Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-11-2020
Exécuté par MATULA (administrateur) sur MALKO (ASUSTeK COMPUTER INC. X751MD) (29-11-2020 07:41:29)
Exécuté depuis C:\Users\MATULA\Downloads
Profils chargés: MATULA
Platform: Windows 10 Home Version 20H2 19042.630 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Atheros) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [710776 2020-06-18] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32281272 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [580096 2020-06-17] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C311 Status Monitor: C:\WINDOWS\system32\hpinkstsC311LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 5530 series): C:\WINDOWS\system32\HPDiscoPMC311.dll [763912 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
Startup: C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-06-19]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0035AF81-21A1-4AC7-83DB-266402B116DF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {06B2C3D7-56D4-437A-9880-F66C03E0E9D1} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [5745672 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {0907AD6F-9BCC-4BA0-9403-240773EC92BE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1391472 2014-12-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {10D4C425-4847-48F2-9096-8A2E9787AAA3} - System32\Tasks\SkipUAC Nettoyage du Registre => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {15BEDD9D-BBF9-46A1-BEF8-601BD9EE4BBB} - System32\Tasks\{FFF54788-3F48-499B-9154-23596A52E825} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.38.0.101/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {1B0A39AC-769B-4B90-AC7E-49FDAA0BB084} - System32\Tasks\HP AR Program Upload - 73b5d510c32346b8b8628356953921b5eb9c2c3c60044affb84738ab9eb9b566 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {1BD87450-7F65-49E5-AD61-07032500900A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {20D7E9FF-F9B1-491B-BD5C-1714A96BE878} - System32\Tasks\SkipUAC Défragmentation des lecteurs => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {210C774B-57DF-473C-8535-D407528028DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26781880 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2476F7BC-C07E-47DB-9607-CCD255243D08} - System32\Tasks\{0DD0EC34-A6EC-466D-A8CB-1BFC53819C99} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {2550E01B-FF70-42E4-9D62-1D5BBCA6DFB2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {27918113-3158-43FF-B81A-DD1B8525D553} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {38ABD35E-3897-4723-9DB6-F53BC06F9B42} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C2F0BB6-EBE6-4848-AC7D-C0529CF4B867} - System32\Tasks\SkipUAC Optimisation du démarrage système => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {4728CDD2-EC66-43D1-AB9A-E0B52E8040DB} - System32\Tasks\HP AR Program Upload - 522aee15161a407b9e474019f7ca43a49f8440e4fc7f4578af7715face806740 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {4D187D7C-3858-48A6-82E0-D4F27DE2642D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {4D9FDED8-7E83-43D6-A859-4B913520FA07} - System32\Tasks\SafeZone scheduled Autoupdate 1468525348 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {518730EB-B483-4F1A-8A06-34AF1E8B0C38} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982744 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {549394BB-8C09-4F8C-AD33-F66B05891B5F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CA4BB01-C530-4C26-81AE-3D41CA297331} - System32\Tasks\SkipUAC Suppression des traces laissées sur Internet => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {60A31AB8-53ED-4A60-BBBE-D367B4BE12BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {677B8591-817E-4DF4-9FC9-B352AB3E0B30} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6A8BF4A6-6F71-4350-BC04-14049FA9C576} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117600 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6B0794FC-B671-4197-8965-2FC9E58A6D5E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982744 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CAFCD3C-BECF-47FD-8EF5-2F7D89273D46} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7032FD74-B959-4A71-A2B8-A8C0AA7C644D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2017-07-24] (Apple Inc. -> Apple Inc.)
Task: {7461FDE6-4AFE-4FE3-8FDD-63292DA8E95D} - System32\Tasks\HP AR Program Upload - 98917427bc244a1285dd426f33737ddc39208182467a4c4f878491ac0e8ec615 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {7A2FA892-E4D0-4ACB-B090-165D1EC9E7F7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7C398905-B8D5-430B-86A6-E79E9EB476E8} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {875D4256-B93B-4F28-90D0-37F4C1ACD7B2} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {8CDBFB7A-F2FA-4BD5-B464-DDC3BDBDDC38} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {94ACCD52-1F80-4FA1-874F-1EA16E608AE1} - System32\Tasks\{17D50E5F-9F38-43E0-AD60-DB19837E6169} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.30.80.103/fr/go/help.faq.installer?LastError=1603
Task: {959ED096-661C-49FF-94D3-B3D1046DFC9D} - System32\Tasks\HP AR Program Upload - 1581b40121724b3286571db4710aea0d2dd157902b394a9ca912ae1bf071cc7d => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {99642599-006E-4788-BA96-90E60EE5BB9E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1146776 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2EC2FC3-94C2-4029-93B7-CDB643C88C45} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A57D9BE2-7CE2-46A4-B1DC-E6AF7CD7B470} - System32\Tasks\HP AR Program Upload - 8cc19ffeaffb45d69c3e90eaba066c27175f36f4b10b441ba9a0e161d694bd6a => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {BB1D503C-CF6B-479B-AE28-9104CD010B75} - System32\Tasks\HP AR Program Upload - 9bc5b6b6893345a79ba7b1d6ed9502a88ed13e87f0c240178335a45100c243ea => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {C0E29E94-36C3-4344-BFEA-1C94C9F7468B} - System32\Tasks\HP AR Program Upload - 96246d2ee5534696b96dbc96449d73719ad192f7fd654df8818533c4d7e906a3 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {C3710222-2D50-41BC-9177-47358CE499EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {C429813D-1138-45F4-8DAA-8760E11DF720} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C9A6C54D-AE0C-44F0-8B0B-694C6E84D331} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19723888 2014-03-27] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D2DC32A0-A8D5-4227-80BB-C2E39A552CE6} - System32\Tasks\HP AR Program Upload - 69df1520fcf1443fa40616cd351c370722844838a521403cb91f840fbc1ee2a7 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {D2E479F2-5287-4C15-AD77-B9FE9FC156D1} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D3BAB091-D729-4E9E-A712-37F5C951751D} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D52E5FF0-C02A-468C-8948-A9520D1A0A00} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe [158336 2013-01-09] (ASUSTeK Computer Inc. -> ASUSTek Computer INC.)
Task: {D66953A4-EC3F-4030-A443-BFFCC3F5870B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D8955F2A-7A08-434C-A454-D9A7DC0ADBCB} - System32\Tasks\{B8EE4D9C-89BF-46A3-A190-0E52E8AF4599} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {DBF342CA-7535-40AA-A943-994224DD2DFB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {DEE54D10-75AB-4121-B604-EF052C25E5C4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117600 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E2C46673-2AF9-49A5-832E-D2DCE579D21B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {E3F9CB1E-6969-4D3D-A671-BBF499FD2F0F} - System32\Tasks\{797B8A0B-706F-4211-8689-492E70870E4A} => "c:\program files\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.35.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E6A4B6DD-C7E0-4873-9516-65FCF04D66B7} - System32\Tasks\{3D91F5A9-190D-481E-8BFB-09719D2E6448} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.37.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {ED183C8C-1B2A-49E1-9B6A-E7E1CEC78EF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {F002B736-0A1C-4227-8482-9E986369830F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13776088 2014-12-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F0BBD519-B017-4AA8-8C08-595ADB64F112} - System32\Tasks\SkipUAC Suppression définitive des éléments de la corbeille => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {F77F7E4E-C4DE-40A8-B4F7-E48E87A5650F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FA86DDB6-2132-4ABA-B57C-11D2EA587460} - System32\Tasks\SkipUAC Optimisation des services Windows => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FF160F98-11F7-492C-8477-720F152F7FC4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FFFA4301-246E-4993-A508-96911A110DEA} - System32\Tasks\SkipUAC Économie d'énergie => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2e5e1d74-5346-4987-89cd-55e1648e486b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8cc03029-b3c1-45f3-986f-dc64267885e0}: [DhcpNameServer] 192.168.1.1
Edge:
======
DownloadDir: C:\Users\MATULA\Downloads
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-02-03]
Edge Extension: (Mouvements de souris) -> MouseGestures_MicrosoftMouseGestures_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.MouseGestures_0.6.17136.0_neutral__8wekyb3d8bbwe [2017-05-16]
Edge Extension: (Amazon Assistant) -> xxx_AmazoncomAmazonAssistant_343d40qqvtj1t => C:\Program Files\WindowsApps\Amazon.com.AmazonAssistant_10.1910.9.0_neutral__343d40qqvtj1t [2019-10-16]
Edge DefaultProfile: Default
Edge Profile: C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default [2020-11-28]
Edge StartupUrls: Default -> "hxxps://www.google.fr/"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 993zg6qh.MALKO
FF ProfilePath: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 [2020-11-29]
FF Homepage: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://www.sfr.fr/cas/login?service=https%3A%2F%2Fwww.sfr.fr%2Faccueil%2Fj_spring_cas_security_check
FF Notifications: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://axa-fr-by.accengage.net; hxxps://forum.zebulon.fr
FF Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2020-10-12]
FF Extension: (Google Translator for Firefox) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\translator@zoli.bod.xpi [2020-01-01]
FF Extension: (OldWood) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{1268dd7d-073e-4bf1-81dc-f1bb0f4f0c2e}.xpi [2020-06-27]
FF Extension: (Dark-ish Rainbow) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{21f69c5d-b9e1-470f-a890-74454e954eee}.xpi [2020-08-13]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2020-11-27]
FF Extension: (Blue Carbon Fiber) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{5ab03bdd-3d91-4c73-801e-607ca27458d0}.xpi [2020-01-01]
FF Extension: (NoScript) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2020-11-07]
FF Extension: (Fenetre Mailto) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{7954b599-d6d5-4b4c-b048-dd39ee8325a2}.xpi [2020-03-26]
FF Extension: (chrystalize) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{96b7a652-8716-4678-be68-7a8bac53a373}.xpi [2020-01-01]
FF Extension: (Video DownloadHelper) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-31]
FF Extension: (A N I M A T E D KITTY CAT) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{cf4e89f2-b8e0-4ad7-932d-7b82d8956543}.xpi [2020-01-01]
FF ProfilePath: C:\Users\MATULA\AppData\Roaming\Mozilla\Firefox\Profiles\993zg6qh.MALKO [2020-11-10]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-12-30] [] [non signé]
FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-08-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-08-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-11-19] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-643979615-3718182490-1915481562-1001: www.mydlink.com/Uplayer -> C:\Users\MATULA\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-LINK CORPORATION -> D-Link Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9057136 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
S3 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7269976 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUSTeK Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32680 2019-08-07] (ASUSTek Computer Inc. -> ASUS)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] (ASUSTeK Computer Inc. -> )
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-11-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429288 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-29 07:41 - 2020-11-29 07:44 - 000030156 _____ C:\Users\MATULA\Downloads\FRST.txt
2020-11-29 07:40 - 2020-11-29 07:43 - 000000000 ____D C:\FRST
2020-11-29 07:38 - 2020-11-29 07:38 - 002290176 _____ (Farbar) C:\Users\MATULA\Downloads\FRST64.exe
2020-11-28 17:06 - 2020-11-28 17:10 - 000000000 ____D C:\AdwCleaner
2020-11-28 16:44 - 2020-11-28 16:44 - 008447152 _____ (Malwarebytes) C:\Users\MATULA\Downloads\adwcleaner_8.0.8.exe
2020-11-28 11:31 - 2020-11-28 11:31 - 003338112 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPCleaner(1).exe
2020-11-28 11:28 - 2020-11-28 11:29 - 003280256 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPDiag3.exe
2020-11-28 11:27 - 2020-11-28 11:27 - 003338112 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPCleaner.exe
2020-11-27 08:19 - 2020-11-27 08:19 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-11-27 08:19 - 2020-11-27 08:18 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-11-22 08:29 - 2020-11-22 08:29 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-11-21 11:11 - 2020-11-27 09:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-11-20 10:14 - 2020-11-22 12:04 - 000000000 ____D C:\Users\MATULA\AppData\Local\Mozilla Thunderbird
2020-11-13 12:52 - 2020-11-13 12:52 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-10-30 08:42 - 2020-10-30 08:42 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-30 08:42 - 2020-10-30 08:42 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-30 08:42 - 2020-10-30 08:42 - 000152576 _____ C:\WINDOWS\system32\EoAExperiences.exe
2020-10-30 08:41 - 2020-10-30 08:41 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-29 07:40 - 2016-11-16 08:19 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\Mozilla
2020-11-29 07:37 - 2017-06-03 08:11 - 000000000 ____D C:\ProgramData\NVIDIA
2020-11-29 07:36 - 2015-02-04 19:16 - 000000000 ____D C:\Program Files\CCleaner
2020-11-29 07:35 - 2015-02-04 12:10 - 000000000 ____D C:\ProgramData\Mozilla
2020-11-28 17:27 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-11-28 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-28 17:14 - 2014-12-09 18:34 - 000000000 __SHD C:\Users\MATULA\IntelGraphicsProfiles
2020-11-28 17:13 - 2020-06-17 16:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-11-28 17:12 - 2020-06-17 16:12 - 000008192 ___SH C:\DumpStack.log.tmp
2020-11-28 17:12 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-11-28 17:10 - 2019-11-29 08:20 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\Samsung
2020-11-28 17:10 - 2019-11-29 08:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2020-11-28 17:10 - 2019-11-29 08:19 - 000000000 ____D C:\Program Files (x86)\Samsung
2020-11-28 17:05 - 2016-09-06 07:19 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\ZHP
2020-11-28 16:41 - 2020-09-14 13:45 - 000000000 ____D C:\Users\MATULA\AppData\Local\ZHP
2020-11-28 11:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-11-28 11:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-11-27 16:39 - 2020-06-17 16:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-11-27 15:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-27 15:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-11-27 09:13 - 2020-06-17 16:54 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-11-27 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-11-27 09:08 - 2015-02-04 12:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-11-27 08:30 - 2019-12-07 10:18 - 000842296 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-11-27 08:30 - 2019-12-07 10:18 - 000175160 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-11-27 08:30 - 2015-02-04 19:14 - 000000000 ____D C:\Users\MATULA\AppData\Local\Adobe
2020-11-27 08:29 - 2016-09-24 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2020-11-27 08:19 - 2020-10-02 14:57 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-11-27 08:19 - 2020-05-07 08:52 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-11-27 08:19 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-11-27 08:18 - 2019-07-19 14:08 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-11-26 10:49 - 2020-06-27 17:12 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\AbiSuite
2020-11-26 09:07 - 2020-06-17 16:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-11-26 09:06 - 2017-04-14 09:34 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-25 12:05 - 2020-09-02 13:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-11-22 12:04 - 2018-10-25 15:54 - 000001365 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2020-11-22 08:29 - 2018-05-05 15:14 - 000001306 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk
2020-11-22 08:28 - 2019-12-21 12:07 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-11-20 18:09 - 2020-06-17 14:30 - 000000000 ____D C:\Users\MATULA
2020-11-15 11:56 - 2015-02-05 17:44 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-11-13 15:04 - 2015-02-04 13:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-11-13 15:03 - 2015-02-04 13:06 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-11-13 13:10 - 2020-06-17 16:26 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-11-13 13:10 - 2019-12-07 15:49 - 000792836 _____ C:\WINDOWS\system32\perfh00C.dat
2020-11-13 13:10 - 2019-12-07 15:49 - 000149966 _____ C:\WINDOWS\system32\perfc00C.dat
2020-11-13 13:04 - 2020-06-17 16:12 - 000443800 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-11-13 12:59 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-11-13 12:52 - 2020-06-17 16:18 - 002876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-11-13 12:15 - 2020-06-17 10:06 - 000000000 ___HD C:\$WinREAgent
2020-11-10 14:56 - 2020-09-14 12:07 - 000000000 ____D C:\WINDOWS\Minidump
2020-11-10 14:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-11-06 13:20 - 2018-03-15 17:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-11-04 10:49 - 2020-09-02 13:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-04 10:49 - 2020-09-02 13:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-10-30 08:16 - 2020-10-26 10:49 - 000000000 ____D C:\Users\MATULA\0 VIEUX BOUCAU
2020-10-30 07:57 - 2017-10-22 08:47 - 000000000 ____D C:\Users\MATULA\AppData\Local\Packages
2020-10-30 07:29 - 2016-07-13 14:14 - 000795000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
==================== Fichiers à la racine de certains dossiers ========
2015-02-04 11:33 - 2017-10-06 10:49 - 000000093 _____ () C:\Users\MATULA\AppData\Roaming\sp_data.sys
2015-02-26 10:31 - 2017-10-30 10:57 - 000005632 _____ () C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-17 18:07 - 2019-01-17 18:07 - 000000758 _____ () C:\Users\MATULA\AppData\Local\recently-used.xbel
2015-02-25 09:09 - 2015-02-25 09:09 - 000000017 _____ () C:\Users\MATULA\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par MATULA (administrateur) sur MALKO (ASUSTeK COMPUTER INC. X751MD) (29-11-2020 07:41:29)
Exécuté depuis C:\Users\MATULA\Downloads
Profils chargés: MATULA
Platform: Windows 10 Home Version 20H2 19042.630 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Atheros) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [710776 2020-06-18] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32281272 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [580096 2020-06-17] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C311 Status Monitor: C:\WINDOWS\system32\hpinkstsC311LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 5530 series): C:\WINDOWS\system32\HPDiscoPMC311.dll [763912 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
Startup: C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-06-19]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0035AF81-21A1-4AC7-83DB-266402B116DF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {06B2C3D7-56D4-437A-9880-F66C03E0E9D1} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [5745672 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {0907AD6F-9BCC-4BA0-9403-240773EC92BE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1391472 2014-12-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {10D4C425-4847-48F2-9096-8A2E9787AAA3} - System32\Tasks\SkipUAC Nettoyage du Registre => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {15BEDD9D-BBF9-46A1-BEF8-601BD9EE4BBB} - System32\Tasks\{FFF54788-3F48-499B-9154-23596A52E825} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.38.0.101/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {1B0A39AC-769B-4B90-AC7E-49FDAA0BB084} - System32\Tasks\HP AR Program Upload - 73b5d510c32346b8b8628356953921b5eb9c2c3c60044affb84738ab9eb9b566 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {1BD87450-7F65-49E5-AD61-07032500900A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {20D7E9FF-F9B1-491B-BD5C-1714A96BE878} - System32\Tasks\SkipUAC Défragmentation des lecteurs => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {210C774B-57DF-473C-8535-D407528028DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26781880 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2476F7BC-C07E-47DB-9607-CCD255243D08} - System32\Tasks\{0DD0EC34-A6EC-466D-A8CB-1BFC53819C99} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {2550E01B-FF70-42E4-9D62-1D5BBCA6DFB2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {27918113-3158-43FF-B81A-DD1B8525D553} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {38ABD35E-3897-4723-9DB6-F53BC06F9B42} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C2F0BB6-EBE6-4848-AC7D-C0529CF4B867} - System32\Tasks\SkipUAC Optimisation du démarrage système => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {4728CDD2-EC66-43D1-AB9A-E0B52E8040DB} - System32\Tasks\HP AR Program Upload - 522aee15161a407b9e474019f7ca43a49f8440e4fc7f4578af7715face806740 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {4D187D7C-3858-48A6-82E0-D4F27DE2642D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {4D9FDED8-7E83-43D6-A859-4B913520FA07} - System32\Tasks\SafeZone scheduled Autoupdate 1468525348 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {518730EB-B483-4F1A-8A06-34AF1E8B0C38} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982744 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {549394BB-8C09-4F8C-AD33-F66B05891B5F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CA4BB01-C530-4C26-81AE-3D41CA297331} - System32\Tasks\SkipUAC Suppression des traces laissées sur Internet => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {60A31AB8-53ED-4A60-BBBE-D367B4BE12BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {677B8591-817E-4DF4-9FC9-B352AB3E0B30} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6A8BF4A6-6F71-4350-BC04-14049FA9C576} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117600 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6B0794FC-B671-4197-8965-2FC9E58A6D5E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982744 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CAFCD3C-BECF-47FD-8EF5-2F7D89273D46} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7032FD74-B959-4A71-A2B8-A8C0AA7C644D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2017-07-24] (Apple Inc. -> Apple Inc.)
Task: {7461FDE6-4AFE-4FE3-8FDD-63292DA8E95D} - System32\Tasks\HP AR Program Upload - 98917427bc244a1285dd426f33737ddc39208182467a4c4f878491ac0e8ec615 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {7A2FA892-E4D0-4ACB-B090-165D1EC9E7F7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7C398905-B8D5-430B-86A6-E79E9EB476E8} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {875D4256-B93B-4F28-90D0-37F4C1ACD7B2} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {8CDBFB7A-F2FA-4BD5-B464-DDC3BDBDDC38} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {94ACCD52-1F80-4FA1-874F-1EA16E608AE1} - System32\Tasks\{17D50E5F-9F38-43E0-AD60-DB19837E6169} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.30.80.103/fr/go/help.faq.installer?LastError=1603
Task: {959ED096-661C-49FF-94D3-B3D1046DFC9D} - System32\Tasks\HP AR Program Upload - 1581b40121724b3286571db4710aea0d2dd157902b394a9ca912ae1bf071cc7d => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {99642599-006E-4788-BA96-90E60EE5BB9E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1146776 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2EC2FC3-94C2-4029-93B7-CDB643C88C45} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A57D9BE2-7CE2-46A4-B1DC-E6AF7CD7B470} - System32\Tasks\HP AR Program Upload - 8cc19ffeaffb45d69c3e90eaba066c27175f36f4b10b441ba9a0e161d694bd6a => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {BB1D503C-CF6B-479B-AE28-9104CD010B75} - System32\Tasks\HP AR Program Upload - 9bc5b6b6893345a79ba7b1d6ed9502a88ed13e87f0c240178335a45100c243ea => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {C0E29E94-36C3-4344-BFEA-1C94C9F7468B} - System32\Tasks\HP AR Program Upload - 96246d2ee5534696b96dbc96449d73719ad192f7fd654df8818533c4d7e906a3 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {C3710222-2D50-41BC-9177-47358CE499EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {C429813D-1138-45F4-8DAA-8760E11DF720} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-11-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C9A6C54D-AE0C-44F0-8B0B-694C6E84D331} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19723888 2014-03-27] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D2DC32A0-A8D5-4227-80BB-C2E39A552CE6} - System32\Tasks\HP AR Program Upload - 69df1520fcf1443fa40616cd351c370722844838a521403cb91f840fbc1ee2a7 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {D2E479F2-5287-4C15-AD77-B9FE9FC156D1} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D3BAB091-D729-4E9E-A712-37F5C951751D} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D52E5FF0-C02A-468C-8948-A9520D1A0A00} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe [158336 2013-01-09] (ASUSTeK Computer Inc. -> ASUSTek Computer INC.)
Task: {D66953A4-EC3F-4030-A443-BFFCC3F5870B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D8955F2A-7A08-434C-A454-D9A7DC0ADBCB} - System32\Tasks\{B8EE4D9C-89BF-46A3-A190-0E52E8AF4599} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {DBF342CA-7535-40AA-A943-994224DD2DFB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22939528 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {DEE54D10-75AB-4121-B604-EF052C25E5C4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117600 2020-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E2C46673-2AF9-49A5-832E-D2DCE579D21B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {E3F9CB1E-6969-4D3D-A671-BBF499FD2F0F} - System32\Tasks\{797B8A0B-706F-4211-8689-492E70870E4A} => "c:\program files\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.35.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E6A4B6DD-C7E0-4873-9516-65FCF04D66B7} - System32\Tasks\{3D91F5A9-190D-481E-8BFB-09719D2E6448} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.37.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {ED183C8C-1B2A-49E1-9B6A-E7E1CEC78EF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {F002B736-0A1C-4227-8482-9E986369830F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13776088 2014-12-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F0BBD519-B017-4AA8-8C08-595ADB64F112} - System32\Tasks\SkipUAC Suppression définitive des éléments de la corbeille => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {F77F7E4E-C4DE-40A8-B4F7-E48E87A5650F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FA86DDB6-2132-4ABA-B57C-11D2EA587460} - System32\Tasks\SkipUAC Optimisation des services Windows => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FF160F98-11F7-492C-8477-720F152F7FC4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FFFA4301-246E-4993-A508-96911A110DEA} - System32\Tasks\SkipUAC Économie d'énergie => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2e5e1d74-5346-4987-89cd-55e1648e486b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8cc03029-b3c1-45f3-986f-dc64267885e0}: [DhcpNameServer] 192.168.1.1
Edge:
======
DownloadDir: C:\Users\MATULA\Downloads
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-02-03]
Edge Extension: (Mouvements de souris) -> MouseGestures_MicrosoftMouseGestures_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.MouseGestures_0.6.17136.0_neutral__8wekyb3d8bbwe [2017-05-16]
Edge Extension: (Amazon Assistant) -> xxx_AmazoncomAmazonAssistant_343d40qqvtj1t => C:\Program Files\WindowsApps\Amazon.com.AmazonAssistant_10.1910.9.0_neutral__343d40qqvtj1t [2019-10-16]
Edge DefaultProfile: Default
Edge Profile: C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default [2020-11-28]
Edge StartupUrls: Default -> "hxxps://www.google.fr/"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 993zg6qh.MALKO
FF ProfilePath: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 [2020-11-29]
FF Homepage: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://www.sfr.fr/cas/login?service=https%3A%2F%2Fwww.sfr.fr%2Faccueil%2Fj_spring_cas_security_check
FF Notifications: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://axa-fr-by.accengage.net; hxxps://forum.zebulon.fr
FF Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2020-10-12]
FF Extension: (Google Translator for Firefox) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\translator@zoli.bod.xpi [2020-01-01]
FF Extension: (OldWood) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{1268dd7d-073e-4bf1-81dc-f1bb0f4f0c2e}.xpi [2020-06-27]
FF Extension: (Dark-ish Rainbow) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{21f69c5d-b9e1-470f-a890-74454e954eee}.xpi [2020-08-13]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2020-11-27]
FF Extension: (Blue Carbon Fiber) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{5ab03bdd-3d91-4c73-801e-607ca27458d0}.xpi [2020-01-01]
FF Extension: (NoScript) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2020-11-07]
FF Extension: (Fenetre Mailto) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{7954b599-d6d5-4b4c-b048-dd39ee8325a2}.xpi [2020-03-26]
FF Extension: (chrystalize) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{96b7a652-8716-4678-be68-7a8bac53a373}.xpi [2020-01-01]
FF Extension: (Video DownloadHelper) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-31]
FF Extension: (A N I M A T E D KITTY CAT) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{cf4e89f2-b8e0-4ad7-932d-7b82d8956543}.xpi [2020-01-01]
FF ProfilePath: C:\Users\MATULA\AppData\Roaming\Mozilla\Firefox\Profiles\993zg6qh.MALKO [2020-11-10]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-12-30] [] [non signé]
FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-08-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-08-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-11-19] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-643979615-3718182490-1915481562-1001: www.mydlink.com/Uplayer -> C:\Users\MATULA\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-LINK CORPORATION -> D-Link Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9057136 2020-11-04] (Microsoft Corporation -> Microsoft Corporation)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
S3 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7269976 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUSTeK Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32680 2019-08-07] (ASUSTek Computer Inc. -> ASUS)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] (ASUSTeK Computer Inc. -> )
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-11-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-11-27] (Malwarebytes Inc -> Malwarebytes)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429288 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-29 07:41 - 2020-11-29 07:44 - 000030156 _____ C:\Users\MATULA\Downloads\FRST.txt
2020-11-29 07:40 - 2020-11-29 07:43 - 000000000 ____D C:\FRST
2020-11-29 07:38 - 2020-11-29 07:38 - 002290176 _____ (Farbar) C:\Users\MATULA\Downloads\FRST64.exe
2020-11-28 17:06 - 2020-11-28 17:10 - 000000000 ____D C:\AdwCleaner
2020-11-28 16:44 - 2020-11-28 16:44 - 008447152 _____ (Malwarebytes) C:\Users\MATULA\Downloads\adwcleaner_8.0.8.exe
2020-11-28 11:31 - 2020-11-28 11:31 - 003338112 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPCleaner(1).exe
2020-11-28 11:28 - 2020-11-28 11:29 - 003280256 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPDiag3.exe
2020-11-28 11:27 - 2020-11-28 11:27 - 003338112 _____ (Nicolas Coolman) C:\Users\MATULA\Downloads\ZHPCleaner.exe
2020-11-27 08:19 - 2020-11-27 08:19 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-11-27 08:19 - 2020-11-27 08:18 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-11-22 08:29 - 2020-11-22 08:29 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-11-21 11:11 - 2020-11-27 09:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-11-20 10:14 - 2020-11-22 12:04 - 000000000 ____D C:\Users\MATULA\AppData\Local\Mozilla Thunderbird
2020-11-13 12:52 - 2020-11-13 12:52 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-10-30 08:42 - 2020-10-30 08:42 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-30 08:42 - 2020-10-30 08:42 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-30 08:42 - 2020-10-30 08:42 - 000152576 _____ C:\WINDOWS\system32\EoAExperiences.exe
2020-10-30 08:41 - 2020-10-30 08:41 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-29 07:40 - 2016-11-16 08:19 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\Mozilla
2020-11-29 07:37 - 2017-06-03 08:11 - 000000000 ____D C:\ProgramData\NVIDIA
2020-11-29 07:36 - 2015-02-04 19:16 - 000000000 ____D C:\Program Files\CCleaner
2020-11-29 07:35 - 2015-02-04 12:10 - 000000000 ____D C:\ProgramData\Mozilla
2020-11-28 17:27 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-11-28 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-28 17:14 - 2014-12-09 18:34 - 000000000 __SHD C:\Users\MATULA\IntelGraphicsProfiles
2020-11-28 17:13 - 2020-06-17 16:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-11-28 17:12 - 2020-06-17 16:12 - 000008192 ___SH C:\DumpStack.log.tmp
2020-11-28 17:12 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-11-28 17:10 - 2019-11-29 08:20 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\Samsung
2020-11-28 17:10 - 2019-11-29 08:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2020-11-28 17:10 - 2019-11-29 08:19 - 000000000 ____D C:\Program Files (x86)\Samsung
2020-11-28 17:05 - 2016-09-06 07:19 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\ZHP
2020-11-28 16:41 - 2020-09-14 13:45 - 000000000 ____D C:\Users\MATULA\AppData\Local\ZHP
2020-11-28 11:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-11-28 11:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-11-27 16:39 - 2020-06-17 16:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-11-27 15:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-27 15:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-11-27 09:13 - 2020-06-17 16:54 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-11-27 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-11-27 09:08 - 2015-02-04 12:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-11-27 08:30 - 2019-12-07 10:18 - 000842296 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-11-27 08:30 - 2019-12-07 10:18 - 000175160 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-11-27 08:30 - 2015-02-04 19:14 - 000000000 ____D C:\Users\MATULA\AppData\Local\Adobe
2020-11-27 08:29 - 2016-09-24 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2020-11-27 08:19 - 2020-10-02 14:57 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-11-27 08:19 - 2020-05-07 08:52 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-11-27 08:19 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-11-27 08:18 - 2019-07-19 14:08 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-11-26 10:49 - 2020-06-27 17:12 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\AbiSuite
2020-11-26 09:07 - 2020-06-17 16:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-11-26 09:06 - 2017-04-14 09:34 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-25 12:05 - 2020-09-02 13:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-11-22 12:04 - 2018-10-25 15:54 - 000001365 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2020-11-22 08:29 - 2018-05-05 15:14 - 000001306 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk
2020-11-22 08:28 - 2019-12-21 12:07 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-11-20 18:09 - 2020-06-17 14:30 - 000000000 ____D C:\Users\MATULA
2020-11-15 11:56 - 2015-02-05 17:44 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-11-13 15:04 - 2015-02-04 13:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-11-13 15:03 - 2015-02-04 13:06 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-11-13 13:10 - 2020-06-17 16:26 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-11-13 13:10 - 2019-12-07 15:49 - 000792836 _____ C:\WINDOWS\system32\perfh00C.dat
2020-11-13 13:10 - 2019-12-07 15:49 - 000149966 _____ C:\WINDOWS\system32\perfc00C.dat
2020-11-13 13:04 - 2020-06-17 16:12 - 000443800 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-11-13 13:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-11-13 12:59 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-11-13 12:52 - 2020-06-17 16:18 - 002876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-11-13 12:15 - 2020-06-17 10:06 - 000000000 ___HD C:\$WinREAgent
2020-11-10 14:56 - 2020-09-14 12:07 - 000000000 ____D C:\WINDOWS\Minidump
2020-11-10 14:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-11-06 13:20 - 2018-03-15 17:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-11-04 10:49 - 2020-09-02 13:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-04 10:49 - 2020-09-02 13:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-10-30 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-10-30 08:16 - 2020-10-26 10:49 - 000000000 ____D C:\Users\MATULA\0 VIEUX BOUCAU
2020-10-30 07:57 - 2017-10-22 08:47 - 000000000 ____D C:\Users\MATULA\AppData\Local\Packages
2020-10-30 07:29 - 2016-07-13 14:14 - 000795000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
==================== Fichiers à la racine de certains dossiers ========
2015-02-04 11:33 - 2017-10-06 10:49 - 000000093 _____ () C:\Users\MATULA\AppData\Roaming\sp_data.sys
2015-02-26 10:31 - 2017-10-30 10:57 - 000005632 _____ () C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-17 18:07 - 2019-01-17 18:07 - 000000758 _____ () C:\Users\MATULA\AppData\Local\recently-used.xbel
2015-02-25 09:09 - 2015-02-25 09:09 - 000000017 _____ () C:\Users\MATULA\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================