Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020
Exécuté par charr (administrateur) sur LAPTOP-1S0AMNQ0 (Acer Aspire E5-774G) (20-12-2020 11:53:34)
Exécuté depuis C:\Users\charr\Downloads
Profils chargés: charr
Platform: Windows 10 Home Version 2004 19041.685 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated -> acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Acer Incorporated -> TODO:) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(F-Secure Corporation -> Darty Corporation) C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe <3>
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe <2>
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\FsPisces.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) CN -> Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\updater-ws.exe
(LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\ws.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\charr\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\charr\AppData\Local\Microsoft\Teams\current\Teams.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.680_none_e72768c3263f99bc\TiWorker.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SweetLabs Inc. -> SweetLabs, Inc) C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Darty Cloud] => C:\Users\charr\AppData\Local\Pack Sérénité\Darty Cloud\bin\DartyCloud.exe [1144448 2019-05-10] (Oodrive -> Oodrive)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [FSKeyAutoStart] => C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe [6952416 2018-07-04] (F-Secure Corporation -> Darty Corporation)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32711056 2020-12-12] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\charr\AppData\Local\Microsoft\Teams\Update.exe [2453688 2020-11-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Spotify] => C:\Users\charr\AppData\Roaming\Spotify\Spotify.exe [23233936 2020-12-05] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\MountPoints2: {cf8fbe72-e530-11e9-8f41-3ca0679167de} - "G:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MX530 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDC3.DLL [30208 2013-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Soda PDF Desktop 11 Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\soda_pdfpmon_v.4.12.26.3.dll [932984 2020-03-09] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0410318A-4D9D-4CEF-A82D-2CA48BA0080E} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {04CF2EBC-8D13-4AEB-8C9B-0E1FAF38DA89} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [40352 2016-06-24] (Acer Incorporated -> )
Task: {0905A605-1B56-484A-9D4B-B9ED739DBDEF} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {18BB7ABA-BC9D-4859-8264-A0B78D138880} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {28681A1D-DC3C-4F27-B007-5F4A0B891125} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {3CC172CB-0F87-4324-B779-EA164BD9F3BC} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {3F61DDD1-12EC-4487-9A85-78C44546CE1E} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {48800AF4-E74C-4FBC-AF32-6FC36829348F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B52A1E1-347A-4FE6-BB4F-C31EBD9BE80F} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\WINDOWS\system32\EOSNotify.exe
Task: {541CBC37-5C4D-47CC-97EE-544A80791093} - System32\Tasks\F-Secure\F-Secure Hotfix => C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fs_hotfix.exe [308608 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
Task: {54C79489-DAD7-48D9-B67D-0AE8084F2DBD} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [422704 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {5804CF46-8CC0-49D0-8CAC-CB55AF24C19C} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {58EE4B15-C5C7-4BCF-88B7-A90FFD7BBE4A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.)
Task: {5C22EA54-D41D-4962-981C-FD89FC794D33} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F1E8EB6-24CF-42BD-B8B8-92A90FBBAF23} - System32\Tasks\Acer Collection Application => C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe [479024 2017-12-14] (Acer Incorporated -> )
Task: {6984CA35-2053-4E8D-94A1-4A6E1130EA48} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296 2014-03-12] (Acer Incorporated -> TODO:)
Task: {6DACFD6D-745D-4E25-B3C8-BF04D778B9F0} - System32\Tasks\Opera scheduled Autoupdate 1600540508 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe
Task: {6EB5BF64-362B-4F51-8E78-3FF137DD1D6E} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated)
Task: {8A700F4E-0E55-4964-BFE8-92E15BF46CCC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {9200BB53-2BB7-4446-9404-FDB7460F3B79} - System32\Tasks\App Explorer => C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7968424 2020-12-03] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION
Task: {9BF56B96-63E7-4C86-945D-DF8D5355D99C} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [417072 2017-12-13] (Acer Incorporated -> Acer Incorporated)
Task: {AB763A04-1EA9-4E28-8F85-3694BDB46D69} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {B49E89A1-8BCA-45A0-BCC5-CDA8764B8DCF} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe
Task: {B770338B-E232-485E-9E44-8AA4646124CA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\WSCStub.exe [707624 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {B88DB2C1-8F91-4D69-A5EF-9F2CE0563857} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.)
Task: {C6E1E844-46C9-4931-89C4-B8CE301279CC} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2919840 2016-06-24] (Acer Incorporated -> )
Task: {CF25D159-2FCF-4347-B04A-A4CEAA9CA643} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4644256 2016-06-24] (Acer Incorporated -> )
Task: {D91E5E3D-54D7-402F-B219-240BE33ACF95} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2767152 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {DB8A461D-7D14-4944-89B0-227A9BF02901} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {DDB78B42-73DA-48E3-9478-8F9C1DD04AFC} - System32\Tasks\Opera scheduled assistant Autoupdate 1600540521 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\charr\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {E451FC6F-04C2-4038-8258-205B83433E22} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {FB1EEE25-8412-49A0-8C46-2DA942647284} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {FD2AA348-8760-4077-AFA6-1BDDBCAD3B42} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{0276e560-2451-4c76-acce-aade3a1fa80f}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{aca2f51c-c98b-476f-a53f-67f0130e5e0c}: [DhcpNameServer] 40.33.1.66
Edge:
======
Edge DefaultProfile: Default
Edge Profile: C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-20]
Edge Extension: (Browsing Protection by F-Secure) - C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-10-13]
Edge HKLM\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
Edge HKLM-x32\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
FireFox:
========
FF DefaultProfile: uijzdugu.default
FF ProfilePath: C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default [2020-12-20]
FF Homepage: Mozilla\Firefox\Profiles\uijzdugu.default -> hxxps://www.google.fr/search?q=google&ie=utf-8&oe=utf-8&gws_rd=cr&dcr=0&ei=IX3PWb_lDIn1aMzPlvgB
FF Extension: (Français Language Pack) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2019-05-12]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\sp@avast.com.xpi [2020-12-20]
FF Extension: (Avast Online Security) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\wrc@avast.com.xpi [2020-12-20]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2020-12-20] []
FF Extension: (Français Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-fr@firefox.mozilla.org [2020-12-20] []
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2020-12-20] []
FF HKLM\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF Extension: (Soda PDF Desktop 11 Creator) - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi [2019-10-09]
FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-15] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default [2020-12-20]
CHR StartupUrls: Default -> "hxxps://www.bing.com/?FORM=SLBRDF&PC=SL09"
CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?FORM=SLBRDF&PC=SL10&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Slides) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-18]
CHR Extension: (Safe Torrent Scanner) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2020-11-23]
CHR Extension: (Docs) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-18]
CHR Extension: (Google Drive) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-26]
CHR Extension: (YouTube) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2019-04-25]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-09]
CHR Extension: (Sheets) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-18]
CHR Extension: (Fenetre Mailto) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gepijnnkhnilemhhacebnhcndgogkamc [2020-03-10]
CHR Extension: (Google Docs hors connexion) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-16]
CHR Extension: (Norton Identity Safe) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-09-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-14]
CHR Extension: (Gmail) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-26]
CHR Extension: (Chrome Media Router) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-14]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2016-08-31] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-03-27] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-12-01] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 fshoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
R2 fsnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulhoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulorsp; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe [101248 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulprothoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 NortonSecurity; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe [225608 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R2 nsWscSvc; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe [936808 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2329904 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3204912 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [441136 2016-09-13] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [482608 2016-09-13] (Acer Incorporated -> Acer Incorporated)
R3 Soda PDF Desktop 11; C:\Program Files\Soda PDF Desktop 11\ws.exe [2470160 2019-10-09] (LULU Software -> LULU Software)
S3 Soda PDF Desktop 11 Creator; C:\Program Files\Soda PDF Desktop 11\creator\common\creator-ws.exe [575248 2019-10-09] (LULU Software -> LULU Software)
R2 Soda PDF Desktop 11 Update Service; C:\Program Files\Soda PDF Desktop 11\updater-ws.exe [1784080 2019-10-09] (LULU Software -> LULU Software)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [301872 2018-01-10] (Acer Incorporated -> acer)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20181204.001\BHDrvx64.sys [1925104 2018-11-19] (Symantec Corporation -> Symantec Corporation)
R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\ccSetx64.sys [194416 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [515792 2018-11-29] (Symantec Corporation -> Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153296 2018-12-09] (Symantec Corporation -> Symantec Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulgk.sys [321768 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R1 F-Secure UL HIPS; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshs.sys [104680 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R0 fsbts; C:\WINDOWS\System32\drivers\fsbts.sys [58752 2020-12-02] (F-Secure Corporation -> F-Secure Corporation)
S0 fselms; C:\WINDOWS\System32\drivers\fselms.sys [15304 2020-07-18] (Microsoft Windows Early Launch Anti-malware Publisher -> F-Secure Corporation)
R2 fsnif2; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\nif2\1606295644\nif2s64.sys [179440 2020-11-25] (F-Secure Corporation -> F-Secure Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\IPSDefs\20181207.061\IDSvia64.sys [1305072 2018-11-23] (Symantec Corporation -> Symantec Corporation)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated -> Acer Incorporated)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated -> Acer Incorporated)
S3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSP64.SYS [885936 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSPX64.SYS [50864 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45928 2017-06-29] (SteelSeries ApS -> SteelSeries ApS)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SYMEFASI64.SYS [1963400 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SymELAM.sys [25744 2019-09-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100064 2019-03-30] (Symantec Corporation -> Symantec Corporation)
S4 SymEvnt; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\SymPlatform\SymEvnt.sys [114352 2018-10-27] (Symantec Corporation -> Symantec Corporation)
R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\Ironx64.SYS [316656 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\symnets.sys [573448 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [78216 2020-08-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [430320 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\wpCtrlDrv.sys [1012120 2019-09-11] (Symantec Corporation -> Symantec Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-20 12:05 - 2020-12-20 12:05 - 000000256 _____ C:\Users\charr\Desktop\Download Now 64-Bit Version (2).URL
2020-12-20 11:53 - 2020-12-20 12:01 - 000031762 _____ C:\Users\charr\Downloads\FRST.txt
2020-12-20 11:51 - 2020-12-20 11:51 - 002286592 _____ (Farbar) C:\Users\charr\Downloads\FRST64(1).exe
2020-12-20 11:41 - 2020-12-20 11:58 - 000000000 ____D C:\FRST
2020-12-20 11:40 - 2020-12-20 11:40 - 002286592 _____ (Farbar) C:\Users\charr\Downloads\FRST64.exe
2020-12-20 10:48 - 2020-12-20 11:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-12-16 11:58 - 2020-12-16 11:58 - 000133454 _____ C:\Users\charr\Downloads\2020-2021_L1_UE104_ThéorieKaraté_Session1_SUJET (1).pdf
2020-12-15 21:26 - 2020-12-15 21:26 - 005044013 _____ C:\Users\charr\Downloads\Team_Psycho_-_GKR.pdf
2020-12-15 12:25 - 2020-12-15 12:25 - 000223127 _____ C:\Users\charr\Downloads\CLR - REGLAMENTO.pdf
2020-12-14 14:07 - 2020-12-14 14:07 - 000868305 _____ C:\Users\charr\Downloads\PJ_B01_22009723_2020.pdf
2020-12-13 12:33 - 2020-12-13 12:33 - 003630944 _____ C:\Users\charr\Downloads\TEF2018_141.pdf
2020-12-13 12:33 - 2020-12-13 12:33 - 000108032 _____ C:\Users\charr\Downloads\T18F141.xls
2020-12-12 17:00 - 2020-12-12 17:00 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-12-12 16:59 - 2020-12-12 16:59 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-12-12 16:58 - 2020-12-12 16:58 - 001333248 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-12-12 16:58 - 2020-12-12 16:58 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000010912 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-12-12 16:57 - 2020-12-12 16:57 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2020-12-12 16:57 - 2020-12-12 16:57 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2020-12-12 16:56 - 2020-12-12 16:56 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-12-12 16:56 - 2020-12-12 16:56 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2020-12-12 16:56 - 2020-12-12 16:56 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-12-12 16:55 - 2020-12-12 16:55 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-12-12 16:55 - 2020-12-12 16:55 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-12-12 16:55 - 2020-12-12 16:55 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2020-12-12 16:54 - 2020-12-12 16:54 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000165376 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-12-12 16:54 - 2020-12-12 16:54 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-12-10 11:17 - 2020-12-10 11:17 - 000166547 _____ C:\Users\charr\Downloads\Non confirmé 481865.crdownload
2020-12-09 11:53 - 2020-12-09 11:53 - 006755768 _____ C:\Users\charr\Downloads\anatomie_cours_entier_sa_mere_la_pute (1).odt
2020-12-09 11:51 - 2020-12-09 11:51 - 000868305 _____ C:\Users\charr\Downloads\AttestationCIP.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000653924 _____ C:\Users\charr\Downloads\UE 106 MAE ROCHE.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000577243 _____ C:\Users\charr\Downloads\UE 102 HISTOIRE DU MOUVEMENT SPORTIF.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000488611 _____ C:\Users\charr\Downloads\10 THÉORIE KARATE.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000464979 _____ C:\Users\charr\Downloads\UE 103 ECONOMIE ET GESTION.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000206797 _____ C:\Users\charr\Downloads\14 THÉORIE WATER POLO.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000143408 _____ C:\Users\charr\Downloads\5 THÉORIE DANSE.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000569847 _____ C:\Users\charr\Downloads\10 Théorie Karaté.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000375903 _____ C:\Users\charr\Downloads\Sujet UE 102 Histoire.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000303619 _____ C:\Users\charr\Downloads\SUJET UE 106 MAE Thomas .pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000296784 _____ C:\Users\charr\Downloads\13 Théorie water-polo.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000202744 _____ C:\Users\charr\Downloads\Sujet UE 106 Passerelle staps-kiné session 1 déc 2017.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000201752 _____ C:\Users\charr\Downloads\Sujet UE 103 Eco Gestion .pdf
2020-12-07 15:57 - 2020-12-07 15:58 - 001580292 _____ C:\Users\charr\Downloads\Textes Histoire 1.pdf
2020-12-07 15:48 - 2020-12-07 15:49 - 000018899 _____ C:\Users\charr\Downloads\LISTE STAGE ANGLAIS OUI SI STAPS Clermont - 6 groupes.xlsx
2020-12-07 15:43 - 2020-12-07 15:43 - 000252717 _____ C:\Users\charr\Downloads\AttestationJDC.zip
2020-12-07 15:43 - 2020-12-07 15:43 - 000252713 _____ C:\Users\charr\Downloads\AttestationJDC (1).zip
2020-12-04 16:58 - 2020-12-04 16:58 - 000307136 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN DISTANCIEL L1 CLERMONT FERRAND S1 2020 2021.pdf
2020-12-04 16:58 - 2020-12-04 16:58 - 000219759 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN PRESENTIEL L1 CLERMONT FERRAND S1 2020 2021.pdf
2020-12-04 15:57 - 2020-12-04 15:57 - 000177612 _____ C:\Users\charr\Downloads\AttestationJDCR.pdf
2020-12-02 16:52 - 2020-12-02 16:53 - 000794415 _____ C:\Users\charr\Downloads\tuto utilisation espace jeune sommaire.pdf
2020-12-01 20:49 - 2020-12-01 20:49 - 004834925 _____ C:\Users\charr\Downloads\Les Souvenirs Final.m4a
2020-11-26 18:44 - 2020-12-18 14:19 - 000000000 ____D C:\Users\charr\AppData\Local\Spotify
2020-11-26 18:44 - 2020-11-26 18:44 - 000001854 _____ C:\Users\charr\Desktop\Spotify.lnk
2020-11-26 18:44 - 2020-11-26 18:44 - 000001840 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2020-11-26 18:43 - 2020-12-18 14:11 - 000000000 ____D C:\Users\charr\AppData\Roaming\Spotify
2020-11-26 18:42 - 2020-11-26 18:42 - 000892232 _____ (Spotify Ltd) C:\Users\charr\Downloads\SpotifySetup.exe
2020-11-24 18:19 - 2020-11-24 18:19 - 001491093 _____ C:\Users\charr\Downloads\L1 présentation UFR STAPS rentrée 2020 version RENTREE 31-08-2020 (4).pptx
2020-11-23 18:04 - 2020-11-23 18:05 - 000012588 _____ C:\Users\charr\Downloads\Invoice-OD25063.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-20 12:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-20 11:30 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-20 11:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-12-20 11:20 - 2017-09-16 17:14 - 000000000 ____D C:\Users\charr\AppData\LocalLow\Mozilla
2020-12-20 11:00 - 2020-06-20 14:20 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-20 11:00 - 2020-06-20 14:20 - 000002267 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-12-20 11:00 - 2017-03-23 03:37 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-20 11:00 - 2017-03-23 03:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-20 10:57 - 2017-09-16 16:59 - 000000000 ____D C:\Users\charr\AppData\Local\Host App Service
2020-12-20 10:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-20 10:53 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-12-20 10:44 - 2020-09-25 01:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-12-18 13:59 - 2017-09-16 17:05 - 000000000 __SHD C:\Users\charr\IntelGraphicsProfiles
2020-12-18 13:56 - 2017-03-23 03:11 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-18 13:55 - 2020-09-25 02:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-12-18 13:55 - 2020-09-25 01:05 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-17 12:11 - 2019-10-02 17:21 - 000002164 _____ C:\Users\Public\Desktop\Darty Sécurité.lnk
2020-12-17 12:11 - 2019-10-02 15:48 - 000000000 ____D C:\ProgramData\F-Secure
2020-12-17 11:27 - 2017-09-16 17:05 - 000000000 ____D C:\Users\charr\AppData\Local\Packages
2020-12-16 14:45 - 2017-09-17 18:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-12-16 14:05 - 2017-09-17 18:55 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-12-15 21:01 - 2017-03-23 02:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-12-15 13:11 - 2020-09-25 01:11 - 000000000 ____D C:\Users\charr
2020-12-14 22:15 - 2020-09-25 02:01 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1333090055-3807291771-4262163453-1001
2020-12-14 22:15 - 2020-09-25 01:11 - 000002409 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-14 22:15 - 2017-09-16 17:11 - 000000000 ___RD C:\Users\charr\OneDrive
2020-12-14 09:33 - 2020-09-25 01:27 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-12-14 09:33 - 2019-12-07 15:49 - 000792838 _____ C:\WINDOWS\system32\perfh00C.dat
2020-12-14 09:33 - 2019-12-07 15:49 - 000149968 _____ C:\WINDOWS\system32\perfc00C.dat
2020-12-14 00:33 - 2020-09-25 01:05 - 000435232 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-12-14 00:31 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-12 17:20 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-12-04 10:05 - 2020-09-25 02:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-04 10:05 - 2020-09-25 02:01 - 000003464 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-02 13:45 - 2019-10-02 17:27 - 000058752 _____ (F-Secure Corporation) C:\WINDOWS\system32\Drivers\fsbts.sys
2020-11-28 10:06 - 2020-09-25 02:01 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-28 10:06 - 2020-09-25 02:01 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-11-27 00:07 - 2020-11-17 21:25 - 000000000 ____D C:\Users\charr\AppData\Roaming\Molotov
2020-11-20 23:20 - 2017-10-11 16:48 - 000000000 ____D C:\Users\charr\AppData\Roaming\CyberLink
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\system32\eac_usermode_192940383298992.dll [2019-06-05] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_334110525781145.dll [2019-07-05] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_487699285482387.dll [2019-07-17] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_53072229187599.dll [2019-06-13] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par charr (administrateur) sur LAPTOP-1S0AMNQ0 (Acer Aspire E5-774G) (20-12-2020 11:53:34)
Exécuté depuis C:\Users\charr\Downloads
Profils chargés: charr
Platform: Windows 10 Home Version 2004 19041.685 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated -> acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Acer Incorporated -> TODO:
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(F-Secure Corporation -> Darty Corporation) C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe <3>
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe <2>
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\FsPisces.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) CN -> Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\updater-ws.exe
(LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\ws.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\charr\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\charr\AppData\Local\Microsoft\Teams\current\Teams.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.680_none_e72768c3263f99bc\TiWorker.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SweetLabs Inc. -> SweetLabs, Inc) C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Darty Cloud] => C:\Users\charr\AppData\Local\Pack Sérénité\Darty Cloud\bin\DartyCloud.exe [1144448 2019-05-10] (Oodrive -> Oodrive)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [FSKeyAutoStart] => C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe [6952416 2018-07-04] (F-Secure Corporation -> Darty Corporation)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32711056 2020-12-12] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\charr\AppData\Local\Microsoft\Teams\Update.exe [2453688 2020-11-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Spotify] => C:\Users\charr\AppData\Roaming\Spotify\Spotify.exe [23233936 2020-12-05] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\MountPoints2: {cf8fbe72-e530-11e9-8f41-3ca0679167de} - "G:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MX530 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDC3.DLL [30208 2013-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Soda PDF Desktop 11 Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\soda_pdfpmon_v.4.12.26.3.dll [932984 2020-03-09] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0410318A-4D9D-4CEF-A82D-2CA48BA0080E} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {04CF2EBC-8D13-4AEB-8C9B-0E1FAF38DA89} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [40352 2016-06-24] (Acer Incorporated -> )
Task: {0905A605-1B56-484A-9D4B-B9ED739DBDEF} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {18BB7ABA-BC9D-4859-8264-A0B78D138880} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {28681A1D-DC3C-4F27-B007-5F4A0B891125} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {3CC172CB-0F87-4324-B779-EA164BD9F3BC} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {3F61DDD1-12EC-4487-9A85-78C44546CE1E} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {48800AF4-E74C-4FBC-AF32-6FC36829348F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B52A1E1-347A-4FE6-BB4F-C31EBD9BE80F} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\WINDOWS\system32\EOSNotify.exe
Task: {541CBC37-5C4D-47CC-97EE-544A80791093} - System32\Tasks\F-Secure\F-Secure Hotfix => C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fs_hotfix.exe [308608 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
Task: {54C79489-DAD7-48D9-B67D-0AE8084F2DBD} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [422704 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {5804CF46-8CC0-49D0-8CAC-CB55AF24C19C} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {58EE4B15-C5C7-4BCF-88B7-A90FFD7BBE4A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.)
Task: {5C22EA54-D41D-4962-981C-FD89FC794D33} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F1E8EB6-24CF-42BD-B8B8-92A90FBBAF23} - System32\Tasks\Acer Collection Application => C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe [479024 2017-12-14] (Acer Incorporated -> )
Task: {6984CA35-2053-4E8D-94A1-4A6E1130EA48} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296 2014-03-12] (Acer Incorporated -> TODO:
Task: {6DACFD6D-745D-4E25-B3C8-BF04D778B9F0} - System32\Tasks\Opera scheduled Autoupdate 1600540508 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe
Task: {6EB5BF64-362B-4F51-8E78-3FF137DD1D6E} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated)
Task: {8A700F4E-0E55-4964-BFE8-92E15BF46CCC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {9200BB53-2BB7-4446-9404-FDB7460F3B79} - System32\Tasks\App Explorer => C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7968424 2020-12-03] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION
Task: {9BF56B96-63E7-4C86-945D-DF8D5355D99C} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [417072 2017-12-13] (Acer Incorporated -> Acer Incorporated)
Task: {AB763A04-1EA9-4E28-8F85-3694BDB46D69} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {B49E89A1-8BCA-45A0-BCC5-CDA8764B8DCF} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe
Task: {B770338B-E232-485E-9E44-8AA4646124CA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\WSCStub.exe [707624 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {B88DB2C1-8F91-4D69-A5EF-9F2CE0563857} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.)
Task: {C6E1E844-46C9-4931-89C4-B8CE301279CC} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2919840 2016-06-24] (Acer Incorporated -> )
Task: {CF25D159-2FCF-4347-B04A-A4CEAA9CA643} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4644256 2016-06-24] (Acer Incorporated -> )
Task: {D91E5E3D-54D7-402F-B219-240BE33ACF95} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2767152 2016-09-13] (Acer Incorporated -> Acer Incorporated)
Task: {DB8A461D-7D14-4944-89B0-227A9BF02901} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {DDB78B42-73DA-48E3-9478-8F9C1DD04AFC} - System32\Tasks\Opera scheduled assistant Autoupdate 1600540521 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\charr\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {E451FC6F-04C2-4038-8258-205B83433E22} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {FB1EEE25-8412-49A0-8C46-2DA942647284} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation)
Task: {FD2AA348-8760-4077-AFA6-1BDDBCAD3B42} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{0276e560-2451-4c76-acce-aade3a1fa80f}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{aca2f51c-c98b-476f-a53f-67f0130e5e0c}: [DhcpNameServer] 40.33.1.66
Edge:
======
Edge DefaultProfile: Default
Edge Profile: C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-20]
Edge Extension: (Browsing Protection by F-Secure) - C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-10-13]
Edge HKLM\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
Edge HKLM-x32\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
FireFox:
========
FF DefaultProfile: uijzdugu.default
FF ProfilePath: C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default [2020-12-20]
FF Homepage: Mozilla\Firefox\Profiles\uijzdugu.default -> hxxps://www.google.fr/search?q=google&ie=utf-8&oe=utf-8&gws_rd=cr&dcr=0&ei=IX3PWb_lDIn1aMzPlvgB
FF Extension: (Français Language Pack) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2019-05-12]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\sp@avast.com.xpi [2020-12-20]
FF Extension: (Avast Online Security) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\wrc@avast.com.xpi [2020-12-20]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2020-12-20] []
FF Extension: (Français Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-fr@firefox.mozilla.org [2020-12-20] []
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2020-12-20] []
FF HKLM\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF Extension: (Soda PDF Desktop 11 Creator) - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi [2019-10-09]
FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-15] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default [2020-12-20]
CHR StartupUrls: Default -> "hxxps://www.bing.com/?FORM=SLBRDF&PC=SL09"
CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?FORM=SLBRDF&PC=SL10&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Slides) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-18]
CHR Extension: (Safe Torrent Scanner) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2020-11-23]
CHR Extension: (Docs) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-18]
CHR Extension: (Google Drive) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-26]
CHR Extension: (YouTube) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2019-04-25]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-09]
CHR Extension: (Sheets) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-18]
CHR Extension: (Fenetre Mailto) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gepijnnkhnilemhhacebnhcndgogkamc [2020-03-10]
CHR Extension: (Google Docs hors connexion) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-16]
CHR Extension: (Norton Identity Safe) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-09-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-14]
CHR Extension: (Gmail) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-26]
CHR Extension: (Chrome Media Router) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-14]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2016-08-31] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-03-27] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-12-01] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 fshoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
R2 fsnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulhoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulorsp; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe [101248 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulprothoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R2 NortonSecurity; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe [225608 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R2 nsWscSvc; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe [936808 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2329904 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3204912 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [441136 2016-09-13] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [482608 2016-09-13] (Acer Incorporated -> Acer Incorporated)
R3 Soda PDF Desktop 11; C:\Program Files\Soda PDF Desktop 11\ws.exe [2470160 2019-10-09] (LULU Software -> LULU Software)
S3 Soda PDF Desktop 11 Creator; C:\Program Files\Soda PDF Desktop 11\creator\common\creator-ws.exe [575248 2019-10-09] (LULU Software -> LULU Software)
R2 Soda PDF Desktop 11 Update Service; C:\Program Files\Soda PDF Desktop 11\updater-ws.exe [1784080 2019-10-09] (LULU Software -> LULU Software)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [301872 2018-01-10] (Acer Incorporated -> acer)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20181204.001\BHDrvx64.sys [1925104 2018-11-19] (Symantec Corporation -> Symantec Corporation)
R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\ccSetx64.sys [194416 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [515792 2018-11-29] (Symantec Corporation -> Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153296 2018-12-09] (Symantec Corporation -> Symantec Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulgk.sys [321768 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R1 F-Secure UL HIPS; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshs.sys [104680 2020-12-08] (F-Secure Corporation -> F-Secure Corporation)
R0 fsbts; C:\WINDOWS\System32\drivers\fsbts.sys [58752 2020-12-02] (F-Secure Corporation -> F-Secure Corporation)
S0 fselms; C:\WINDOWS\System32\drivers\fselms.sys [15304 2020-07-18] (Microsoft Windows Early Launch Anti-malware Publisher -> F-Secure Corporation)
R2 fsnif2; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\nif2\1606295644\nif2s64.sys [179440 2020-11-25] (F-Secure Corporation -> F-Secure Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\IPSDefs\20181207.061\IDSvia64.sys [1305072 2018-11-23] (Symantec Corporation -> Symantec Corporation)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated -> Acer Incorporated)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated -> Acer Incorporated)
S3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSP64.SYS [885936 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSPX64.SYS [50864 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45928 2017-06-29] (SteelSeries ApS -> SteelSeries ApS)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SYMEFASI64.SYS [1963400 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SymELAM.sys [25744 2019-09-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100064 2019-03-30] (Symantec Corporation -> Symantec Corporation)
S4 SymEvnt; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\SymPlatform\SymEvnt.sys [114352 2018-10-27] (Symantec Corporation -> Symantec Corporation)
R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\Ironx64.SYS [316656 2019-09-11] (Symantec Corporation -> Symantec Corporation)
R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\symnets.sys [573448 2019-09-11] (Symantec Corporation -> Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [78216 2020-08-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [430320 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\wpCtrlDrv.sys [1012120 2019-09-11] (Symantec Corporation -> Symantec Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-20 12:05 - 2020-12-20 12:05 - 000000256 _____ C:\Users\charr\Desktop\Download Now 64-Bit Version (2).URL
2020-12-20 11:53 - 2020-12-20 12:01 - 000031762 _____ C:\Users\charr\Downloads\FRST.txt
2020-12-20 11:51 - 2020-12-20 11:51 - 002286592 _____ (Farbar) C:\Users\charr\Downloads\FRST64(1).exe
2020-12-20 11:41 - 2020-12-20 11:58 - 000000000 ____D C:\FRST
2020-12-20 11:40 - 2020-12-20 11:40 - 002286592 _____ (Farbar) C:\Users\charr\Downloads\FRST64.exe
2020-12-20 10:48 - 2020-12-20 11:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-12-16 11:58 - 2020-12-16 11:58 - 000133454 _____ C:\Users\charr\Downloads\2020-2021_L1_UE104_ThéorieKaraté_Session1_SUJET (1).pdf
2020-12-15 21:26 - 2020-12-15 21:26 - 005044013 _____ C:\Users\charr\Downloads\Team_Psycho_-_GKR.pdf
2020-12-15 12:25 - 2020-12-15 12:25 - 000223127 _____ C:\Users\charr\Downloads\CLR - REGLAMENTO.pdf
2020-12-14 14:07 - 2020-12-14 14:07 - 000868305 _____ C:\Users\charr\Downloads\PJ_B01_22009723_2020.pdf
2020-12-13 12:33 - 2020-12-13 12:33 - 003630944 _____ C:\Users\charr\Downloads\TEF2018_141.pdf
2020-12-13 12:33 - 2020-12-13 12:33 - 000108032 _____ C:\Users\charr\Downloads\T18F141.xls
2020-12-12 17:00 - 2020-12-12 17:00 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-12-12 16:59 - 2020-12-12 16:59 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-12-12 16:58 - 2020-12-12 16:58 - 001333248 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-12-12 16:58 - 2020-12-12 16:58 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-12-12 16:58 - 2020-12-12 16:58 - 000010912 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-12-12 16:57 - 2020-12-12 16:57 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2020-12-12 16:57 - 2020-12-12 16:57 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2020-12-12 16:56 - 2020-12-12 16:56 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-12-12 16:56 - 2020-12-12 16:56 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2020-12-12 16:56 - 2020-12-12 16:56 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-12-12 16:55 - 2020-12-12 16:55 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-12-12 16:55 - 2020-12-12 16:55 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-12-12 16:55 - 2020-12-12 16:55 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2020-12-12 16:54 - 2020-12-12 16:54 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000165376 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-12-12 16:54 - 2020-12-12 16:54 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-12 16:54 - 2020-12-12 16:54 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-12-10 11:17 - 2020-12-10 11:17 - 000166547 _____ C:\Users\charr\Downloads\Non confirmé 481865.crdownload
2020-12-09 11:53 - 2020-12-09 11:53 - 006755768 _____ C:\Users\charr\Downloads\anatomie_cours_entier_sa_mere_la_pute (1).odt
2020-12-09 11:51 - 2020-12-09 11:51 - 000868305 _____ C:\Users\charr\Downloads\AttestationCIP.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000653924 _____ C:\Users\charr\Downloads\UE 106 MAE ROCHE.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000577243 _____ C:\Users\charr\Downloads\UE 102 HISTOIRE DU MOUVEMENT SPORTIF.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000488611 _____ C:\Users\charr\Downloads\10 THÉORIE KARATE.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000464979 _____ C:\Users\charr\Downloads\UE 103 ECONOMIE ET GESTION.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000206797 _____ C:\Users\charr\Downloads\14 THÉORIE WATER POLO.pdf
2020-12-08 14:14 - 2020-12-08 14:14 - 000143408 _____ C:\Users\charr\Downloads\5 THÉORIE DANSE.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000569847 _____ C:\Users\charr\Downloads\10 Théorie Karaté.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000375903 _____ C:\Users\charr\Downloads\Sujet UE 102 Histoire.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000303619 _____ C:\Users\charr\Downloads\SUJET UE 106 MAE Thomas .pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000296784 _____ C:\Users\charr\Downloads\13 Théorie water-polo.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000202744 _____ C:\Users\charr\Downloads\Sujet UE 106 Passerelle staps-kiné session 1 déc 2017.pdf
2020-12-08 14:13 - 2020-12-08 14:13 - 000201752 _____ C:\Users\charr\Downloads\Sujet UE 103 Eco Gestion .pdf
2020-12-07 15:57 - 2020-12-07 15:58 - 001580292 _____ C:\Users\charr\Downloads\Textes Histoire 1.pdf
2020-12-07 15:48 - 2020-12-07 15:49 - 000018899 _____ C:\Users\charr\Downloads\LISTE STAGE ANGLAIS OUI SI STAPS Clermont - 6 groupes.xlsx
2020-12-07 15:43 - 2020-12-07 15:43 - 000252717 _____ C:\Users\charr\Downloads\AttestationJDC.zip
2020-12-07 15:43 - 2020-12-07 15:43 - 000252713 _____ C:\Users\charr\Downloads\AttestationJDC (1).zip
2020-12-04 16:58 - 2020-12-04 16:58 - 000307136 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN DISTANCIEL L1 CLERMONT FERRAND S1 2020 2021.pdf
2020-12-04 16:58 - 2020-12-04 16:58 - 000219759 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN PRESENTIEL L1 CLERMONT FERRAND S1 2020 2021.pdf
2020-12-04 15:57 - 2020-12-04 15:57 - 000177612 _____ C:\Users\charr\Downloads\AttestationJDCR.pdf
2020-12-02 16:52 - 2020-12-02 16:53 - 000794415 _____ C:\Users\charr\Downloads\tuto utilisation espace jeune sommaire.pdf
2020-12-01 20:49 - 2020-12-01 20:49 - 004834925 _____ C:\Users\charr\Downloads\Les Souvenirs Final.m4a
2020-11-26 18:44 - 2020-12-18 14:19 - 000000000 ____D C:\Users\charr\AppData\Local\Spotify
2020-11-26 18:44 - 2020-11-26 18:44 - 000001854 _____ C:\Users\charr\Desktop\Spotify.lnk
2020-11-26 18:44 - 2020-11-26 18:44 - 000001840 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2020-11-26 18:43 - 2020-12-18 14:11 - 000000000 ____D C:\Users\charr\AppData\Roaming\Spotify
2020-11-26 18:42 - 2020-11-26 18:42 - 000892232 _____ (Spotify Ltd) C:\Users\charr\Downloads\SpotifySetup.exe
2020-11-24 18:19 - 2020-11-24 18:19 - 001491093 _____ C:\Users\charr\Downloads\L1 présentation UFR STAPS rentrée 2020 version RENTREE 31-08-2020 (4).pptx
2020-11-23 18:04 - 2020-11-23 18:05 - 000012588 _____ C:\Users\charr\Downloads\Invoice-OD25063.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-12-20 12:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-20 11:30 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-20 11:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-12-20 11:20 - 2017-09-16 17:14 - 000000000 ____D C:\Users\charr\AppData\LocalLow\Mozilla
2020-12-20 11:00 - 2020-06-20 14:20 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-20 11:00 - 2020-06-20 14:20 - 000002267 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-12-20 11:00 - 2017-03-23 03:37 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-20 11:00 - 2017-03-23 03:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-20 10:57 - 2017-09-16 16:59 - 000000000 ____D C:\Users\charr\AppData\Local\Host App Service
2020-12-20 10:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-20 10:53 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-12-20 10:44 - 2020-09-25 01:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-12-18 13:59 - 2017-09-16 17:05 - 000000000 __SHD C:\Users\charr\IntelGraphicsProfiles
2020-12-18 13:56 - 2017-03-23 03:11 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-18 13:55 - 2020-09-25 02:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-12-18 13:55 - 2020-09-25 01:05 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-17 12:11 - 2019-10-02 17:21 - 000002164 _____ C:\Users\Public\Desktop\Darty Sécurité.lnk
2020-12-17 12:11 - 2019-10-02 15:48 - 000000000 ____D C:\ProgramData\F-Secure
2020-12-17 11:27 - 2017-09-16 17:05 - 000000000 ____D C:\Users\charr\AppData\Local\Packages
2020-12-16 14:45 - 2017-09-17 18:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-12-16 14:05 - 2017-09-17 18:55 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-12-15 21:01 - 2017-03-23 02:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-12-15 13:11 - 2020-09-25 01:11 - 000000000 ____D C:\Users\charr
2020-12-14 22:15 - 2020-09-25 02:01 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1333090055-3807291771-4262163453-1001
2020-12-14 22:15 - 2020-09-25 01:11 - 000002409 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-14 22:15 - 2017-09-16 17:11 - 000000000 ___RD C:\Users\charr\OneDrive
2020-12-14 09:33 - 2020-09-25 01:27 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-12-14 09:33 - 2019-12-07 15:49 - 000792838 _____ C:\WINDOWS\system32\perfh00C.dat
2020-12-14 09:33 - 2019-12-07 15:49 - 000149968 _____ C:\WINDOWS\system32\perfc00C.dat
2020-12-14 00:33 - 2020-09-25 01:05 - 000435232 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-12-14 00:31 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-12 17:20 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-12-04 10:05 - 2020-09-25 02:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-04 10:05 - 2020-09-25 02:01 - 000003464 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-02 13:45 - 2019-10-02 17:27 - 000058752 _____ (F-Secure Corporation) C:\WINDOWS\system32\Drivers\fsbts.sys
2020-11-28 10:06 - 2020-09-25 02:01 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-28 10:06 - 2020-09-25 02:01 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-11-27 00:07 - 2020-11-17 21:25 - 000000000 ____D C:\Users\charr\AppData\Roaming\Molotov
2020-11-20 23:20 - 2017-10-11 16:48 - 000000000 ____D C:\Users\charr\AppData\Roaming\CyberLink
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\system32\eac_usermode_192940383298992.dll [2019-06-05] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_334110525781145.dll [2019-07-05] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_487699285482387.dll [2019-07-17] <==== ATTENTION (zéro octet Fichier/Dossier)
FCheck: C:\WINDOWS\system32\eac_usermode_53072229187599.dll [2019-06-13] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================