneUpgradeCheck
2019-08-12 23:49 - 2019-09-18 20:23 - 000004294 _____ C:\WINDOWS\System32\Tasks\Avast SecureLine VPN Update
2019-08-12 23:49 - 2019-09-18 20:23 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-08-12 23:49 - 2019-09-18 20:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-08-12 23:49 - 2019-09-10 17:21 - 000004788 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-08-12 23:49 - 2019-09-10 17:21 - 000004594 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2019-08-12 23:49 - 2019-09-08 21:53 - 000004302 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2019-08-12 23:49 - 2019-09-08 21:53 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-08-12 23:49 - 2019-09-08 21:53 - 000003504 _____ C:\WINDOWS\System32\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-08-12 23:49 - 2019-09-08 21:53 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003326 _____ C:\WINDOWS\System32\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-08-12 23:49 - 2019-09-08 21:53 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2019-08-12 23:49 - 2019-09-08 21:53 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002968 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002820 _____ C:\WINDOWS\System32\Tasks\ACC
2019-08-12 23:49 - 2019-09-08 21:53 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002768 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2019-08-12 23:49 - 2019-09-08 21:53 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002664 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP OfficeJet Pro 6970
2019-08-12 23:49 - 2019-09-08 21:53 - 000002300 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2019-08-12 23:49 - 2019-09-08 21:53 - 000002292 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ASC
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Oem
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-08-12 23:48 - 2019-08-12 23:49 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-08-12 23:48 - 2019-08-12 23:49 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-08-12 23:44 - 2019-09-18 20:27 - 001771406 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-08-12 23:36 - 2019-09-18 19:38 - 000000000 ____D C:\Users\Agnès Laurent
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Voisinage réseau
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Voisinage d'impression
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Modèles
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Mes documents
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Menu Démarrer
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Mes vidéos
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Mes images
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Ma musique
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\AppData\Local\Historique
2019-08-12 23:36 - 2019-03-19 06:46 - 000001105 _____ C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-08-12 23:33 - 2019-08-12 23:33 - 000000000 ____D C:\ProgramData\USOShared
2019-08-12 23:32 - 2019-08-13 00:06 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-08-12 23:32 - 2017-11-12 15:21 - 000140296 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-08-12 23:32 - 2017-11-12 15:21 - 000116744 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2019-08-12 23:31 - 2019-09-18 21:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-08-12 23:31 - 2019-09-18 11:28 - 000403264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-08-03 01:04 - 2019-09-08 18:23 - 000000000 _____ C:\WINDOWS\system32\last.dump
2019-08-01 11:27 - 2019-08-01 11:27 - 000515955 _____ C:\Users\Agnès Laurent\Desktop\2035-A_B _sd_2018_pour_2017_ remplies.pdf.zip
2019-08-01 11:10 - 2019-08-01 11:11 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\Radio FRance 8 octbre 2019
2019-08-01 11:10 - 2019-08-01 11:10 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\cheque cinema
2019-07-29 20:41 - 2019-07-30 01:24 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Naxicap
2019-07-28 21:39 - 2019-09-15 17:54 - 000000000 ___DC C:\WINDOWS\Panther
2019-07-19 15:46 - 2019-07-19 15:46 - 000090508 _____ C:\Users\Agnès Laurent\Desktop\Relance 2018.pdf
2019-07-18 11:59 - 2019-07-18 11:59 - 002203000 _____ C:\Users\Agnès Laurent\Desktop\MP_INNOVATION_N3.pdf
2019-07-10 18:02 - 2019-07-10 18:02 - 000175989 _____ C:\Users\Agnès Laurent\Desktop\pabloedf.pdf
2019-07-10 18:01 - 2019-07-10 18:01 - 000182456 _____ C:\Users\Agnès Laurent\Desktop\c5579f5b-6069-4f63-b3e5-4425331253c3.pdf
2019-07-05 11:23 - 2019-07-05 11:23 - 000005055 _____ C:\Users\Agnès Laurent\Desktop\CA20190705_112323.xlsx
2019-06-21 16:45 - 2019-06-21 16:45 - 002051023 _____ C:\Users\Agnès Laurent\Documents\Copie de SSA-Campaign-Content Plan-21052019_R&V.xlsx
==================== Trois mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-09-18 21:36 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-18 21:15 - 2018-07-14 12:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-09-18 20:27 - 2019-03-19 14:00 - 000793010 _____ C:\WINDOWS\system32\perfh00C.dat
2019-09-18 20:27 - 2019-03-19 14:00 - 000150042 _____ C:\WINDOWS\system32\perfc00C.dat
2019-09-18 20:27 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2019-09-18 20:23 - 2018-07-16 13:13 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\AVAST Software
2019-09-18 20:20 - 2018-07-13 08:45 - 000000000 __SHD C:\Users\Agnès Laurent\IntelGraphicsProfiles
2019-09-18 20:20 - 2017-12-23 05:56 - 000000000 ____D C:\ProgramData\NVIDIA
2019-09-18 19:37 - 2018-07-16 11:15 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Fichiers Outlook
2019-09-18 19:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-09-18 13:19 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-09-18 13:15 - 2018-07-16 10:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-09-18 12:16 - 2018-07-13 10:31 - 000000000 ____D C:\Users\Agnès Laurent\Documents\two on park
2019-09-18 11:39 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-09-18 10:59 - 2018-07-15 14:45 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\CrashDumps
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\TextInput
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-09-18 09:37 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-09-18 09:13 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2019-09-18 09:13 - 2018-07-13 08:45 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\Packages
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\ProgramData\Acer
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\Program Files\Acer
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\Program Files (x86)\Acer
2019-09-17 13:00 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2019-09-17 13:00 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2019-09-17 11:59 - 2019-03-19 14:02 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2019-09-17 11:59 - 2019-03-19 14:02 - 000018449 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2019-09-17 10:51 - 2018-07-13 09:03 - 000000000 ____D C:\Users\Agnès Laurent\AppData\LocalLow\Mozilla
2019-09-17 10:23 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-09-16 10:42 - 2018-07-13 10:01 - 000000000 ____D C:\Users\Agnès Laurent\Documents\amelimelo
2019-09-14 01:19 - 2018-07-13 08:45 - 000000000 ___RD C:\Users\Agnès Laurent\3D Objects
2019-09-14 01:19 - 2017-12-23 05:37 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-09-14 01:07 - 2017-12-23 06:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-09-14 01:07 - 2017-12-23 06:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-09-13 22:38 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-09-13 17:34 - 2017-12-23 06:06 - 000001244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-09-13 14:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-09-13 14:24 - 2018-08-07 20:44 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\ElevatedDiagnostics
2019-09-12 00:10 - 2018-11-20 12:47 - 000000951 _____ C:\WINDOWS\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}.job
2019-09-12 00:10 - 2018-11-20 12:47 - 000000765 _____ C:\WINDOWS\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}.job
2019-09-11 19:08 - 2018-07-13 10:23 - 000000000 ____D C:\Users\Agnès Laurent\Documents\facturation client
2019-09-11 13:52 - 2018-07-13 10:01 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Administration
2019-09-10 17:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-09-10 17:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-09-10 17:18 - 2018-08-29 11:23 - 000000000 ____D C:\Users\Agnès Laurent\Documents\CNEAP
2019-09-09 17:55 - 2018-07-13 09:23 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\PlaceholderTileLogoFolder
2019-09-09 14:59 - 2018-07-13 10:31 - 000000000 ____D C:\Users\Agnès Laurent\Documents\PERSO
2019-09-06 13:52 - 2019-02-13 11:37 - 000552848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2019-09-06 13:52 - 2019-01-14 17:08 - 000263008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-09-06 13:52 - 2019-01-07 14:30 - 000205848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-09-06 13:52 - 2019-01-07 14:30 - 000061472 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-09-06 13:52 - 2018-10-23 17:59 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 001030784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000478096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000387176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000209552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000112312 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000087944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-09-05 10:40 - 2018-10-02 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2019-09-05 10:40 - 2018-10-02 17:39 - 000000000 ____D C:\ProgramData\EPSON
2019-09-03 21:31 - 2019-03-12 12:24 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2019-09-02 10:28 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\servicing
2019-09-02 10:18 - 2018-07-13 10:34 - 000000000 ____D C:\Users\Agnès Laurent\Documents\quadrants
2019-08-31 01:01 - 2018-07-13 09:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-08-31 00:39 - 2018-07-13 09:21 - 134272480 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-08-28 15:25 - 2018-07-16 17:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-08-28 15:21 - 2018-07-13 09:07 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-08-28 15:18 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\appcompat
2019-08-19 21:01 - 2018-07-13 21:07 - 000000000 ____D C:\ProgramData\Packages
2019-08-19 19:22 - 2018-07-13 09:21 - 000000000 ____D C:\Program Files\rempl
==================== Fichiers à la racine de certains dossiers ================
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
==================== SigCheckExt ================
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppui.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppui.dll
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
2019-09-13 16:48 - 2019-09-18 21:26 - 001615360 _____ (Farbar) C:\Users\Agnès Laurent\Desktop\FRST64.exe
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d�marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{4f01eb1a-e792-11e7-90e5-806e6f6e6963}
{4f01eb1b-e792-11e7-90e5-806e6f6e6963}
{4f01eb1c-e792-11e7-90e5-806e6f6e6963}
timeout 0
Gestionnaire de d�marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1a-e792-11e7-90e5-806e6f6e6963}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1b-e792-11e7-90e5-806e6f6e6963}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1c-e792-11e7-90e5-806e6f6e6963}
description EFI Network
Chargeur de d�marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
nx OptIn
bootmenupolicy Standard
Chargeur de d�marrage Windows
-----------------------------
identificateur {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre � partir de la mise en veille prolong�e
-------------------------------------------------
identificateur {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m�moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m�moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Param�tres EMS
--------------
identificateur {emssettings}
bootems No
Param�tres du d�bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m�moire RAM
----------------------
identificateur {badmemory}
Param�tres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Param�tres du chargeur de d�marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Param�tres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Param�tres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p�riph�rique
-----------------------
identificateur {d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ============================
Exécuté par Agnès Laurent (administrateur) sur LAPTOP-HSB9PMT2 (Acer Aspire A515-51G) (18-09-2019 21:26:42)
Exécuté depuis C:\Users\Agnès Laurent\Desktop
Profils chargés: Agnès Laurent (Profils disponibles: Agnès Laurent)
Platform: Windows 10 Home Version 1903 18362.1 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\Vpn.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ab736fe7f232ee1e\IntelCpHeciSvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.53.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19072.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1923008 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Agnès Laurent\AppData\Local\Microsoft\Teams\Update.exe [1789552 2019-09-03] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\...\MountPoints2: {c7d776ed-861a-11e8-90f4-9822ef89111e} - "D:\WD SmartWare.exe" autoplay=true
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-09-14]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {00698A3D-84F2-43D2-88B3-7BA8D439D7A1} - System32\Tasks\CareCenter\RtHDVBg_CTPreset_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {039D2B19-4961-471A-991E-43C43E7BD695} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [947136 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12E747DC-859E-4B2A-885C-1421769F3E7C} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Agnès Laurent\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {1742EA8C-3AC1-4A8F-8752-E548E7659A8F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [722880 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {191AE6A8-9F6D-466D-807A-4AB3AD58BA66} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {23AF4B57-1B3E-4524-97D1-AF3BF49DDB38} - System32\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {265BBA15-EA12-469D-8D23-CB388D0C3B86} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 6970 => C:\Program Files\HP\HP OfficeJet Pro 6970\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {417EA0DD-B0F5-47AB-8A1B-39BAB141A044} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [722880 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4702CD3A-130B-47D3-A5D8-076511F1D5CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-13] (Google Inc -> Google Inc.)
Task: {4D957F00-AE03-488A-ADF1-7A7935618D36} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3942792 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
Task: {4E515682-2FBD-456D-84E8-2C2AE1A99EAC} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe
Task: {57DC3F32-B6AA-47BF-97AD-3E8B4AE0EF49} - System32\Tasks\RtHDVBg_ASC => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {63A6816D-8DFB-428F-B760-71310D105573} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [651200 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {67F23D40-AB31-4E0B-BD92-5ECF10FFCD98} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe
Task: {75A2C3DF-70FA-4F80-9824-476976CC1575} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83A6F655-DE25-4CFD-9F69-2C01510C89AB} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_pepper.exe [1453112 2019-09-10] (Adobe Inc. -> Adobe)
Task: {83D524B4-D3F3-456B-9C17-C6FF4B885D5E} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {86A2C758-EBBD-4544-822A-AB7C2E8AE0AF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8B3091D0-FCE7-4744-90F2-0796740427E2} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe [1380232 2019-08-07] (AVAST Software s.r.o. -> AVAST Software)
Task: {90B0EA1E-611D-48F4-86ED-11D7AEB399E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-13] (Google Inc -> Google Inc.)
Task: {91D82CCE-EBD2-4165-A6F5-626431A83592} - System32\Tasks\CareCenter\OfficeSyncProcess_Reg_HKCURun_S-1-5-21-3459175485-1894272334-218040335-1001 => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {9460CF9F-ADD1-42CC-B2DB-5F8653ACA78E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9476B46D-5F9C-43EC-86D9-F9F17FB94944} - System32\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {985FAC56-8983-4D50-B8BF-B7ACA419DC0D} - System32\Tasks\CareCenter\RTHDVCPL_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18391088 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {9900EDCB-D890-422D-9D5E-57A5A821B7AA} - System32\Tasks\CareCenter\EEventManager_Reg_HKLMWow6432Run => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1092304 2016-03-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {A6C646F8-6E9D-46FB-90F7-43784962A86C} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A97E1D08-D8A0-414C-A124-2510AAC4B10D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BEEE2802-6A1B-4EE2-9994-CF2E4E350595} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C9C2C954-FB4E-447D-97C6-56CD6B784E2A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DB789B5C-BEAE-4296-A8F0-E17419422D93} - System32\Tasks\CareCenter\RtHDVBg_ASC_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506352 2018-10-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {DBCCE280-B3FA-4127-A61F-26F07B074894} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {DE0D9209-370F-4989-BEBD-53DBE07FB361} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1540544 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E2A78D50-CB00-40AE-A139-B1B18F9784D7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [651200 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E63B215F-9183-4A90-9239-E45542B7B5F0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2017-10-30] (Acer Incorporated -> Acer Incorporated)
Task: {EE147038-736E-43EC-9995-F115A586F2A4} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {F4B44683-4AC4-4A83-AD59-F450528C6919} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-10] (Adobe Inc. -> Adobe)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKAE.EXE:/EXE:{679CE7F9-0398-4419-9B29-8A93913A9005} /F:UpdateWORKGROUP\LAPTOP-HSB9PMT2$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{190d53dd-fcd9-4015-b81a-fd86731600d9}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{33949d5b-84e8-4e4b-a89f-293f2690d79e}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{5ecce3c7-96a1-4e03-a8fa-001e740db32a}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{7d6f4ca3-0d78-498c-967d-77ee5cac155c}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Internet Explorer:
==================
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-3459175485-1894272334-218040335-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-3459175485-1894272334-218040335-1001 -> DefaultScope {6DCFB924-DF70-478F-9C7F-4F07B7A4AD16} URL =
SearchScopes: HKU\S-1-5-21-3459175485-1894272334-218040335-1001 -> {6DCFB924-DF70-478F-9C7F-4F07B7A4AD16} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FireFox:
========
FF DefaultProfile: 52aowm29.default
FF ProfilePath: C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default [2019-09-17]
FF Extension: (Français Language Pack) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2018-07-16] [Legacy]
FF Extension: (Mozilla Partner Defaults) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\partnerdefaults@mozilla.com [2018-07-13] [Legacy]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\sp@avast.com.xpi [2019-06-16]
FF Extension: (Avast Online Security) - C:\Users\Agnès Laurent\AppData\Roaming\Mozilla\Firefox\Profiles\52aowm29.default\Extensions\wrc@avast.com.xpi [2018-07-19]
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2017-12-23] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-07-03] [Legacy] [non signé]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3459175485-1894272334-218040335-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Agnès Laurent\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2019-05-13] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
Chrome:
=======
CHR NewTab: Default -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html"
CHR Profile: C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default [2019-09-18]
CHR Extension: (Slides) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-07-13]
CHR Extension: (Docs) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-07-13]
CHR Extension: (Google Drive) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-13]
CHR Extension: (YouTube) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-07-13]
CHR Extension: (Ecosia Search) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2019-07-04]
CHR Extension: (Sheets) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-07-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-18]
CHR Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2019-08-30]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-13]
CHR Extension: (Gmail) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-10]
CHR Profile: C:\Users\Agnès Laurent\AppData\Local\Google\Chrome\User Data\System Profile [2018-11-27]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5975136 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [347024 2017-06-01] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [405072 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [416576 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [83992 2017-08-23] (Dashlane -> Dashlane, Inc.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 IntelAudioService; C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe [169576 2017-07-28] (Intel(R) Smart Sound Technology -> Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-10-26] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [7343496 2019-07-19] (AVAST Software s.r.o. -> AVAST Software)
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.35\bin\httpd.exe [29696 2018-09-19] (Apache Software Foundation) [Fichier non signé]
S3 wampmariadb64; c:\wamp64\bin\mariadb\mariadb10.3.9\bin\mysqld.exe [15788968 2018-08-14] (MariaDB Corporation Ab -> )
S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.23\bin\mysqld.exe [39626752 2018-06-08] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\NisSrv.exe [3630832 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MsMpEng.exe [103168 2019-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
S3 UEIPSvc; "C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe" [X]
S2 WildTangentHelper; "C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe" [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [209552 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [263008 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [205848 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [61472 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-07] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [169408 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [552848 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112312 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [87944 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1030784 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [478096 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [387176 2019-09-06] (AVAST Software s.r.o. -> AVAST Software)
S3 cpuz143; C:\Users\Agnès Laurent\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48952 2019-09-18] (CPUID -> CPUID) <==== ATTENTION
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [22320 2017-10-30] (Acer Incorporated -> Acer Incorporated)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-09-18] (Malwarebytes Corporation -> Malwarebytes)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvac.inf_amd64_d424a07e89ab274a\nvlddmkm.sys [17036560 2018-03-08] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [16688 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-12] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [782304 2017-04-11] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [66144 2016-09-06] (Synaptics Incorporated -> Synaptics Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [346336 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-09-18 21:26 - 2019-09-18 21:32 - 000031984 _____ C:\Users\Agnès Laurent\Desktop\FRST.txt
2019-09-18 21:26 - 2019-09-18 21:26 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\FRST-OlderVersion
2019-09-18 20:51 - 2019-09-18 20:51 - 000335408 _____ C:\Users\Agnès Laurent\Desktop\ZHPDiag.txt
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
2019-09-18 13:21 - 2019-09-18 20:20 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-09-18 01:16 - 2019-09-18 01:16 - 000001553 _____ C:\Users\Agnès Laurent\Desktop\malawarebytes.txt
2019-09-18 00:50 - 2019-09-18 00:50 - 000005561 _____ C:\Users\Agnès Laurent\Desktop\AdwCleaner[C02].txt
2019-09-17 19:05 - 2019-09-17 19:05 - 007636680 _____ (Malwarebytes) C:\Users\Agnès Laurent\Downloads\adwcleaner_7.4.1.exe
2019-09-17 17:50 - 2019-09-17 17:50 - 000018959 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner (R).txt
2019-09-17 17:40 - 2019-09-17 17:40 - 000018635 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner (S).txt
2019-09-17 17:07 - 2019-09-17 17:10 - 001624684 _____ C:\WINDOWS\Minidump\091719-18062-01.dmp
2019-09-17 16:44 - 2019-09-17 16:45 - 001282108 _____ C:\WINDOWS\Minidump\091719-18640-01.dmp
2019-09-17 16:34 - 2019-09-17 16:35 - 001659012 _____ C:\WINDOWS\Minidump\091719-18359-01.dmp
2019-09-17 16:06 - 2019-09-17 16:07 - 001711356 _____ C:\WINDOWS\Minidump\091719-27921-01.dmp
2019-09-17 14:48 - 2019-09-17 14:50 - 001746804 _____ C:\WINDOWS\Minidump\091719-26437-01.dmp
2019-09-17 11:39 - 2019-09-17 11:39 - 000000000 ____D C:\WINDOWS\PCHEALTH
2019-09-17 10:15 - 2019-09-17 10:23 - 000000000 ____D C:\AdwCleaner
2019-09-15 18:40 - 2019-09-15 18:40 - 000326802 _____ C:\Users\Agnès Laurent\Desktop\speecy.pdf
2019-09-15 18:32 - 2019-09-15 18:32 - 000000841 _____ C:\Users\Public\Desktop\Speccy.lnk
2019-09-15 18:32 - 2019-09-15 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2019-09-15 18:32 - 2019-09-15 18:32 - 000000000 ____D C:\Program Files\Speccy
2019-09-15 17:56 - 2019-09-15 17:56 - 000000000 ____D C:\ESD
2019-09-15 17:54 - 2019-09-15 17:54 - 000000000 ___HD C:\$Windows.~WS
2019-09-15 17:30 - 2019-09-15 17:30 - 000000000 ____D C:\$WINDOWS.~BT
2019-09-14 16:44 - 2019-09-14 16:44 - 000272497 _____ C:\Users\Agnès Laurent\Desktop\crystal.pdf
2019-09-14 16:32 - 2019-09-18 09:11 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-09-14 16:28 - 2019-09-14 16:28 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\CrystalDiskMark
2019-09-14 10:52 - 2019-09-14 10:52 - 000001354 _____ C:\Users\Agnès Laurent\Desktop\pcastuce.txt
2019-09-13 22:40 - 2019-09-13 22:40 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\mbam
2019-09-13 22:39 - 2019-09-13 22:39 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\mbamtray
2019-09-13 22:38 - 2019-09-13 22:38 - 000001916 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-09-13 22:38 - 2019-09-13 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-09-13 22:38 - 2019-08-27 05:50 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-09-13 22:38 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-09-13 22:37 - 2019-09-13 22:37 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-09-13 22:37 - 2019-09-13 22:37 - 000000000 ____D C:\Program Files\Malwarebytes
2019-09-13 22:13 - 2019-09-13 22:13 - 000000887 _____ C:\Users\Agnès Laurent\Desktop\ZHPCleaner.lnk
2019-09-13 17:36 - 2019-09-18 21:26 - 000000000 ____D C:\FRST
2019-09-13 17:36 - 2019-09-13 17:36 - 000000000 ____D C:\ProgramData\Mozilla
2019-09-13 16:48 - 2019-09-18 21:26 - 001615360 _____ (Farbar) C:\Users\Agnès Laurent\Desktop\FRST64.exe
2019-09-13 16:33 - 2019-09-18 20:51 - 000000135 _____ C:\Users\Agnès
2019-09-13 16:32 - 2019-09-18 20:51 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Roaming\ZHP
2019-09-13 16:32 - 2019-09-18 19:38 - 000000736 _____ C:\Users\Agnès Laurent\Desktop\ZHPDiag.lnk
2019-09-13 16:32 - 2019-09-13 22:13 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\ZHP
2019-09-13 15:08 - 2019-09-13 15:08 - 000000000 ___HD C:\$SysReset
2019-09-13 14:26 - 2019-09-14 09:59 - 000000000 ____D C:\WINDOWS\System32\Tasks\CareCenter
2019-09-13 11:10 - 2019-09-17 17:07 - 000000000 ____D C:\WINDOWS\Minidump
2019-09-10 17:23 - 2019-09-10 17:24 - 000000000 ____D C:\Users\Agnès Laurent\Documents\amalia
2019-09-10 17:18 - 2019-09-12 10:58 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Droon
2019-09-09 13:49 - 2019-09-09 13:49 - 000249770 _____ C:\Users\Agnès Laurent\Desktop\Forfait portrait_eric Lahurte.pdf
2019-09-08 17:08 - 2019-09-08 17:08 - 000085456 _____ C:\Users\Agnès Laurent\Desktop\instructions.pdf
2019-09-08 17:08 - 2019-09-08 17:08 - 000059778 _____ C:\Users\Agnès Laurent\Desktop\informations.pdf
2019-09-08 17:05 - 2019-09-08 17:05 - 000104416 _____ C:\Users\Agnès Laurent\Desktop\fiche_famille octave.pdf
2019-09-08 17:05 - 2019-09-08 17:05 - 000013123 _____ C:\Users\Agnès Laurent\Desktop\DSE octave.pdf
2019-09-08 00:53 - 2019-09-08 00:53 - 003978821 _____ C:\Users\Agnès Laurent\Desktop\mike impots.zip
2019-09-06 13:52 - 2019-09-06 13:52 - 000363912 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-09-06 13:52 - 2019-09-06 13:52 - 000236024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-09-06 13:52 - 2019-09-06 13:52 - 000169408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-09-05 14:47 - 2019-09-05 14:47 - 000107941 _____ C:\Users\Agnès Laurent\Documents\uber eat.pdf
2019-09-05 14:46 - 2019-09-05 14:46 - 000472351 _____ C:\Users\Agnès Laurent\Documents\uber eat.pptx
2019-09-04 11:24 - 2019-09-04 11:24 - 001768587 _____ C:\Users\Agnès Laurent\Desktop\20190827075741_TICKET_T2757E465362O31108.pdf
2019-09-02 15:26 - 2019-09-02 15:26 - 010951370 _____ C:\Users\Agnès Laurent\Desktop\linkedin-targeting-playbook-v2.pdf
2019-09-02 14:08 - 2019-09-18 21:44 - 000000000 ____D C:\Users\Agnès Laurent\Documents\les 2 oursons
2019-08-22 16:17 - 2019-08-22 16:17 - 000023509 _____ C:\Users\Agnès Laurent\Desktop\Extrait de comptes 30066 10846 000201473.. au 2019-07-31.pdf
2019-08-13 00:12 - 2019-08-13 00:30 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-08-13 00:10 - 2019-08-13 00:12 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-08-13 00:10 - 2019-08-13 00:10 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-08-13 00:02 - 2019-08-13 00:02 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-08-13 00:02 - 2019-08-13 00:02 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-08-13 00:02 - 2019-08-13 00:02 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-08-13 00:02 - 2019-08-13 00:02 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files\MSBuild
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-08-13 00:02 - 2019-08-13 00:02 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-08-12 23:52 - 2019-08-12 23:52 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-08-12 23:50 - 2019-08-12 23:50 - 000000020 ___SH C:\Users\Agnès Laurent\ntuser.ini
2019-08-12 23:49 - 2019-09-18 21:22 - 000003510 _____ C:\WINDOWS\System32\Tasks\DashlaneUpgradeCheck
2019-08-12 23:49 - 2019-09-18 20:23 - 000004294 _____ C:\WINDOWS\System32\Tasks\Avast SecureLine VPN Update
2019-08-12 23:49 - 2019-09-18 20:23 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-08-12 23:49 - 2019-09-18 20:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-08-12 23:49 - 2019-09-10 17:21 - 000004788 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-08-12 23:49 - 2019-09-10 17:21 - 000004594 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2019-08-12 23:49 - 2019-09-08 21:53 - 000004302 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2019-08-12 23:49 - 2019-09-08 21:53 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-08-12 23:49 - 2019-09-08 21:53 - 000003504 _____ C:\WINDOWS\System32\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-08-12 23:49 - 2019-09-08 21:53 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003326 _____ C:\WINDOWS\System32\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-08-12 23:49 - 2019-09-08 21:53 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2019-08-12 23:49 - 2019-09-08 21:53 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002968 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002820 _____ C:\WINDOWS\System32\Tasks\ACC
2019-08-12 23:49 - 2019-09-08 21:53 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002768 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2019-08-12 23:49 - 2019-09-08 21:53 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2019-08-12 23:49 - 2019-09-08 21:53 - 000002664 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP OfficeJet Pro 6970
2019-08-12 23:49 - 2019-09-08 21:53 - 000002300 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2019-08-12 23:49 - 2019-09-08 21:53 - 000002292 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ASC
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Oem
2019-08-12 23:49 - 2019-08-12 23:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-08-12 23:48 - 2019-08-12 23:49 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-08-12 23:48 - 2019-08-12 23:49 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-08-12 23:44 - 2019-09-18 20:27 - 001771406 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-08-12 23:36 - 2019-09-18 19:38 - 000000000 ____D C:\Users\Agnès Laurent
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Voisinage réseau
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Voisinage d'impression
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Modèles
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Mes documents
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Menu Démarrer
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Mes vidéos
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Mes images
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\Documents\Ma musique
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2019-08-12 23:36 - 2019-08-12 23:36 - 000000000 _SHDL C:\Users\Agnès Laurent\AppData\Local\Historique
2019-08-12 23:36 - 2019-03-19 06:46 - 000001105 _____ C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-08-12 23:33 - 2019-08-12 23:33 - 000000000 ____D C:\ProgramData\USOShared
2019-08-12 23:32 - 2019-08-13 00:06 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-08-12 23:32 - 2017-11-12 15:21 - 000140296 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-08-12 23:32 - 2017-11-12 15:21 - 000116744 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2019-08-12 23:31 - 2019-09-18 21:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-08-12 23:31 - 2019-09-18 11:28 - 000403264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-08-03 01:04 - 2019-09-08 18:23 - 000000000 _____ C:\WINDOWS\system32\last.dump
2019-08-01 11:27 - 2019-08-01 11:27 - 000515955 _____ C:\Users\Agnès Laurent\Desktop\2035-A_B _sd_2018_pour_2017_ remplies.pdf.zip
2019-08-01 11:10 - 2019-08-01 11:11 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\Radio FRance 8 octbre 2019
2019-08-01 11:10 - 2019-08-01 11:10 - 000000000 ____D C:\Users\Agnès Laurent\Desktop\cheque cinema
2019-07-29 20:41 - 2019-07-30 01:24 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Naxicap
2019-07-28 21:39 - 2019-09-15 17:54 - 000000000 ___DC C:\WINDOWS\Panther
2019-07-19 15:46 - 2019-07-19 15:46 - 000090508 _____ C:\Users\Agnès Laurent\Desktop\Relance 2018.pdf
2019-07-18 11:59 - 2019-07-18 11:59 - 002203000 _____ C:\Users\Agnès Laurent\Desktop\MP_INNOVATION_N3.pdf
2019-07-10 18:02 - 2019-07-10 18:02 - 000175989 _____ C:\Users\Agnès Laurent\Desktop\pabloedf.pdf
2019-07-10 18:01 - 2019-07-10 18:01 - 000182456 _____ C:\Users\Agnès Laurent\Desktop\c5579f5b-6069-4f63-b3e5-4425331253c3.pdf
2019-07-05 11:23 - 2019-07-05 11:23 - 000005055 _____ C:\Users\Agnès Laurent\Desktop\CA20190705_112323.xlsx
2019-06-21 16:45 - 2019-06-21 16:45 - 002051023 _____ C:\Users\Agnès Laurent\Documents\Copie de SSA-Campaign-Content Plan-21052019_R&V.xlsx
==================== Trois mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-09-18 21:36 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-18 21:15 - 2018-07-14 12:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-09-18 20:27 - 2019-03-19 14:00 - 000793010 _____ C:\WINDOWS\system32\perfh00C.dat
2019-09-18 20:27 - 2019-03-19 14:00 - 000150042 _____ C:\WINDOWS\system32\perfc00C.dat
2019-09-18 20:27 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2019-09-18 20:23 - 2018-07-16 13:13 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\AVAST Software
2019-09-18 20:20 - 2018-07-13 08:45 - 000000000 __SHD C:\Users\Agnès Laurent\IntelGraphicsProfiles
2019-09-18 20:20 - 2017-12-23 05:56 - 000000000 ____D C:\ProgramData\NVIDIA
2019-09-18 19:37 - 2018-07-16 11:15 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Fichiers Outlook
2019-09-18 19:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-09-18 13:19 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-09-18 13:15 - 2018-07-16 10:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-09-18 12:16 - 2018-07-13 10:31 - 000000000 ____D C:\Users\Agnès Laurent\Documents\two on park
2019-09-18 11:39 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-09-18 10:59 - 2018-07-15 14:45 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\CrashDumps
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\TextInput
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-09-18 09:47 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-09-18 09:46 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-09-18 09:37 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-09-18 09:13 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2019-09-18 09:13 - 2018-07-13 08:45 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\Packages
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\ProgramData\Acer
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\Program Files\Acer
2019-09-18 00:32 - 2017-12-23 06:02 - 000000000 ____D C:\Program Files (x86)\Acer
2019-09-17 13:00 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2019-09-17 13:00 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2019-09-17 11:59 - 2019-03-19 14:02 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2019-09-17 11:59 - 2019-03-19 14:02 - 000018449 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2019-09-17 10:51 - 2018-07-13 09:03 - 000000000 ____D C:\Users\Agnès Laurent\AppData\LocalLow\Mozilla
2019-09-17 10:23 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-09-16 10:42 - 2018-07-13 10:01 - 000000000 ____D C:\Users\Agnès Laurent\Documents\amelimelo
2019-09-14 01:19 - 2018-07-13 08:45 - 000000000 ___RD C:\Users\Agnès Laurent\3D Objects
2019-09-14 01:19 - 2017-12-23 05:37 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-09-14 01:07 - 2017-12-23 06:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-09-14 01:07 - 2017-12-23 06:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-09-13 22:38 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-09-13 17:34 - 2017-12-23 06:06 - 000001244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-09-13 14:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-09-13 14:24 - 2018-08-07 20:44 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\ElevatedDiagnostics
2019-09-12 00:10 - 2018-11-20 12:47 - 000000951 _____ C:\WINDOWS\Tasks\EPSON WF-7620 Series Update {679CE7F9-0398-4419-9B29-8A93913A9005}.job
2019-09-12 00:10 - 2018-11-20 12:47 - 000000765 _____ C:\WINDOWS\Tasks\EPSON WF-7620 Series Invitation {679CE7F9-0398-4419-9B29-8A93913A9005}.job
2019-09-11 19:08 - 2018-07-13 10:23 - 000000000 ____D C:\Users\Agnès Laurent\Documents\facturation client
2019-09-11 13:52 - 2018-07-13 10:01 - 000000000 ____D C:\Users\Agnès Laurent\Documents\Administration
2019-09-10 17:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-09-10 17:21 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-09-10 17:18 - 2018-08-29 11:23 - 000000000 ____D C:\Users\Agnès Laurent\Documents\CNEAP
2019-09-09 17:55 - 2018-07-13 09:23 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Local\PlaceholderTileLogoFolder
2019-09-09 14:59 - 2018-07-13 10:31 - 000000000 ____D C:\Users\Agnès Laurent\Documents\PERSO
2019-09-06 13:52 - 2019-02-13 11:37 - 000552848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2019-09-06 13:52 - 2019-01-14 17:08 - 000263008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-09-06 13:52 - 2019-01-07 14:30 - 000205848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-09-06 13:52 - 2019-01-07 14:30 - 000061472 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-09-06 13:52 - 2018-10-23 17:59 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 001030784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000478096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000387176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000209552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000112312 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-09-06 13:52 - 2018-07-19 15:12 - 000087944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-09-05 10:40 - 2018-10-02 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2019-09-05 10:40 - 2018-10-02 17:39 - 000000000 ____D C:\ProgramData\EPSON
2019-09-03 21:31 - 2019-03-12 12:24 - 000000000 ____D C:\Users\Agnès Laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2019-09-02 10:28 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\servicing
2019-09-02 10:18 - 2018-07-13 10:34 - 000000000 ____D C:\Users\Agnès Laurent\Documents\quadrants
2019-08-31 01:01 - 2018-07-13 09:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-08-31 00:39 - 2018-07-13 09:21 - 134272480 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-08-28 15:25 - 2018-07-16 17:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-08-28 15:21 - 2018-07-13 09:07 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-08-28 15:18 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\appcompat
2019-08-19 21:01 - 2018-07-13 21:07 - 000000000 ____D C:\ProgramData\Packages
2019-08-19 19:22 - 2018-07-13 09:21 - 000000000 ____D C:\Program Files\rempl
==================== Fichiers à la racine de certains dossiers ================
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
==================== SigCheckExt ================
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppui.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppui.dll
2019-09-18 19:38 - 2019-09-18 19:38 - 003245952 _____ (Nicolas Coolman) C:\Users\Agnès Laurent\ZHPDiag3.exe
2019-09-13 16:48 - 2019-09-18 21:26 - 001615360 _____ (Farbar) C:\Users\Agnès Laurent\Desktop\FRST64.exe
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d�marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{4f01eb1a-e792-11e7-90e5-806e6f6e6963}
{4f01eb1b-e792-11e7-90e5-806e6f6e6963}
{4f01eb1c-e792-11e7-90e5-806e6f6e6963}
timeout 0
Gestionnaire de d�marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1a-e792-11e7-90e5-806e6f6e6963}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1b-e792-11e7-90e5-806e6f6e6963}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {4f01eb1c-e792-11e7-90e5-806e6f6e6963}
description EFI Network
Chargeur de d�marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
nx OptIn
bootmenupolicy Standard
Chargeur de d�marrage Windows
-----------------------------
identificateur {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre � partir de la mise en veille prolong�e
-------------------------------------------------
identificateur {d96df51a-bd50-11e9-b4e9-a8769c1a32c1}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d96df51c-bd50-11e9-b4e9-a8769c1a32c1}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m�moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m�moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Param�tres EMS
--------------
identificateur {emssettings}
bootems No
Param�tres du d�bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m�moire RAM
----------------------
identificateur {badmemory}
Param�tres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Param�tres du chargeur de d�marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Param�tres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Param�tres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p�riph�rique
-----------------------
identificateur {d96df51d-bd50-11e9-b4e9-a8769c1a32c1}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ============================