Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 29-11-2020
Exécuté par Clément DOHIN (administrateur) sur CLÉMENT (Acer Aspire VN7-791) (01-12-2020 17:26:49)
Exécuté depuis C:\Users\Clément DOHIN\Downloads
Profils chargés: Clément DOHIN
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3>
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Fortemedia Inc -> ) C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler64.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LogitechUpdate.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LULnchr.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Opera Software AS -> Opera Software) C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\71.0.3770.441\opera.exe <25>
(Opera Software AS -> Opera Software) C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\71.0.3770.441\opera_crashreporter.exe
(Qualcomm Atheros -> ) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Riot Games, Inc. -> ) C:\Riot Games\League of Legends\Game\LeagueCrashHandler.exe
(Riot Games, Inc. -> ) C:\Riot Games\League of Legends\LeagueCrashHandler.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\League of Legends\Game\League of Legends.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\League of Legends\LeagueClient.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\Riot Client\RiotClientServices.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [16286840 2016-08-30] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [117344 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [Fichier non signé]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3424032 2020-10-29] (Valve -> Valve Corporation)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14804552 2020-11-26] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7511384 2019-05-24] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [com.blitz.app] => C:\Users\Clément DOHIN\AppData\Local\Programs\Blitz\Blitz.exe --hidden
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Spotify] => C:\Users\Clément DOHIN\AppData\Roaming\Spotify\Spotify.exe [23325416 2020-10-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Discord] => C:\Users\Clément DOHIN\AppData\Local\Discord\app-0.0.308\Discord.exe [91023672 2020-09-10] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\RunOnce: [Application Restart #1] => C:\Users\Clément DOHIN\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-we (l'élément de données a 599 caractères en plus).
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {402bdacf-cba8-11e7-828f-2c337a69d128} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {6727c874-84c9-11ea-82d9-206a8aa6e1bd} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {a18cbc4b-384d-11e9-82bc-206a8aa6e1bd} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {b3b5d7d5-2690-11eb-82e4-2c337a69d128} - "D:\OnePlus_setup.exe" /s
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {b5e428e3-d414-11e7-8292-2c337a69d128} - "D:\Setup.exe"
HKU\S-1-5-18\...\Run: [script_fcbd] => "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat"
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series: C:\Windows\system32\CNMLMBX.DLL [391168 2013-03-24] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\86.0.4240.198\Installer\chrmstp.exe [2020-11-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {217CF7B4-7ADC-43E9-AF72-2FF39B6CFE22} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-10] (Piriform Ltd -> Piriform Ltd)
Task: {26798212-1A17-4768-B5B0-D98531A5CDD0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [474344 2014-06-09] (Acer Incorporated -> Acer Incorporated)
Task: {30A501F3-C5A9-4568-A495-1122360C362C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [757184 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {60ECE462-5B43-4D05-B975-59E3FDF30C34} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2069952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {625E5456-ACF1-4B24-875C-BD538E9B114C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66FB5365-B6EB-4452-9940-1585F3EE52DD} - System32\Tasks\Opera GX scheduled Autoupdate 1604842015 => C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\launcher.exe [1654808 2020-11-24] (Opera Software AS -> Opera Software)
Task: {6A0FAEFB-726E-40DB-AD59-B0FEA14414FD} - \abDocsDllLoader -> Pas de fichier <==== ATTENTION
Task: {798CA983-6C44-44BD-AD9E-3BE8BA3ECC87} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4617832 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
Task: {7D66BCFE-0C4D-414F-ACE5-6043D73E15BA} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [469952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files (x86)\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9C162909-E834-4A06-87A8-02D39FE0C2A6} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
Task: {AA0CEAA2-E399-4620-BF4B-67D5F2C6CA0D} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CA0209E1-1E9A-4787-9E9B-EBD7A2AF9E62} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1604842015" /ENABLE
Task: {CA0209E1-1E9A-4787-9E9B-EBD7A2AF9E62} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {CA30B0A9-6353-43AB-B609-9D309C34F303} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-15] (Google Inc -> Google Inc.)
Task: {D1ECFC9E-4A7D-47F4-84FB-F1F13D49223F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [510912 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DEA5249F-3DFA-4AB4-8716-BF77CCC15C97} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [585600 2014-04-07] (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.)
Task: {DF721455-ADD9-483D-96EF-CA86518395DD} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {EB65F98D-E246-462A-B530-E7D70AFD27D8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {EB6642B5-2550-4D7E-8376-09E74D8E7DF8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {F4B66F25-90C4-45FA-8B9A-17A997BA3D9E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-15] (Google Inc -> Google Inc.)
Task: {FC8AF74C-6C34-42BD-88A0-F3BF6576F25D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [976832 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FC9475C6-543E-421C-AE18-3600A2A3E0FA} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FE6F3901-DBCA-418F-A3C4-F066E10262A2} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-09-18] (Avast Software s.r.o. -> Avast Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2BD203FC-28B9-48B2-87AC-8756896C8B43}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{43DD7D68-1409-436F-B2AA-117EDBD981CD}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6701A446-92B2-4180-B36A-3A2B93F1B7E3}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => non trouvé(e)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> )
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-11-19] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default [2020-11-27]
CHR StartupUrls: Default -> "hxxp://fr.search.yahoo.com/?fr=hp-ddc-bd&type=pr__alt__ddc_dsssyc_bd_com"
CHR Extension: (Slides) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Docs) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (YouTube) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-17]
CHR Extension: (Adobe Acrobat) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-09-16]
CHR Extension: (Dark Reader) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2020-11-27]
CHR Extension: (Sheets) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Google Docs hors connexion) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-27]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-11-27]
CHR Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2020-10-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-13]
CHR Extension: (Gmail) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-15]
CHR Profile: C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\System Profile [2020-09-06]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKU\S-1-5-21-57276330-1550334040-1663376053-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8454552 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [322176 2014-08-27] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [365648 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [3096160 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-03-03] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2019-02-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1728072 2020-11-26] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-10-30] (GOG Sp. z o.o. -> GOG.com)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] (Canon Inc. -> )
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-08-30] (Logitech Inc -> Logitech Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4362656 2016-02-24] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) [Fichier non signé]
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25944 2019-05-24] (LAVASOFT SOFTWARE CANADA INC -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [30208 2016-08-31] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37152 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [206408 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [332368 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [247888 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [97352 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42784 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [176744 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [521752 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [109280 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84856 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [851608 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [469832 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [217336 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326416 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3905536 2014-08-11] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [67736 2016-08-30] (Logitech Inc -> Logitech Inc.)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated -> Acer Incorporated)
S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-09-06] (Nvidia Corporation -> Windows (R) Win 7 DDK provider)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated -> Acer Incorporated)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [92376 2013-10-11] (Realtek Semiconductor Corp -> Realtek)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 AndNetDiag; \SystemRoot\system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; \SystemRoot\system32\DRIVERS\lgandnetmodem64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-01 17:26 - 2020-12-01 17:28 - 000026290 _____ C:\Users\Clément DOHIN\Downloads\FRST.txt
2020-12-01 17:26 - 2020-12-01 17:27 - 000000000 ____D C:\FRST
2020-12-01 17:25 - 2020-12-01 17:25 - 002290176 _____ (Farbar) C:\Users\Clément DOHIN\Downloads\FRST64.exe
2020-11-30 22:48 - 2020-12-01 17:15 - 000020048 _____ C:\Windows\ntbtlog.txt
2020-11-27 20:28 - 2020-11-27 20:28 - 000001046 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-11-27 20:28 - 2020-11-27 20:28 - 000001046 _____ C:\ProgramData\Desktop\VLC media player.lnk
2020-11-27 16:51 - 2020-11-27 17:06 - 000000000 ____D C:\Windows\pss
2020-11-27 16:27 - 2020-11-27 16:33 - 000000000 ____D C:\Users\Clément DOHIN\Desktop\Launcher
2020-11-23 21:12 - 2020-11-23 21:16 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\ModTheSpire
2020-11-23 21:10 - 2020-11-23 21:10 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\GoblinzStudio
2020-11-22 23:22 - 2020-11-22 23:22 - 000044568 _____ () C:\Windows\system32\Drivers\staport.sys
2020-11-22 23:21 - 2020-11-22 23:20 - 000339552 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-11-22 23:21 - 2020-11-22 23:20 - 000217336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-11-19 22:10 - 2020-11-19 22:11 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\Discord
2020-11-19 22:09 - 2020-11-19 22:10 - 062636856 _____ (Discord Inc.) C:\Users\Clément DOHIN\Downloads\DiscordSetup (1).exe
2020-11-19 21:15 - 2020-11-19 21:15 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\Innersloth
2020-11-16 17:33 - 2020-11-16 18:20 - 000013761 _____ C:\Users\Clément DOHIN\Desktop\Black Friday .odt
2020-11-16 17:27 - 2020-11-16 18:20 - 000000921 _____ C:\Users\Clément DOHIN\Desktop\Black Friday.txt
2020-11-15 17:28 - 2020-11-15 17:28 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\Ghost Town Games
2020-11-11 01:23 - 2020-10-13 05:09 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2020-11-11 01:17 - 2020-10-13 05:31 - 002132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2020-11-09 19:17 - 2020-11-09 19:17 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\.mono
2020-11-08 14:27 - 2020-12-01 17:11 - 000004146 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1604842015
2020-11-08 14:27 - 2020-11-30 18:47 - 000001496 _____ C:\Users\Clément DOHIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2020-11-08 14:27 - 2020-11-08 14:27 - 000001502 _____ C:\Users\Clément DOHIN\Desktop\Navigateur Opera GX.lnk
2020-11-08 14:27 - 2020-11-08 14:27 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\Opera Software
2020-11-08 14:25 - 2020-11-08 14:25 - 003654208 _____ (Opera Software) C:\Users\Clément DOHIN\Downloads\OperaGXSetup.exe
2020-11-08 14:25 - 2020-11-08 14:25 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Opera Software
2020-11-06 23:38 - 2020-11-07 19:31 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\BattleriteRoyale
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-01 17:11 - 2016-08-15 09:31 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-12-01 16:59 - 2016-08-15 09:40 - 000000000 ____D C:\ProgramData\Riot Games
2020-12-01 16:51 - 2016-08-15 09:20 - 000003596 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-57276330-1550334040-1663376053-1001
2020-12-01 16:45 - 2015-06-11 02:13 - 000806842 _____ C:\Windows\system32\perfh00C.dat
2020-12-01 16:45 - 2015-06-11 02:13 - 000156662 _____ C:\Windows\system32\perfc00C.dat
2020-12-01 16:45 - 2014-03-18 11:03 - 001817064 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-01 16:45 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2020-12-01 16:41 - 2016-09-26 20:55 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-01 16:41 - 2016-08-19 14:22 - 000000000 ___RD C:\Users\Clément DOHIN\OneDrive
2020-11-30 23:16 - 2016-08-15 09:14 - 000000000 ____D C:\Users\Clément DOHIN
2020-11-30 22:54 - 2016-08-15 09:39 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\discord
2020-11-30 22:52 - 2017-02-08 09:13 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-11-30 22:48 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-29 20:32 - 2016-08-15 09:34 - 000000000 ____D C:\Program Files (x86)\Steam
2020-11-28 17:21 - 2016-08-15 09:14 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\NVIDIA Corporation
2020-11-27 22:09 - 2017-01-04 21:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\vlc
2020-11-27 20:35 - 2017-01-04 21:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\dvdcss
2020-11-27 16:45 - 2016-08-15 09:26 - 000000000 ____D C:\ProgramData\AVAST Software
2020-11-27 16:29 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2020-11-26 17:31 - 2016-10-17 05:00 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2020-11-26 17:28 - 2017-04-24 18:31 - 000000336 _____ C:\Users\Clément DOHIN\Desktop\Niems Compte.txt
2020-11-23 22:10 - 2020-06-02 10:20 - 000004478 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-11-23 22:10 - 2018-09-10 09:12 - 000004130 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-11-23 22:10 - 2018-05-14 17:55 - 000003924 _____ C:\Windows\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2017-10-10 16:43 - 000002806 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-11-23 22:10 - 2017-07-04 13:57 - 000003816 _____ C:\Windows\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-12-15 14:59 - 000004148 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:05 - 000003800 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003740 _____ C:\Windows\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003740 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003732 _____ C:\Windows\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003496 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-08-15 09:24 - 000003504 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-11-23 22:10 - 2016-08-15 09:24 - 000003376 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-11-23 22:10 - 2016-08-15 09:21 - 000003444 _____ C:\Windows\system32\Tasks\BacKGroundAgent
2020-11-23 22:10 - 2015-06-10 18:00 - 000003594 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-57276330-1550334040-1663376053-500
2020-11-23 22:10 - 2015-06-10 17:34 - 000003274 _____ C:\Windows\system32\Tasks\DolbySelectorTask
2020-11-23 22:10 - 2015-03-06 14:42 - 000005316 _____ C:\Windows\system32\Tasks\Software Update Application
2020-11-23 16:15 - 2020-06-02 10:19 - 000002043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-22 23:20 - 2020-10-13 20:19 - 000176744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2020-11-22 23:20 - 2020-04-15 13:42 - 000521752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000332368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000247888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000097352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000037152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-11-22 23:20 - 2018-10-22 21:47 - 000042784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-11-22 23:20 - 2017-11-16 15:01 - 000206408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000851608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000469832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000326416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000109280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000084856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-11-19 22:11 - 2016-08-15 09:38 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\SquirrelTemp
2020-11-19 22:10 - 2016-08-15 09:39 - 000002249 _____ C:\Users\Clément DOHIN\Desktop\Discord.lnk
2020-11-16 16:49 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\NDF
2020-11-16 16:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-11-16 16:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2020-11-14 22:17 - 2020-10-20 16:36 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Ankama Launcher
2020-11-14 16:38 - 2020-10-20 16:36 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\zaap
2020-11-13 13:44 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2020-11-13 13:13 - 2013-08-22 15:44 - 000433664 _____ C:\Windows\system32\FNTCACHE.DAT
2020-11-13 00:59 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ToastData
2020-11-13 00:59 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2020-11-13 00:42 - 2016-08-17 21:41 - 000000000 ____D C:\Windows\system32\MRT
2020-11-13 00:38 - 2016-08-17 21:41 - 133736600 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-11-11 01:26 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2020-11-11 00:49 - 2020-10-15 15:45 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-11-11 00:49 - 2020-10-15 15:45 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-11-09 17:44 - 2017-09-18 10:19 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_2
2020-11-09 17:15 - 2017-09-15 09:00 - 000000129 _____ C:\Users\Clément DOHIN\AppData\Roaming\D2Info0
2020-11-09 17:02 - 2015-03-06 14:42 - 000000000 ____D C:\Program Files (x86)\Acer
2020-11-08 16:08 - 2020-10-11 14:03 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2020-11-08 16:02 - 2016-09-14 15:20 - 000000000 ___HD C:\ProgramData\CanonIJScan
2020-11-08 16:02 - 2016-09-14 15:20 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Canon
2020-11-08 16:01 - 2016-09-14 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2020-11-08 15:59 - 2015-03-06 14:50 - 000000000 ____D C:\Program Files\Acer
2020-11-08 15:59 - 2015-03-06 14:42 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-11-08 15:59 - 2015-03-06 14:42 - 000000000 ____D C:\ProgramData\OEM
2020-11-08 15:57 - 2016-08-15 09:16 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\clear.fi
2020-11-08 15:55 - 2015-03-06 14:42 - 000000000 ____D C:\ProgramData\Acer
2020-11-08 15:54 - 2015-03-06 13:28 - 000000000 ___HD C:\OEM
2020-11-08 14:41 - 2017-09-15 09:00 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_1
2020-11-08 14:24 - 2020-10-11 14:03 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\BraveSoftware
2020-11-08 14:06 - 2017-09-15 09:00 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Dofus
2020-11-06 23:26 - 2017-09-20 23:55 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_3
2020-11-04 17:10 - 2020-10-30 18:01 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\LarianLauncher
2020-11-04 13:43 - 2016-09-13 16:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers ========
2020-05-12 09:10 - 2020-05-16 10:47 - 000000132 _____ () C:\Users\Clément DOHIN\AppData\Roaming\Adobe PNG Format CS5 Prefs
2017-09-15 09:00 - 2020-11-09 17:15 - 000000129 _____ () C:\Users\Clément DOHIN\AppData\Roaming\D2Info0
2017-11-22 21:27 - 2017-12-12 16:35 - 000000133 _____ () C:\Users\Clément DOHIN\AppData\Roaming\D2Info1
2017-09-15 09:00 - 2020-11-08 14:41 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_1
2017-09-18 10:19 - 2020-11-09 17:44 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_2
2017-09-20 23:55 - 2020-11-06 23:26 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_3
2017-10-10 11:34 - 2017-11-23 03:01 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_4
2017-11-22 21:27 - 2017-12-12 15:54 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId1_1
2017-12-05 18:35 - 2017-12-12 16:46 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId1_2
2019-05-08 22:22 - 2019-05-08 22:22 - 000000017 _____ () C:\Users\Clément DOHIN\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2020-11-22 19:11
==================== Fin de FRST.txt ========================
Exécuté par Clément DOHIN (administrateur) sur CLÉMENT (Acer Aspire VN7-791) (01-12-2020 17:26:49)
Exécuté depuis C:\Users\Clément DOHIN\Downloads
Profils chargés: Clément DOHIN
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3>
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Fortemedia Inc -> ) C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler64.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LogitechUpdate.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LULnchr.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Opera Software AS -> Opera Software) C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\71.0.3770.441\opera.exe <25>
(Opera Software AS -> Opera Software) C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\71.0.3770.441\opera_crashreporter.exe
(Qualcomm Atheros -> ) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé] C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Riot Games, Inc. -> ) C:\Riot Games\League of Legends\Game\LeagueCrashHandler.exe
(Riot Games, Inc. -> ) C:\Riot Games\League of Legends\LeagueCrashHandler.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\League of Legends\Game\League of Legends.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\League of Legends\LeagueClient.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\Riot Client\RiotClientServices.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [16286840 2016-08-30] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [117344 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [Fichier non signé]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3424032 2020-10-29] (Valve -> Valve Corporation)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14804552 2020-11-26] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7511384 2019-05-24] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [com.blitz.app] => C:\Users\Clément DOHIN\AppData\Local\Programs\Blitz\Blitz.exe --hidden
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Spotify] => C:\Users\Clément DOHIN\AppData\Roaming\Spotify\Spotify.exe [23325416 2020-10-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\Run: [Discord] => C:\Users\Clément DOHIN\AppData\Local\Discord\app-0.0.308\Discord.exe [91023672 2020-09-10] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\RunOnce: [Application Restart #1] => C:\Users\Clément DOHIN\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-we (l'élément de données a 599 caractères en plus).
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {402bdacf-cba8-11e7-828f-2c337a69d128} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {6727c874-84c9-11ea-82d9-206a8aa6e1bd} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {a18cbc4b-384d-11e9-82bc-206a8aa6e1bd} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {b3b5d7d5-2690-11eb-82e4-2c337a69d128} - "D:\OnePlus_setup.exe" /s
HKU\S-1-5-21-57276330-1550334040-1663376053-1001\...\MountPoints2: {b5e428e3-d414-11e7-8292-2c337a69d128} - "D:\Setup.exe"
HKU\S-1-5-18\...\Run: [script_fcbd] => "C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat"
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series: C:\Windows\system32\CNMLMBX.DLL [391168 2013-03-24] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\86.0.4240.198\Installer\chrmstp.exe [2020-11-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-08-27] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {217CF7B4-7ADC-43E9-AF72-2FF39B6CFE22} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-10] (Piriform Ltd -> Piriform Ltd)
Task: {26798212-1A17-4768-B5B0-D98531A5CDD0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [474344 2014-06-09] (Acer Incorporated -> Acer Incorporated)
Task: {30A501F3-C5A9-4568-A495-1122360C362C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [757184 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {60ECE462-5B43-4D05-B975-59E3FDF30C34} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2069952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {625E5456-ACF1-4B24-875C-BD538E9B114C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66FB5365-B6EB-4452-9940-1585F3EE52DD} - System32\Tasks\Opera GX scheduled Autoupdate 1604842015 => C:\Users\Clément DOHIN\AppData\Local\Programs\Opera GX\launcher.exe [1654808 2020-11-24] (Opera Software AS -> Opera Software)
Task: {6A0FAEFB-726E-40DB-AD59-B0FEA14414FD} - \abDocsDllLoader -> Pas de fichier <==== ATTENTION
Task: {798CA983-6C44-44BD-AD9E-3BE8BA3ECC87} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4617832 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
Task: {7D66BCFE-0C4D-414F-ACE5-6043D73E15BA} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [469952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files (x86)\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9C162909-E834-4A06-87A8-02D39FE0C2A6} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
Task: {AA0CEAA2-E399-4620-BF4B-67D5F2C6CA0D} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CA0209E1-1E9A-4787-9E9B-EBD7A2AF9E62} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1604842015" /ENABLE
Task: {CA0209E1-1E9A-4787-9E9B-EBD7A2AF9E62} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {CA30B0A9-6353-43AB-B609-9D309C34F303} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-15] (Google Inc -> Google Inc.)
Task: {D1ECFC9E-4A7D-47F4-84FB-F1F13D49223F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [510912 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DEA5249F-3DFA-4AB4-8716-BF77CCC15C97} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [585600 2014-04-07] (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.)
Task: {DF721455-ADD9-483D-96EF-CA86518395DD} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {EB65F98D-E246-462A-B530-E7D70AFD27D8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {EB6642B5-2550-4D7E-8376-09E74D8E7DF8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {F4B66F25-90C4-45FA-8B9A-17A997BA3D9E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-15] (Google Inc -> Google Inc.)
Task: {FC8AF74C-6C34-42BD-88A0-F3BF6576F25D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [976832 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FC9475C6-543E-421C-AE18-3600A2A3E0FA} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FE6F3901-DBCA-418F-A3C4-F066E10262A2} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-09-18] (Avast Software s.r.o. -> Avast Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2BD203FC-28B9-48B2-87AC-8756896C8B43}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{43DD7D68-1409-436F-B2AA-117EDBD981CD}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6701A446-92B2-4180-B36A-3A2B93F1B7E3}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => non trouvé(e)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> )
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-11-19] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default [2020-11-27]
CHR StartupUrls: Default -> "hxxp://fr.search.yahoo.com/?fr=hp-ddc-bd&type=pr__alt__ddc_dsssyc_bd_com"
CHR Extension: (Slides) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Docs) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (YouTube) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-17]
CHR Extension: (Adobe Acrobat) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-09-16]
CHR Extension: (Dark Reader) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2020-11-27]
CHR Extension: (Sheets) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Google Docs hors connexion) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-27]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-11-27]
CHR Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2020-10-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-13]
CHR Extension: (Gmail) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-15]
CHR Profile: C:\Users\Clément DOHIN\AppData\Local\Google\Chrome\User Data\System Profile [2020-09-06]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKU\S-1-5-21-57276330-1550334040-1663376053-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8454552 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [322176 2014-08-27] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [365648 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [3096160 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-03-03] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2019-02-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1728072 2020-11-26] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-10-30] (GOG Sp. z o.o. -> GOG.com)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] (Canon Inc. -> )
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-08-30] (Logitech Inc -> Logitech Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4362656 2016-02-24] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) [Fichier non signé]
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25944 2019-05-24] (LAVASOFT SOFTWARE CANADA INC -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\siteadvisor\mcsacore.exe [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [30208 2016-08-31] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37152 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [206408 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [332368 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [247888 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [97352 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42784 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [176744 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [521752 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [109280 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84856 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [851608 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [469832 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [217336 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326416 2020-11-22] (Avast Software s.r.o. -> AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3905536 2014-08-11] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [67736 2016-08-30] (Logitech Inc -> Logitech Inc.)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated -> Acer Incorporated)
S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2014-09-06] (Nvidia Corporation -> Windows (R) Win 7 DDK provider)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated -> Acer Incorporated)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [92376 2013-10-11] (Realtek Semiconductor Corp -> Realtek)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 AndNetDiag; \SystemRoot\system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; \SystemRoot\system32\DRIVERS\lgandnetmodem64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-01 17:26 - 2020-12-01 17:28 - 000026290 _____ C:\Users\Clément DOHIN\Downloads\FRST.txt
2020-12-01 17:26 - 2020-12-01 17:27 - 000000000 ____D C:\FRST
2020-12-01 17:25 - 2020-12-01 17:25 - 002290176 _____ (Farbar) C:\Users\Clément DOHIN\Downloads\FRST64.exe
2020-11-30 22:48 - 2020-12-01 17:15 - 000020048 _____ C:\Windows\ntbtlog.txt
2020-11-27 20:28 - 2020-11-27 20:28 - 000001046 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-11-27 20:28 - 2020-11-27 20:28 - 000001046 _____ C:\ProgramData\Desktop\VLC media player.lnk
2020-11-27 16:51 - 2020-11-27 17:06 - 000000000 ____D C:\Windows\pss
2020-11-27 16:27 - 2020-11-27 16:33 - 000000000 ____D C:\Users\Clément DOHIN\Desktop\Launcher
2020-11-23 21:12 - 2020-11-23 21:16 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\ModTheSpire
2020-11-23 21:10 - 2020-11-23 21:10 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\GoblinzStudio
2020-11-22 23:22 - 2020-11-22 23:22 - 000044568 _____ () C:\Windows\system32\Drivers\staport.sys
2020-11-22 23:21 - 2020-11-22 23:20 - 000339552 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-11-22 23:21 - 2020-11-22 23:20 - 000217336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-11-19 22:10 - 2020-11-19 22:11 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\Discord
2020-11-19 22:09 - 2020-11-19 22:10 - 062636856 _____ (Discord Inc.) C:\Users\Clément DOHIN\Downloads\DiscordSetup (1).exe
2020-11-19 21:15 - 2020-11-19 21:15 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\Innersloth
2020-11-16 17:33 - 2020-11-16 18:20 - 000013761 _____ C:\Users\Clément DOHIN\Desktop\Black Friday .odt
2020-11-16 17:27 - 2020-11-16 18:20 - 000000921 _____ C:\Users\Clément DOHIN\Desktop\Black Friday.txt
2020-11-15 17:28 - 2020-11-15 17:28 - 000000000 ____D C:\Users\Clément DOHIN\AppData\LocalLow\Ghost Town Games
2020-11-11 01:23 - 2020-10-13 05:09 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2020-11-11 01:17 - 2020-10-13 05:31 - 002132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2020-11-09 19:17 - 2020-11-09 19:17 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\.mono
2020-11-08 14:27 - 2020-12-01 17:11 - 000004146 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1604842015
2020-11-08 14:27 - 2020-11-30 18:47 - 000001496 _____ C:\Users\Clément DOHIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2020-11-08 14:27 - 2020-11-08 14:27 - 000001502 _____ C:\Users\Clément DOHIN\Desktop\Navigateur Opera GX.lnk
2020-11-08 14:27 - 2020-11-08 14:27 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\Opera Software
2020-11-08 14:25 - 2020-11-08 14:25 - 003654208 _____ (Opera Software) C:\Users\Clément DOHIN\Downloads\OperaGXSetup.exe
2020-11-08 14:25 - 2020-11-08 14:25 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Opera Software
2020-11-06 23:38 - 2020-11-07 19:31 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\BattleriteRoyale
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-01 17:11 - 2016-08-15 09:31 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-12-01 16:59 - 2016-08-15 09:40 - 000000000 ____D C:\ProgramData\Riot Games
2020-12-01 16:51 - 2016-08-15 09:20 - 000003596 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-57276330-1550334040-1663376053-1001
2020-12-01 16:45 - 2015-06-11 02:13 - 000806842 _____ C:\Windows\system32\perfh00C.dat
2020-12-01 16:45 - 2015-06-11 02:13 - 000156662 _____ C:\Windows\system32\perfc00C.dat
2020-12-01 16:45 - 2014-03-18 11:03 - 001817064 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-01 16:45 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2020-12-01 16:41 - 2016-09-26 20:55 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-01 16:41 - 2016-08-19 14:22 - 000000000 ___RD C:\Users\Clément DOHIN\OneDrive
2020-11-30 23:16 - 2016-08-15 09:14 - 000000000 ____D C:\Users\Clément DOHIN
2020-11-30 22:54 - 2016-08-15 09:39 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\discord
2020-11-30 22:52 - 2017-02-08 09:13 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-11-30 22:48 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-29 20:32 - 2016-08-15 09:34 - 000000000 ____D C:\Program Files (x86)\Steam
2020-11-28 17:21 - 2016-08-15 09:14 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\NVIDIA Corporation
2020-11-27 22:09 - 2017-01-04 21:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\vlc
2020-11-27 20:35 - 2017-01-04 21:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\dvdcss
2020-11-27 16:45 - 2016-08-15 09:26 - 000000000 ____D C:\ProgramData\AVAST Software
2020-11-27 16:29 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2020-11-26 17:31 - 2016-10-17 05:00 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2020-11-26 17:28 - 2017-04-24 18:31 - 000000336 _____ C:\Users\Clément DOHIN\Desktop\Niems Compte.txt
2020-11-23 22:10 - 2020-06-02 10:20 - 000004478 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-11-23 22:10 - 2018-09-10 09:12 - 000004130 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-11-23 22:10 - 2018-05-14 17:55 - 000003924 _____ C:\Windows\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2017-10-10 16:43 - 000002806 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-11-23 22:10 - 2017-07-04 13:57 - 000003816 _____ C:\Windows\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-12-15 14:59 - 000004148 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:05 - 000003800 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003740 _____ C:\Windows\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003740 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003732 _____ C:\Windows\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-10-13 15:04 - 000003496 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-23 22:10 - 2016-08-15 09:24 - 000003504 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-11-23 22:10 - 2016-08-15 09:24 - 000003376 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-11-23 22:10 - 2016-08-15 09:21 - 000003444 _____ C:\Windows\system32\Tasks\BacKGroundAgent
2020-11-23 22:10 - 2015-06-10 18:00 - 000003594 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-57276330-1550334040-1663376053-500
2020-11-23 22:10 - 2015-06-10 17:34 - 000003274 _____ C:\Windows\system32\Tasks\DolbySelectorTask
2020-11-23 22:10 - 2015-03-06 14:42 - 000005316 _____ C:\Windows\system32\Tasks\Software Update Application
2020-11-23 16:15 - 2020-06-02 10:19 - 000002043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-22 23:20 - 2020-10-13 20:19 - 000176744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2020-11-22 23:20 - 2020-04-15 13:42 - 000521752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000332368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000247888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000097352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-11-22 23:20 - 2019-01-05 21:05 - 000037152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-11-22 23:20 - 2018-10-22 21:47 - 000042784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-11-22 23:20 - 2017-11-16 15:01 - 000206408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000851608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000469832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000326416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000109280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-11-22 23:20 - 2016-08-15 09:31 - 000084856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-11-19 22:11 - 2016-08-15 09:38 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\SquirrelTemp
2020-11-19 22:10 - 2016-08-15 09:39 - 000002249 _____ C:\Users\Clément DOHIN\Desktop\Discord.lnk
2020-11-16 16:49 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\NDF
2020-11-16 16:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-11-16 16:42 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2020-11-14 22:17 - 2020-10-20 16:36 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Ankama Launcher
2020-11-14 16:38 - 2020-10-20 16:36 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\zaap
2020-11-13 13:44 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2020-11-13 13:13 - 2013-08-22 15:44 - 000433664 _____ C:\Windows\system32\FNTCACHE.DAT
2020-11-13 00:59 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ToastData
2020-11-13 00:59 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2020-11-13 00:42 - 2016-08-17 21:41 - 000000000 ____D C:\Windows\system32\MRT
2020-11-13 00:38 - 2016-08-17 21:41 - 133736600 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-11-11 01:26 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2020-11-11 00:49 - 2020-10-15 15:45 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-11-11 00:49 - 2020-10-15 15:45 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-11-09 17:44 - 2017-09-18 10:19 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_2
2020-11-09 17:15 - 2017-09-15 09:00 - 000000129 _____ C:\Users\Clément DOHIN\AppData\Roaming\D2Info0
2020-11-09 17:02 - 2015-03-06 14:42 - 000000000 ____D C:\Program Files (x86)\Acer
2020-11-08 16:08 - 2020-10-11 14:03 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2020-11-08 16:02 - 2016-09-14 15:20 - 000000000 ___HD C:\ProgramData\CanonIJScan
2020-11-08 16:02 - 2016-09-14 15:20 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Canon
2020-11-08 16:01 - 2016-09-14 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2020-11-08 15:59 - 2015-03-06 14:50 - 000000000 ____D C:\Program Files\Acer
2020-11-08 15:59 - 2015-03-06 14:42 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-11-08 15:59 - 2015-03-06 14:42 - 000000000 ____D C:\ProgramData\OEM
2020-11-08 15:57 - 2016-08-15 09:16 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\clear.fi
2020-11-08 15:55 - 2015-03-06 14:42 - 000000000 ____D C:\ProgramData\Acer
2020-11-08 15:54 - 2015-03-06 13:28 - 000000000 ___HD C:\OEM
2020-11-08 14:41 - 2017-09-15 09:00 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_1
2020-11-08 14:24 - 2020-10-11 14:03 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\BraveSoftware
2020-11-08 14:06 - 2017-09-15 09:00 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Roaming\Dofus
2020-11-06 23:26 - 2017-09-20 23:55 - 000000008 _____ C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_3
2020-11-04 17:10 - 2020-10-30 18:01 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\LarianLauncher
2020-11-04 13:43 - 2016-09-13 16:49 - 000000000 ____D C:\Users\Clément DOHIN\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers ========
2020-05-12 09:10 - 2020-05-16 10:47 - 000000132 _____ () C:\Users\Clément DOHIN\AppData\Roaming\Adobe PNG Format CS5 Prefs
2017-09-15 09:00 - 2020-11-09 17:15 - 000000129 _____ () C:\Users\Clément DOHIN\AppData\Roaming\D2Info0
2017-11-22 21:27 - 2017-12-12 16:35 - 000000133 _____ () C:\Users\Clément DOHIN\AppData\Roaming\D2Info1
2017-09-15 09:00 - 2020-11-08 14:41 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_1
2017-09-18 10:19 - 2020-11-09 17:44 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_2
2017-09-20 23:55 - 2020-11-06 23:26 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_3
2017-10-10 11:34 - 2017-11-23 03:01 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId0_4
2017-11-22 21:27 - 2017-12-12 15:54 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId1_1
2017-12-05 18:35 - 2017-12-12 16:46 - 000000008 _____ () C:\Users\Clément DOHIN\AppData\Roaming\DofusAppId1_2
2019-05-08 22:22 - 2019-05-08 22:22 - 000000017 _____ () C:\Users\Clément DOHIN\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2020-11-22 19:11
==================== Fin de FRST.txt ========================