Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-02-2021
Exécuté par MATULA (administrateur) sur MALKO (ASUSTeK COMPUTER INC. X751MD) (11-03-2021 08:34:09)
Exécuté depuis C:\Users\MATULA\1 SKIPE\Desktop
Profils chargés: MATULA
Platform: Windows 10 Home Version 20H2 19042.844 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Atheros) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{6EE9704A-3A2F-4BB2-B6E4-DAA956F226AF}\MicrosoftEdge_X64_89.0.774.50_89.0.774.48.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Temp\EDGEMITMP_A6CC8.tmp\setup.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\reg.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Qualcomm Atheros -> ) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32440376 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [HP ENVY 5530 series (NET)] => C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91016568 2020-12-30] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [581120 2021-01-13] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C311 Status Monitor: C:\WINDOWS\system32\hpinkstsC311LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 5530 series): C:\WINDOWS\system32\HPDiscoPMC311.dll [763912 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
Startup: C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-06-19]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0035AF81-21A1-4AC7-83DB-266402B116DF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {06B2C3D7-56D4-437A-9880-F66C03E0E9D1} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [5745672 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {0907AD6F-9BCC-4BA0-9403-240773EC92BE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {10D4C425-4847-48F2-9096-8A2E9787AAA3} - System32\Tasks\SkipUAC Nettoyage du Registre => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {1594B6A6-DAB2-40E6-9228-469B91FD6863} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {15BEDD9D-BBF9-46A1-BEF8-601BD9EE4BBB} - System32\Tasks\{FFF54788-3F48-499B-9154-23596A52E825} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.38.0.101/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {1A3D0096-323A-4435-A1E6-211F98ED1F86} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114000 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B0A39AC-769B-4B90-AC7E-49FDAA0BB084} - System32\Tasks\HP AR Program Upload - 73b5d510c32346b8b8628356953921b5eb9c2c3c60044affb84738ab9eb9b566 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {20A9279F-8B2D-4486-A582-38076ABA7FD6} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {20D7E9FF-F9B1-491B-BD5C-1714A96BE878} - System32\Tasks\SkipUAC Défragmentation des lecteurs => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {210C774B-57DF-473C-8535-D407528028DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26913848 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2476F7BC-C07E-47DB-9607-CCD255243D08} - System32\Tasks\{0DD0EC34-A6EC-466D-A8CB-1BFC53819C99} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {25BD407E-A161-4E15-8FCD-001684BF77DF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694752 2021-03-03] (Mozilla Corporation -> Mozilla Foundation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {37964751-148B-47FD-80F6-211738A8DB8F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080304 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {39AEC0E3-9B2B-4B44-BDCD-CFE33DE261CB} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3C2F0BB6-EBE6-4848-AC7D-C0529CF4B867} - System32\Tasks\SkipUAC Optimisation du démarrage système => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {3E8C4237-27FB-43C9-9F49-48F4063CEF9C} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [11776 2014-03-11] () [Fichier non signé]
Task: {4728CDD2-EC66-43D1-AB9A-E0B52E8040DB} - System32\Tasks\HP AR Program Upload - 522aee15161a407b9e474019f7ca43a49f8440e4fc7f4578af7715face806740 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {5A223548-A93C-456A-9D1F-C0379BE457E1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {5AB6F63A-9281-49B9-9339-A0A4961B6BEA} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5CA4BB01-C530-4C26-81AE-3D41CA297331} - System32\Tasks\SkipUAC Suppression des traces laissées sur Internet => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {5F15AD95-F357-46DC-8CA5-892B96F7BD9D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7461FDE6-4AFE-4FE3-8FDD-63292DA8E95D} - System32\Tasks\HP AR Program Upload - 98917427bc244a1285dd426f33737ddc39208182467a4c4f878491ac0e8ec615 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {76A06776-7703-4240-A44C-547FDD50A25B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {7C398905-B8D5-430B-86A6-E79E9EB476E8} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {85732835-BE8C-40CC-9C18-4AD541B44162} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {862DCA31-1EB0-4EF2-9C46-10AEF9989FDD} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {88ACC6C1-EA49-4B10-8FD9-5BFDAA0C928D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {914C1025-5A28-4DD3-A320-3B1C86553D94} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114000 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {915E49FB-C7F0-45C1-972A-CDA0A7CCB7F8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4004296 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {94ACCD52-1F80-4FA1-874F-1EA16E608AE1} - System32\Tasks\{17D50E5F-9F38-43E0-AD60-DB19837E6169} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.30.80.103/fr/go/help.faq.installer?LastError=1603
Task: {959ED096-661C-49FF-94D3-B3D1046DFC9D} - System32\Tasks\HP AR Program Upload - 1581b40121724b3286571db4710aea0d2dd157902b394a9ca912ae1bf071cc7d => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {99642599-006E-4788-BA96-90E60EE5BB9E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1133488 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {A57D9BE2-7CE2-46A4-B1DC-E6AF7CD7B470} - System32\Tasks\HP AR Program Upload - 8cc19ffeaffb45d69c3e90eaba066c27175f36f4b10b441ba9a0e161d694bd6a => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {AA6156F1-8BBE-4FFC-87B6-65BD93FA7028} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080304 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {B2A7238A-24E0-4782-9B32-276B77B1C390} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B6EF89BE-0B8B-4DCE-99C7-CCAEDB92657F} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86) [Argument = -check]
Task: {B8EE3338-961B-4655-AFD7-FA18A361107D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BB1D503C-CF6B-479B-AE28-9104CD010B75} - System32\Tasks\HP AR Program Upload - 9bc5b6b6893345a79ba7b1d6ed9502a88ed13e87f0c240178335a45100c243ea => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {BCF18C28-FD5B-4D99-8CC0-05E94C2042F5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C0E29E94-36C3-4344-BFEA-1C94C9F7468B} - System32\Tasks\HP AR Program Upload - 96246d2ee5534696b96dbc96449d73719ad192f7fd654df8818533c4d7e906a3 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {C3710222-2D50-41BC-9177-47358CE499EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {C3BC28E3-D8CA-4C39-8CB1-9DD45FF8CE7B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C9A6C54D-AE0C-44F0-8B0B-694C6E84D331} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19723888 2014-03-27] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {CAA67667-8606-4DF8-A7BE-76F7E757429A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CB886B0D-086B-47EC-BEC9-777B7CE7706F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D2DC32A0-A8D5-4227-80BB-C2E39A552CE6} - System32\Tasks\HP AR Program Upload - 69df1520fcf1443fa40616cd351c370722844838a521403cb91f840fbc1ee2a7 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:)
Task: {D3BAB091-D729-4E9E-A712-37F5C951751D} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D50FEBC1-AE3A-4FFC-97E5-9ABF6F3BBBC0} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86) [Argument = -critical]
Task: {D52E5FF0-C02A-468C-8948-A9520D1A0A00} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe [158336 2013-01-09] (ASUSTeK Computer Inc. -> ASUSTek Computer INC.)
Task: {D8955F2A-7A08-434C-A454-D9A7DC0ADBCB} - System32\Tasks\{B8EE4D9C-89BF-46A3-A190-0E52E8AF4599} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {DFFDF62C-1721-4607-9788-CEE0FAA89E06} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E366AE30-2566-4AB6-8750-DB785C845DA2} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {E3F9CB1E-6969-4D3D-A671-BBF499FD2F0F} - System32\Tasks\{797B8A0B-706F-4211-8689-492E70870E4A} => "c:\program files\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.35.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E6A4B6DD-C7E0-4873-9516-65FCF04D66B7} - System32\Tasks\{3D91F5A9-190D-481E-8BFB-09719D2E6448} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.37.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E930FF77-956D-4252-BB3E-465DBD43C829} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4004296 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {ED183C8C-1B2A-49E1-9B6A-E7E1CEC78EF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {F002B736-0A1C-4227-8482-9E986369830F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14049536 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F0BBD519-B017-4AA8-8C08-595ADB64F112} - System32\Tasks\SkipUAC Suppression définitive des éléments de la corbeille => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FA86DDB6-2132-4ABA-B57C-11D2EA587460} - System32\Tasks\SkipUAC Optimisation des services Windows => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FFFA4301-246E-4993-A508-96911A110DEA} - System32\Tasks\SkipUAC Économie d'énergie => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2e5e1d74-5346-4987-89cd-55e1648e486b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8cc03029-b3c1-45f3-986f-dc64267885e0}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\MATULA\Downloads
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2020-12-07]
Edge Extension: (Mouvements de souris) -> MouseGestures_MicrosoftMouseGestures_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.MouseGestures_0.6.17136.0_neutral__8wekyb3d8bbwe [2020-12-07]
Edge Extension: (Amazon Assistant) -> xxx_AmazoncomAmazonAssistant_343d40qqvtj1t => C:\Program Files\WindowsApps\Amazon.com.AmazonAssistant_10.1910.9.0_neutral__343d40qqvtj1t [2020-12-07]
Edge DefaultProfile: Default
Edge Profile: C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-08]
Edge StartupUrls: Default -> "hxxps://www.google.fr/"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-03-05]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 993zg6qh.MALKO
FF ProfilePath: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 [2021-03-11]
FF Homepage: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://www.sfr.fr/cas/login?service=https%3A%2F%2Fwww.sfr.fr%2Faccueil%2Fj_spring_cas_security_check
FF Notifications: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://axa-fr-by.accengage.net; hxxps://forum.zebulon.fr
FF Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2020-10-12]
FF Extension: (Protected Browsing) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\protbrowsing@live.xpi [2021-01-15] [UpdateUrl:hxxps://protected-browsing.best/resources/extension.json]
FF Extension: (Google Translator for Firefox) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\translator@zoli.bod.xpi [2020-01-01]
FF Extension: (OldWood) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{1268dd7d-073e-4bf1-81dc-f1bb0f4f0c2e}.xpi [2020-06-27]
FF Extension: (Dark-ish Rainbow) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{21f69c5d-b9e1-470f-a890-74454e954eee}.xpi [2020-08-13]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-03-03]
FF Extension: (Blue Carbon Fiber) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{5ab03bdd-3d91-4c73-801e-607ca27458d0}.xpi [2020-01-01]
FF Extension: (NoScript) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2021-02-23]
FF Extension: (Fenetre Mailto) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{7954b599-d6d5-4b4c-b048-dd39ee8325a2}.xpi [2020-03-26]
FF Extension: (chrystalize) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{96b7a652-8716-4678-be68-7a8bac53a373}.xpi [2020-01-01]
FF Extension: (Video DownloadHelper) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-17]
FF Extension: (A N I M A T E D KITTY CAT) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{cf4e89f2-b8e0-4ad7-932d-7b82d8956543}.xpi [2020-01-01]
FF ProfilePath: C:\Users\MATULA\AppData\Roaming\Mozilla\Firefox\Profiles\993zg6qh.MALKO [2021-02-10]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-12-30] [] [non signé]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-02-25] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-643979615-3718182490-1915481562-1001: www.mydlink.com/Uplayer -> C:\Users\MATULA\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-LINK CORPORATION -> D-Link Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8988552 2021-02-22] (Microsoft Corporation -> Microsoft Corporation)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA)
S3 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-21] (Malwarebytes Inc -> Malwarebytes)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUSTeK Computer Inc. -> ASUS Corporation)
R3 athr; C:\WINDOWS\System32\drivers\athwbx.sys [3892224 2014-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] (ASUSTeK Computer Inc. -> )
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-02-22] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49544 2021-03-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420088 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-03-08 08:51 - 2021-03-08 08:51 - 000076323 _____ C:\Users\MATULA\Downloads\Avis_de_taxe_d_habitation_CAP_2020.pdf
2021-03-07 10:06 - 2021-03-07 10:07 - 000000000 ____D C:\ProgramData\Atheros
2021-03-07 10:06 - 2021-03-07 10:06 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\Atheros
2021-03-06 15:39 - 2021-03-06 15:39 - 000000000 ____D C:\Users\MATULA\Documents\Bluetooth Folder
2021-03-06 15:38 - 2021-03-06 15:41 - 000000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2021-03-06 15:38 - 2021-03-06 15:41 - 000000000 ____D C:\Program Files (x86)\Bluetooth Suite
2021-03-06 15:38 - 2021-03-06 15:38 - 000000000 ____D C:\ProgramData\{EB5F5A55-037A-4E47-806B-2C8AA9374701}
2021-03-06 08:41 - 2021-03-09 10:14 - 000003614 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update1
2021-03-06 08:41 - 2021-03-09 10:14 - 000003460 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update2
2021-03-06 07:53 - 2021-03-06 08:41 - 000003446 _____ C:\WINDOWS\system32\Tasks\Update Checker
2021-03-05 16:02 - 2021-03-05 16:02 - 000000000 ____D C:\Users\MATULA\ansel
2021-03-05 11:21 - 2021-03-05 11:22 - 000000000 ____D C:\Users\MATULA\1NOTE 10
2021-03-03 08:09 - 2021-03-03 08:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-02-25 08:56 - 2021-02-25 08:56 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-02-25 08:56 - 2021-02-25 08:56 - 000011002 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-02-25 08:54 - 2021-02-25 08:54 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-02-25 08:54 - 2021-02-25 08:54 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-02-25 08:54 - 2021-02-25 08:54 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-02-25 08:54 - 2021-02-25 08:54 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-02-25 07:40 - 2021-02-25 08:27 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\IGDump
2021-02-24 15:32 - 2021-03-11 08:36 - 000000000 ____D C:\FRST
2021-02-22 11:44 - 2021-02-22 11:44 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-02-10 10:00 - 2021-03-05 18:48 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-02-10 09:57 - 2021-02-10 09:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-02-10 09:48 - 2021-02-10 09:48 - 008535768 _____ C:\Users\MATULA\Documents\Tarif Clients T-Roc au 24 juin 2020 MAJ au 25 janvier 2021.pdf
2021-02-10 09:48 - 2021-02-10 09:48 - 006293850 _____ C:\Users\MATULA\Documents\Tarif Clients T-Cross au 24 juin 2020 MAJ au 25 janvier 2021.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-11 08:36 - 2020-09-02 13:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-11 08:35 - 2015-02-04 19:16 - 000000000 ____D C:\Program Files\CCleaner
2021-03-11 08:34 - 2016-11-16 08:19 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\Mozilla
2021-03-11 08:34 - 2015-02-04 12:10 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-11 08:33 - 2017-06-03 08:11 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-11 08:21 - 2014-12-09 18:34 - 000000000 __SHD C:\Users\MATULA\IntelGraphicsProfiles
2021-03-09 15:16 - 2020-06-17 16:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-09 10:40 - 2015-02-08 08:22 - 000000000 ____D C:\Users\MATULA\AppData\Local\CrashDumps
2021-03-08 17:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-03-08 12:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-06 15:44 - 2015-02-05 17:44 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-03-06 15:43 - 2020-06-17 16:26 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-06 15:43 - 2019-12-07 15:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-03-06 15:43 - 2019-12-07 15:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-03-06 15:42 - 2016-04-25 08:13 - 000000000 ____D C:\temp
2021-03-06 15:33 - 2020-06-17 16:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-06 15:33 - 2020-06-17 16:12 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-06 15:32 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-03-06 09:50 - 2018-09-01 09:11 - 000000000 ____D C:\Users\MATULA\AppData\Local\D3DSCache
2021-03-06 08:41 - 2014-05-15 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2021-03-06 08:41 - 2014-05-15 16:58 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-03-06 08:13 - 2014-05-16 00:07 - 000000000 ____D C:\WINDOWS\Log
2021-03-06 08:10 - 2019-04-06 11:03 - 000000000 ____D C:\ProgramData\ASUS
2021-03-06 07:46 - 2018-03-15 17:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-05 19:07 - 2020-06-17 14:30 - 000000000 ____D C:\Users\MATULA
2021-03-05 18:48 - 2015-02-04 12:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-05 10:32 - 2015-09-25 08:53 - 000000000 ____D C:\Users\MATULA\AppData\Local\ElevatedDiagnostics
2021-03-05 09:52 - 2020-09-02 13:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-05 09:52 - 2020-09-02 13:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-03 08:15 - 2020-06-17 16:54 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-643979615-3718182490-1915481562-1001
2021-03-03 08:15 - 2020-06-17 14:30 - 000002443 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-03 08:15 - 2014-12-09 18:40 - 000000000 __RDO C:\Users\MATULA\OneDrive
2021-03-03 08:09 - 2019-12-21 12:07 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-03 08:09 - 2018-05-05 15:14 - 000001306 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk
2021-02-26 09:57 - 2020-06-17 16:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-02-26 09:55 - 2017-04-14 09:34 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-02-25 09:54 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-25 09:40 - 2017-12-13 11:11 - 000000000 ____D C:\ProgramData\Apple
2021-02-25 09:17 - 2020-06-17 16:12 - 000444040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-02-25 08:10 - 2020-06-17 10:06 - 000000000 ___HD C:\$WinREAgent
2021-02-22 15:17 - 2017-10-22 08:47 - 000000000 ____D C:\Users\MATULA\AppData\Local\Packages
2021-02-13 10:22 - 2017-11-16 08:58 - 000000000 ____D C:\Users\MATULA\AppData\Local\PlaceholderTileLogoFolder
2021-02-13 10:22 - 2014-12-11 19:19 - 000000000 ___RD C:\Users\MATULA\CAPTURE
2021-02-13 10:17 - 2015-02-26 10:31 - 000006144 _____ C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-02-11 14:34 - 2019-11-29 08:24 - 000000000 ____D C:\ProgramData\Samsung
2021-02-11 14:31 - 2019-11-29 08:19 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-02-11 14:03 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-02-11 13:15 - 2015-02-04 13:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-02-11 13:09 - 2015-02-04 13:06 - 130141752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-02-10 10:09 - 2020-09-14 12:07 - 000000000 ____D C:\WINDOWS\Minidump
2021-02-10 09:58 - 2021-02-05 12:10 - 000001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-02-09 09:32 - 2020-01-01 12:21 - 000000000 ____D C:\KPRM
==================== Fichiers à la racine de certains dossiers ========
2015-02-04 11:33 - 2017-10-06 10:49 - 000000093 _____ () C:\Users\MATULA\AppData\Roaming\sp_data.sys
2015-02-26 10:31 - 2021-02-13 10:17 - 000006144 _____ () C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-17 18:07 - 2019-01-17 18:07 - 000000758 _____ () C:\Users\MATULA\AppData\Local\recently-used.xbel
2015-02-25 09:09 - 2015-02-25 09:09 - 000000017 _____ () C:\Users\MATULA\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par MATULA (administrateur) sur MALKO (ASUSTeK COMPUTER INC. X751MD) (11-03-2021 08:34:09)
Exécuté depuis C:\Users\MATULA\1 SKIPE\Desktop
Profils chargés: MATULA
Platform: Windows 10 Home Version 20H2 19042.844 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Atheros) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{6EE9704A-3A2F-4BB2-B6E4-DAA956F226AF}\MicrosoftEdge_X64_89.0.774.50_89.0.774.48.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Temp\EDGEMITMP_A6CC8.tmp\setup.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\reg.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.3-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Qualcomm Atheros -> ) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé] C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32440376 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [HP ENVY 5530 series (NET)] => C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91016568 2020-12-30] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-643979615-3718182490-1915481562-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [581120 2021-01-13] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C311 Status Monitor: C:\WINDOWS\system32\hpinkstsC311LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 5530 series): C:\WINDOWS\system32\HPDiscoPMC311.dll [763912 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-02-25] (Qualcomm Atheros -> Qualcomm®Atheros®) [Fichier non signé]
Startup: C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-06-19]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0035AF81-21A1-4AC7-83DB-266402B116DF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {06B2C3D7-56D4-437A-9880-F66C03E0E9D1} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [5745672 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {0907AD6F-9BCC-4BA0-9403-240773EC92BE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {10D4C425-4847-48F2-9096-8A2E9787AAA3} - System32\Tasks\SkipUAC Nettoyage du Registre => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {1594B6A6-DAB2-40E6-9228-469B91FD6863} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {15BEDD9D-BBF9-46A1-BEF8-601BD9EE4BBB} - System32\Tasks\{FFF54788-3F48-499B-9154-23596A52E825} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.38.0.101/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {1A3D0096-323A-4435-A1E6-211F98ED1F86} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114000 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B0A39AC-769B-4B90-AC7E-49FDAA0BB084} - System32\Tasks\HP AR Program Upload - 73b5d510c32346b8b8628356953921b5eb9c2c3c60044affb84738ab9eb9b566 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {20A9279F-8B2D-4486-A582-38076ABA7FD6} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {20D7E9FF-F9B1-491B-BD5C-1714A96BE878} - System32\Tasks\SkipUAC Défragmentation des lecteurs => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {210C774B-57DF-473C-8535-D407528028DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26913848 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2476F7BC-C07E-47DB-9607-CCD255243D08} - System32\Tasks\{0DD0EC34-A6EC-466D-A8CB-1BFC53819C99} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {25BD407E-A161-4E15-8FCD-001684BF77DF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694752 2021-03-03] (Mozilla Corporation -> Mozilla Foundation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {37964751-148B-47FD-80F6-211738A8DB8F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080304 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {39AEC0E3-9B2B-4B44-BDCD-CFE33DE261CB} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3C2F0BB6-EBE6-4848-AC7D-C0529CF4B867} - System32\Tasks\SkipUAC Optimisation du démarrage système => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {3E8C4237-27FB-43C9-9F49-48F4063CEF9C} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [11776 2014-03-11] () [Fichier non signé]
Task: {4728CDD2-EC66-43D1-AB9A-E0B52E8040DB} - System32\Tasks\HP AR Program Upload - 522aee15161a407b9e474019f7ca43a49f8440e4fc7f4578af7715face806740 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {5A223548-A93C-456A-9D1F-C0379BE457E1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {5AB6F63A-9281-49B9-9339-A0A4961B6BEA} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5CA4BB01-C530-4C26-81AE-3D41CA297331} - System32\Tasks\SkipUAC Suppression des traces laissées sur Internet => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {5F15AD95-F357-46DC-8CA5-892B96F7BD9D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7461FDE6-4AFE-4FE3-8FDD-63292DA8E95D} - System32\Tasks\HP AR Program Upload - 98917427bc244a1285dd426f33737ddc39208182467a4c4f878491ac0e8ec615 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {76A06776-7703-4240-A44C-547FDD50A25B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {7C398905-B8D5-430B-86A6-E79E9EB476E8} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {85732835-BE8C-40CC-9C18-4AD541B44162} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {862DCA31-1EB0-4EF2-9C46-10AEF9989FDD} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {88ACC6C1-EA49-4B10-8FD9-5BFDAA0C928D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {914C1025-5A28-4DD3-A320-3B1C86553D94} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114000 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {915E49FB-C7F0-45C1-972A-CDA0A7CCB7F8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4004296 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {94ACCD52-1F80-4FA1-874F-1EA16E608AE1} - System32\Tasks\{17D50E5F-9F38-43E0-AD60-DB19837E6169} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.30.80.103/fr/go/help.faq.installer?LastError=1603
Task: {959ED096-661C-49FF-94D3-B3D1046DFC9D} - System32\Tasks\HP AR Program Upload - 1581b40121724b3286571db4710aea0d2dd157902b394a9ca912ae1bf071cc7d => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {99642599-006E-4788-BA96-90E60EE5BB9E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1133488 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {A57D9BE2-7CE2-46A4-B1DC-E6AF7CD7B470} - System32\Tasks\HP AR Program Upload - 8cc19ffeaffb45d69c3e90eaba066c27175f36f4b10b441ba9a0e161d694bd6a => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {AA6156F1-8BBE-4FFC-87B6-65BD93FA7028} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080304 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {B2A7238A-24E0-4782-9B32-276B77B1C390} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B6EF89BE-0B8B-4DCE-99C7-CCAEDB92657F} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86) [Argument = -check]
Task: {B8EE3338-961B-4655-AFD7-FA18A361107D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BB1D503C-CF6B-479B-AE28-9104CD010B75} - System32\Tasks\HP AR Program Upload - 9bc5b6b6893345a79ba7b1d6ed9502a88ed13e87f0c240178335a45100c243ea => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {BCF18C28-FD5B-4D99-8CC0-05E94C2042F5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C0E29E94-36C3-4344-BFEA-1C94C9F7468B} - System32\Tasks\HP AR Program Upload - 96246d2ee5534696b96dbc96449d73719ad192f7fd654df8818533c4d7e906a3 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {C3710222-2D50-41BC-9177-47358CE499EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {C3BC28E3-D8CA-4C39-8CB1-9DD45FF8CE7B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C9A6C54D-AE0C-44F0-8B0B-694C6E84D331} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19723888 2014-03-27] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {CAA67667-8606-4DF8-A7BE-76F7E757429A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CB886B0D-086B-47EC-BEC9-777B7CE7706F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MpCmdRun.exe [566376 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D2DC32A0-A8D5-4227-80BB-C2E39A552CE6} - System32\Tasks\HP AR Program Upload - 69df1520fcf1443fa40616cd351c370722844838a521403cb91f840fbc1ee2a7 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [3495944 2014-07-21] (Hewlett Packard -> TODO:
Task: {D3BAB091-D729-4E9E-A712-37F5C951751D} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D50FEBC1-AE3A-4FFC-97E5-9ABF6F3BBBC0} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86) [Argument = -critical]
Task: {D52E5FF0-C02A-468C-8948-A9520D1A0A00} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe [158336 2013-01-09] (ASUSTeK Computer Inc. -> ASUSTek Computer INC.)
Task: {D8955F2A-7A08-434C-A454-D9A7DC0ADBCB} - System32\Tasks\{B8EE4D9C-89BF-46A3-A190-0E52E8AF4599} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://ui.skype.com/ui/0/7.0.0.102/fr/abandoninstall?page=tsMain
Task: {DFFDF62C-1721-4607-9788-CEE0FAA89E06} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E366AE30-2566-4AB6-8750-DB785C845DA2} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {E3F9CB1E-6969-4D3D-A671-BBF499FD2F0F} - System32\Tasks\{797B8A0B-706F-4211-8689-492E70870E4A} => "c:\program files\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.35.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E6A4B6DD-C7E0-4873-9516-65FCF04D66B7} - System32\Tasks\{3D91F5A9-190D-481E-8BFB-09719D2E6448} => "c:\program files (x86)\mozilla firefox\firefox.exe" https://ui.skype.com/ui/0/7.37.0.103/fr/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {E930FF77-956D-4252-BB3E-465DBD43C829} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4004296 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {ED183C8C-1B2A-49E1-9B6A-E7E1CEC78EF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-13] (Google Inc -> Google Inc.)
Task: {F002B736-0A1C-4227-8482-9E986369830F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14049536 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F0BBD519-B017-4AA8-8C08-595ADB64F112} - System32\Tasks\SkipUAC Suppression définitive des éléments de la corbeille => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FA86DDB6-2132-4ABA-B57C-11D2EA587460} - System32\Tasks\SkipUAC Optimisation des services Windows => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
Task: {FFFA4301-246E-4993-A508-96911A110DEA} - System32\Tasks\SkipUAC Économie d'énergie => C:\Program Files (x86)\Nero\Nero TuneItUp\tuneitupStart.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2e5e1d74-5346-4987-89cd-55e1648e486b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8cc03029-b3c1-45f3-986f-dc64267885e0}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\MATULA\Downloads
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2020-12-07]
Edge Extension: (Mouvements de souris) -> MouseGestures_MicrosoftMouseGestures_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.MouseGestures_0.6.17136.0_neutral__8wekyb3d8bbwe [2020-12-07]
Edge Extension: (Amazon Assistant) -> xxx_AmazoncomAmazonAssistant_343d40qqvtj1t => C:\Program Files\WindowsApps\Amazon.com.AmazonAssistant_10.1910.9.0_neutral__343d40qqvtj1t [2020-12-07]
Edge DefaultProfile: Default
Edge Profile: C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-08]
Edge StartupUrls: Default -> "hxxps://www.google.fr/"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-03-05]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 993zg6qh.MALKO
FF ProfilePath: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 [2021-03-11]
FF Homepage: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://www.sfr.fr/cas/login?service=https%3A%2F%2Fwww.sfr.fr%2Faccueil%2Fj_spring_cas_security_check
FF Notifications: C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507 -> hxxps://axa-fr-by.accengage.net; hxxps://forum.zebulon.fr
FF Extension: (Awesome Screenshot: Screen Video Recorder) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2020-10-12]
FF Extension: (Protected Browsing) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\protbrowsing@live.xpi [2021-01-15] [UpdateUrl:hxxps://protected-browsing.best/resources/extension.json]
FF Extension: (Google Translator for Firefox) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\translator@zoli.bod.xpi [2020-01-01]
FF Extension: (OldWood) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{1268dd7d-073e-4bf1-81dc-f1bb0f4f0c2e}.xpi [2020-06-27]
FF Extension: (Dark-ish Rainbow) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{21f69c5d-b9e1-470f-a890-74454e954eee}.xpi [2020-08-13]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-03-03]
FF Extension: (Blue Carbon Fiber) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{5ab03bdd-3d91-4c73-801e-607ca27458d0}.xpi [2020-01-01]
FF Extension: (NoScript) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2021-02-23]
FF Extension: (Fenetre Mailto) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{7954b599-d6d5-4b4c-b048-dd39ee8325a2}.xpi [2020-03-26]
FF Extension: (chrystalize) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{96b7a652-8716-4678-be68-7a8bac53a373}.xpi [2020-01-01]
FF Extension: (Video DownloadHelper) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-17]
FF Extension: (A N I M A T E D KITTY CAT) - C:\Users\MATULA\PROFILS\FIREFOX\00ft0q70.default-1496386417507\Extensions\{cf4e89f2-b8e0-4ad7-932d-7b82d8956543}.xpi [2020-01-01]
FF ProfilePath: C:\Users\MATULA\AppData\Roaming\Mozilla\Firefox\Profiles\993zg6qh.MALKO [2021-02-10]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-12-30] [] [non signé]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-02-25] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-643979615-3718182490-1915481562-1001: www.mydlink.com/Uplayer -> C:\Users\MATULA\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-LINK CORPORATION -> D-Link Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8988552 2021-02-22] (Microsoft Corporation -> Microsoft Corporation)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA)
S3 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-21] (Malwarebytes Inc -> Malwarebytes)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUSTeK Computer Inc. -> ASUS Corporation)
R3 athr; C:\WINDOWS\System32\drivers\athwbx.sys [3892224 2014-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] (ASUSTeK Computer Inc. -> )
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-02-22] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49544 2021-03-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420088 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-03-08 08:51 - 2021-03-08 08:51 - 000076323 _____ C:\Users\MATULA\Downloads\Avis_de_taxe_d_habitation_CAP_2020.pdf
2021-03-07 10:06 - 2021-03-07 10:07 - 000000000 ____D C:\ProgramData\Atheros
2021-03-07 10:06 - 2021-03-07 10:06 - 000000000 ____D C:\Users\MATULA\AppData\Roaming\Atheros
2021-03-06 15:39 - 2021-03-06 15:39 - 000000000 ____D C:\Users\MATULA\Documents\Bluetooth Folder
2021-03-06 15:38 - 2021-03-06 15:41 - 000000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2021-03-06 15:38 - 2021-03-06 15:41 - 000000000 ____D C:\Program Files (x86)\Bluetooth Suite
2021-03-06 15:38 - 2021-03-06 15:38 - 000000000 ____D C:\ProgramData\{EB5F5A55-037A-4E47-806B-2C8AA9374701}
2021-03-06 08:41 - 2021-03-09 10:14 - 000003614 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update1
2021-03-06 08:41 - 2021-03-09 10:14 - 000003460 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update2
2021-03-06 07:53 - 2021-03-06 08:41 - 000003446 _____ C:\WINDOWS\system32\Tasks\Update Checker
2021-03-05 16:02 - 2021-03-05 16:02 - 000000000 ____D C:\Users\MATULA\ansel
2021-03-05 11:21 - 2021-03-05 11:22 - 000000000 ____D C:\Users\MATULA\1NOTE 10
2021-03-03 08:09 - 2021-03-03 08:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-02-25 08:56 - 2021-02-25 08:56 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-02-25 08:56 - 2021-02-25 08:56 - 000011002 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-02-25 08:54 - 2021-02-25 08:54 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-02-25 08:54 - 2021-02-25 08:54 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-02-25 08:54 - 2021-02-25 08:54 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-02-25 08:54 - 2021-02-25 08:54 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-02-25 07:40 - 2021-02-25 08:27 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\IGDump
2021-02-24 15:32 - 2021-03-11 08:36 - 000000000 ____D C:\FRST
2021-02-22 11:44 - 2021-02-22 11:44 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-02-10 10:00 - 2021-03-05 18:48 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-02-10 09:57 - 2021-02-10 09:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-02-10 09:48 - 2021-02-10 09:48 - 008535768 _____ C:\Users\MATULA\Documents\Tarif Clients T-Roc au 24 juin 2020 MAJ au 25 janvier 2021.pdf
2021-02-10 09:48 - 2021-02-10 09:48 - 006293850 _____ C:\Users\MATULA\Documents\Tarif Clients T-Cross au 24 juin 2020 MAJ au 25 janvier 2021.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-11 08:37 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-11 08:36 - 2020-09-02 13:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-11 08:35 - 2015-02-04 19:16 - 000000000 ____D C:\Program Files\CCleaner
2021-03-11 08:34 - 2016-11-16 08:19 - 000000000 ____D C:\Users\MATULA\AppData\LocalLow\Mozilla
2021-03-11 08:34 - 2015-02-04 12:10 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-11 08:33 - 2017-06-03 08:11 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-11 08:21 - 2014-12-09 18:34 - 000000000 __SHD C:\Users\MATULA\IntelGraphicsProfiles
2021-03-09 15:16 - 2020-06-17 16:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-09 10:40 - 2015-02-08 08:22 - 000000000 ____D C:\Users\MATULA\AppData\Local\CrashDumps
2021-03-08 17:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-03-08 12:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-06 15:44 - 2015-02-05 17:44 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-03-06 15:43 - 2020-06-17 16:26 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-06 15:43 - 2019-12-07 15:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-03-06 15:43 - 2019-12-07 15:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-03-06 15:42 - 2016-04-25 08:13 - 000000000 ____D C:\temp
2021-03-06 15:33 - 2020-06-17 16:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-06 15:33 - 2020-06-17 16:12 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-06 15:32 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-03-06 09:50 - 2018-09-01 09:11 - 000000000 ____D C:\Users\MATULA\AppData\Local\D3DSCache
2021-03-06 08:41 - 2014-05-15 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2021-03-06 08:41 - 2014-05-15 16:58 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-03-06 08:13 - 2014-05-16 00:07 - 000000000 ____D C:\WINDOWS\Log
2021-03-06 08:10 - 2019-04-06 11:03 - 000000000 ____D C:\ProgramData\ASUS
2021-03-06 07:46 - 2018-03-15 17:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-05 19:07 - 2020-06-17 14:30 - 000000000 ____D C:\Users\MATULA
2021-03-05 18:48 - 2015-02-04 12:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-05 10:32 - 2015-09-25 08:53 - 000000000 ____D C:\Users\MATULA\AppData\Local\ElevatedDiagnostics
2021-03-05 09:52 - 2020-09-02 13:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-05 09:52 - 2020-09-02 13:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-03 08:15 - 2020-06-17 16:54 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-643979615-3718182490-1915481562-1001
2021-03-03 08:15 - 2020-06-17 14:30 - 000002443 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-03 08:15 - 2014-12-09 18:40 - 000000000 __RDO C:\Users\MATULA\OneDrive
2021-03-03 08:09 - 2019-12-21 12:07 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-03 08:09 - 2018-05-05 15:14 - 000001306 _____ C:\Users\MATULA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk
2021-02-26 09:57 - 2020-06-17 16:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-02-26 09:55 - 2017-04-14 09:34 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-02-25 09:54 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-25 09:40 - 2017-12-13 11:11 - 000000000 ____D C:\ProgramData\Apple
2021-02-25 09:17 - 2020-06-17 16:12 - 000444040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-02-25 09:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-02-25 08:10 - 2020-06-17 10:06 - 000000000 ___HD C:\$WinREAgent
2021-02-22 15:17 - 2017-10-22 08:47 - 000000000 ____D C:\Users\MATULA\AppData\Local\Packages
2021-02-13 10:22 - 2017-11-16 08:58 - 000000000 ____D C:\Users\MATULA\AppData\Local\PlaceholderTileLogoFolder
2021-02-13 10:22 - 2014-12-11 19:19 - 000000000 ___RD C:\Users\MATULA\CAPTURE
2021-02-13 10:17 - 2015-02-26 10:31 - 000006144 _____ C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-02-11 14:34 - 2019-11-29 08:24 - 000000000 ____D C:\ProgramData\Samsung
2021-02-11 14:31 - 2019-11-29 08:19 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-02-11 14:03 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-02-11 13:15 - 2015-02-04 13:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-02-11 13:09 - 2015-02-04 13:06 - 130141752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-02-10 10:09 - 2020-09-14 12:07 - 000000000 ____D C:\WINDOWS\Minidump
2021-02-10 09:58 - 2021-02-05 12:10 - 000001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-02-09 09:32 - 2020-01-01 12:21 - 000000000 ____D C:\KPRM
==================== Fichiers à la racine de certains dossiers ========
2015-02-04 11:33 - 2017-10-06 10:49 - 000000093 _____ () C:\Users\MATULA\AppData\Roaming\sp_data.sys
2015-02-26 10:31 - 2021-02-13 10:17 - 000006144 _____ () C:\Users\MATULA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-17 18:07 - 2019-01-17 18:07 - 000000758 _____ () C:\Users\MATULA\AppData\Local\recently-used.xbel
2015-02-25 09:09 - 2015-02-25 09:09 - 000000017 _____ () C:\Users\MATULA\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================