Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 15-05-2021
Exécuté par yves (administrateur) sur YVES-PC (16-05-2021 20:48:19)
Exécuté depuis C:\Users\yves\Desktop
Profils chargés: yves
Platform: Windows 10 Pro Version 2004 19041.985 (X64) Langue: Français (France)
Navigateur par défaut: IE
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
() [Fichier non signé] C:\Windows\SysWOW64\ASGT.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ArcSoft, Inc. -> ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(INDEX EDUCATION SASU -> Index Education) C:\Program Files (x86)\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Portrait Displays Inc.) [Fichier non signé] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe
(Portrait Displays, Inc) [Fichier non signé] C:\Program Files (x86)\Portrait Displays\HP My Display\dthtml.exe
(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Portrait Displays\Pivot Software\Floater.exe
(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe
(Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-05-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-05-22] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2017-11-18] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [340440 2021-04-16] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe [694008 2007-02-09] (Portrait Displays, Inc. -> )
HKLM-x32\...\Run: [DT HPW] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [86016 2009-10-06] () [Fichier non signé]
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation) [Fichier non signé]
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8172264 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\...\Run: [com.squirrel.Teams.Teams] => C:\Users\yves\AppData\Local\Microsoft\Teams\Update.exe [2452664 2020-12-21] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33698888 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [224768 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2016-07-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP CC11 Status Monitor: C:\Windows\system32\hpinkstsCC11LM.dll [391992 2019-03-15] (HP Inc -> HP Inc.)
HKLM\...\Print\Monitors\PCL hpz3lw71: C:\Windows\system32\hpz3lw71.dll [46080 2016-07-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [117248 2018-10-06] (pdfforge GmbH) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\90.0.4430.212\Installer\chrmstp.exe [2021-05-15] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02580460-2A8C-4071-873F-F1EE0205EAAC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-04-22] (Piriform Software Ltd -> Piriform)
Task: {02C7E6A6-48F2-41FF-87F2-301CBB9E915A} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [696304 2021-05-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {04C1E4A4-0111-4369-9D45-FEB7DF4D80D2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12C15D16-DDBF-4D8D-BDD4-528ADD9179CA} - System32\Tasks\ArcSoft Connect => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft, Inc. -> ArcSoft Inc.)
Task: {15D916CA-400D-4388-887E-0F1F7DFBD1AE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
Task: {1F581206-E661-4D03-8EA4-3CD1116B59A9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {29A700E5-B110-4AAD-B72D-196A33549DA4} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B9C48A9-3426-4D81-9291-13C462FA7FE3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28082760 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3DB9A334-A213-4BD0-A2BE-E667A6887160} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-02] (Google LLC -> Google LLC)
Task: {3E882EC5-708F-446F-873B-D45B5C43BBE5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-05-01] (Avast Software s.r.o. -> Avast Software)
Task: {3F7930AE-91E0-4270-8461-816EDE3C39A0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
Task: {43065BE3-9B26-4F2D-A661-C05A70582463} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4CEFEC0B-9C9D-41F1-AE2A-770733BA34D8} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {524A143C-0428-4DCC-9BD1-25F7ABDA4A97} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {540A549A-18A4-467E-A4FE-916B98AB4549} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5E3ECA61-3041-498E-8732-7C7BD407A0C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {60632300-0210-4772-8DA7-56C199E37ADA} - System32\Tasks\Programme de mise à jour en ligne de Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {6421113A-3679-4DB2-8EC4-99121F96CBFC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66AF4729-3DFA-4DD3-94AB-AEC5617259F3} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960448 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {864BE7B9-BC56-4421-BCAE-1E0066F57057} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {8FC89D0E-2337-4908-92A6-F41BA2A852C1} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {A1DFB7C0-7A0A-4BBE-8041-D263ED89277A} - System32\Tasks\HPCustParticipation HP ENVY 5640 series => C:\Program Files\HP\HP ENVY 5640 series\Bin\HPCustPartic.exe [6438536 2017-05-23] (Hewlett Packard -> HP Inc.)
Task: {A2B510B6-978F-4C11-A804-99AEE89FD140} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {AA78D079-AAD1-4801-92DD-9AEDCECE2147} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE0BE9BD-0B97-46B1-A074-232DA0F4179F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B3D68672-31A6-4602-90FE-6D2571BEB28A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B41D1C56-164B-4FD6-B17D-F8F534718467} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAB09838-EC1D-414C-8EF2-A684A00B027B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {C553B4B3-791F-41CD-9F7D-286FE781F206} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
Task: {CCBF6B3A-4C57-40AC-A868-EDE95FC14516} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {D44E91C5-221C-4A39-816B-F48592A6FDEB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-02] (Google LLC -> Google LLC)
Task: {DA6E1316-2C92-4075-99E5-06130B7E5798} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {E445B313-88CF-498B-9E6A-1CA411F9D76F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EE61F775-B2A9-4368-95B0-85FC863916F4} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {F7AAD64C-D44B-45B1-BE0F-657E9F4F6643} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{1ffe85a9-7573-4d13-ba65-1bd83104b500}: [DhcpNameServer] 192.168.10.110
Tcpip\..\Interfaces\{41cb5b4b-0af8-4e42-978c-f408d10b5c74}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{7f166a57-dcf2-42a9-8e12-4afdfc020c9b}: [DhcpNameServer] 172.20.10.1
Edge:
=======
DownloadDir: C:\Users\yves\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\yves\AppData\Local\Microsoft\Edge\User Data\Default [2021-05-16]
Edge StartupUrls: Default -> "hxxp://yahoo.fr/"
Edge DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search{google:pathWildcard}?ei={inputEncoding}&fr=crmas&p={searchTerms}
Edge DefaultSearchKeyword: Default -> fr.yahoo.com
Edge DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
FireFox:
========
FF DefaultProfile: 2auoa59h.default-1552346326434
FF ProfilePath: C:\Users\yves\AppData\Roaming\Mozilla\Firefox\Profiles\2auoa59h.default-1552346326434 [2021-05-16]
FF Homepage: Mozilla\Firefox\Profiles\2auoa59h.default-1552346326434 -> hxxps://fr.yahoo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-04-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3824958484-2069351139-209342545-1000: SkypeForBusinessPlugin-16.2 -> C:\Users\yves\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3824958484-2069351139-209342545-1000: SkypeForBusinessPlugin64-16.2 -> C:\Users\yves\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default [2021-05-16]
CHR Extension: (Slides) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-03-02]
CHR Extension: (Docs) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-03-02]
CHR Extension: (Google Drive) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-03-02]
CHR Extension: (YouTube) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-03-02]
CHR Extension: (Sheets) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-03-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-02]
CHR Extension: (Gmail) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-03-02]
CHR Extension: (Chrome Media Router) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-14]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S2 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-03-16] (Apple Inc. -> Apple Inc.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [48640 2015-05-29] () [Fichier non signé]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44272 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [69632 2009-10-06] () [Fichier non signé]
S3 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [400864 2013-04-15] (Elgato Systems -> Elgato Systems GmbH)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 MajIndexEducationService; C:\Program Files (x86)\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe [3241064 2019-07-30] (INDEX EDUCATION SASU -> Index Education)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-05-27] (Malwarebytes Inc -> Malwarebytes)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-08-02] (Martin Malik - REALiX -> REALiX(tm))
S3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-10-23] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 johci; C:\WINDOWS\System32\drivers\johci.sys [26208 2020-05-24] (JMicron Technology Corp. -> JMicron Technology Corp.)
R3 L1E; C:\WINDOWS\System32\drivers\L1E62x64.sys [59904 2019-12-07] (Microsoft Windows -> Atheros Communications, Inc.)
S3 LVPr2M64; C:\WINDOWS\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] (Logitech Inc -> )
S3 LVPr2Mon; C:\WINDOWS\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] (Logitech Inc -> )
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-05-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2016-10-02] (ASUSTeK Computer Inc. -> )
R3 PdiPorts; C:\WINDOWS\System32\drivers\PdiPorts.sys [19248 2006-11-16] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-05-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [421112 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
S3 ohci1394; \SystemRoot\System32\drivers\ohci1394.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-05-16 18:20 - 2021-05-16 18:20 - 000002775 _____ C:\Users\yves\Desktop\AdwCleaner[C00].txt
2021-05-16 18:15 - 2021-05-16 18:19 - 000000000 ____D C:\AdwCleaner
2021-05-16 18:13 - 2021-05-16 18:13 - 008534696 _____ (Malwarebytes) C:\Users\yves\Desktop\adwcleaner_8.2.exe
2021-05-16 17:27 - 2021-05-16 17:27 - 003327128 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPCleaner.exe
2021-05-15 22:03 - 2021-05-15 22:03 - 000300021 _____ C:\Users\yves\Desktop\Shortcut.txt
2021-05-15 21:58 - 2021-05-15 22:03 - 000053603 _____ C:\Users\yves\Desktop\Addition.txt
2021-05-15 21:47 - 2021-05-16 20:50 - 000025967 _____ C:\Users\yves\Desktop\FRST.txt
2021-05-15 21:46 - 2021-05-16 20:49 - 000000000 ____D C:\FRST
2021-05-15 21:43 - 2021-05-15 21:43 - 002299392 _____ (Farbar) C:\Users\yves\Desktop\FRST64.exe
2021-05-15 21:34 - 2021-05-16 20:42 - 000213943 _____ C:\Users\yves\Desktop\ZHPDiag.txt
2021-05-15 21:13 - 2021-05-15 21:13 - 000000901 _____ C:\Users\yves\Desktop\ZHPSuite.lnk
2021-05-15 21:12 - 2021-05-16 17:31 - 000000000 ____D C:\Users\yves\AppData\Local\ZHP
2021-05-15 21:08 - 2021-05-15 21:09 - 003469464 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPSuite.exe
2021-05-15 20:14 - 2021-05-15 20:14 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-05-15 20:14 - 2021-05-15 20:14 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-05-15 20:14 - 2021-05-15 20:14 - 000153600 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2021-05-15 20:13 - 2021-05-15 20:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-05-15 20:13 - 2021-05-15 20:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-05-15 20:13 - 2021-05-15 20:13 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-05-15 20:13 - 2021-05-15 20:13 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-05-15 20:13 - 2021-05-15 20:13 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-05-15 20:12 - 2021-05-15 20:12 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-05-15 20:10 - 2021-05-15 20:10 - 001823816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-05-15 20:10 - 2021-05-15 20:10 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-05-15 20:10 - 2021-05-15 20:10 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-05-15 20:08 - 2021-05-15 20:08 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-05-15 20:07 - 2021-05-15 20:07 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-05-15 19:56 - 2021-05-15 19:56 - 000033530 _____ C:\Users\yves\Documents\cc_20210515_195601.reg
2021-05-15 19:28 - 2021-05-15 19:28 - 031412280 _____ (Piriform Software Ltd) C:\Users\yves\Downloads\ccsetup579.exe
2021-05-15 19:26 - 2021-05-15 19:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-05-15 15:32 - 2021-05-15 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000044272 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-05-02 13:18 - 2021-05-02 13:18 - 003113626 _____ C:\Users\yves\Documents\JEAN OURY Transpassible.pdf
2021-05-02 13:17 - 2021-05-02 13:17 - 003109959 _____ C:\Users\yves\Documents\Scan_0046.pdf
2021-05-02 13:09 - 2021-05-02 13:09 - 001680211 _____ C:\Users\yves\Documents\JEAN OURY LE DIRE A Quelle heure passe le train.pdf
2021-05-02 13:07 - 2021-05-02 13:07 - 001676315 _____ C:\Users\yves\Documents\Scan_0045.pdf
2021-05-02 13:04 - 2021-05-02 13:04 - 000542978 _____ C:\Users\yves\Documents\Scan_0044.pdf
2021-05-01 18:50 - 2021-05-01 18:50 - 000566173 _____ C:\Users\yves\Desktop\Psychose diagnostic CAIRN.pdf
2021-04-24 14:34 - 2021-04-24 14:34 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2021-04-24 14:34 - 2021-04-24 14:34 - 000001816 _____ C:\ProgramData\Desktop\iTunes.lnk
2021-04-24 14:34 - 2021-04-24 14:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2021-04-24 14:32 - 2021-04-24 14:34 - 000000000 ____D C:\Program Files\iTunes
2021-04-15 08:42 - 2021-04-15 08:42 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-12 07:32 - 2021-04-12 07:32 - 000094001 _____ C:\Users\yves\Downloads\aide garde année 2021 YG.xlsx
2021-04-11 21:21 - 2021-04-11 21:21 - 000109508 _____ C:\Users\yves\Downloads\Curriculum Vitae.pdf
2021-04-11 20:53 - 2021-04-11 20:53 - 000383198 _____ C:\Users\yves\Downloads\Recommandations SFMU 31 mars 2021 PEC patient adulte à présentation psy structure urgence.pdf
2021-04-11 20:42 - 2021-04-11 20:48 - 000000000 ____D C:\Users\yves\Documents\CREDIT AGRICOLE
2021-04-10 09:10 - 2021-04-10 09:10 - 000793482 _____ C:\Users\yves\Documents\VACCIN COVID19.pdf
2021-03-26 09:02 - 2021-03-26 09:02 - 000016042 _____ C:\Users\yves\Desktop\Copie de 1-Tableau des actions PTSM13.xlsx
2021-03-24 09:21 - 2021-03-24 09:21 - 000302843 _____ C:\Users\yves\Downloads\++_Connexion_Teams_Séance_plénière_conférence_24_mars_2021_++.zip
2021-03-24 08:25 - 2021-03-24 08:25 - 000535922 _____ C:\Users\yves\Downloads\archive(4).zip
2021-03-21 22:04 - 2021-03-21 22:04 - 001799401 _____ C:\Users\yves\Documents\GARANT ELI 2021.pdf
2021-03-21 22:03 - 2021-03-21 22:03 - 001795656 _____ C:\Users\yves\Documents\Scan_0043.pdf
2021-03-17 10:47 - 2021-03-17 10:47 - 000130827 _____ C:\Users\yves\Downloads\CV Dr SLIMANOU Rachida.pdf
2021-03-17 10:47 - 2021-03-17 10:47 - 000052320 _____ C:\Users\yves\Downloads\SLIMANOU Rachida Dr Conseil National de l'Ordre des Médecins.pdf
2021-03-17 10:35 - 2021-03-17 10:35 - 001235328 _____ C:\Users\yves\Documents\LIVRET A FABIENNE 2021.pdf
2021-03-15 21:25 - 2021-03-16 00:02 - 001287032 _____ C:\Users\yves\Desktop\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pdf
2021-03-15 21:23 - 2021-03-16 00:02 - 000158653 _____ C:\Users\yves\Desktop\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pptx
2021-03-15 21:22 - 2021-03-15 21:22 - 000158551 _____ C:\Users\yves\Documents\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pptx
2021-03-14 09:58 - 2021-03-14 18:22 - 000158006 _____ C:\Users\yves\Documents\CONGRES ADDICTION PARIS 2021.pptx
2021-03-14 09:21 - 2021-03-14 18:18 - 000000000 ____D C:\Users\yves\Documents\FORMATION LARAGNE III2020
2021-03-12 19:01 - 2021-03-12 19:01 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-03-12 19:00 - 2021-03-12 19:00 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-12 18:59 - 2021-03-12 18:59 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-12 18:59 - 2021-03-12 18:59 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-09 11:49 - 2021-03-09 11:49 - 002735200 _____ (StarLeaf Ltd.) C:\Users\yves\Downloads\StarLeaf Launcher - tjN7-dv8.exe
2021-03-09 01:14 - 2021-03-09 01:14 - 000127739 _____ C:\Users\yves\Downloads\Motion definitive DPI CME 16 février 2021.pdf
2021-03-08 23:42 - 2021-03-09 00:10 - 000392404 _____ C:\Users\yves\Desktop\PASSAGE A L ACTE.pdf
2021-03-03 10:31 - 2021-01-17 19:56 - 001925005 _____ C:\Users\yves\Documents\INCURIE LOGEMENT.pdf
2021-03-03 10:31 - 2017-12-03 15:07 - 000516958 _____ C:\Users\yves\Documents\JLD ARTICLE 2017.pdf
2021-03-03 10:30 - 2021-01-26 00:04 - 000415108 _____ C:\Users\yves\Documents\LE CONCEPT DE POTENTIALITE PSYCHOTIQUE.pdf
2021-03-03 10:28 - 2020-01-21 09:57 - 000348906 _____ C:\Users\yves\Documents\SUIVI INTENSIF A DOMICILE 2020.pdf
2021-03-03 10:28 - 2019-04-28 18:12 - 000314447 _____ C:\Users\yves\Documents\Résumé Livre Prof Dia.pdf
2021-03-03 10:27 - 2019-09-30 17:40 - 000908674 _____ C:\Users\yves\Documents\RETABLISSEMENT.pdf
2021-03-03 10:26 - 2019-04-28 10:47 - 000104739 _____ C:\Users\yves\Documents\Psychiatrie de liaison.pdf
2021-03-03 10:25 - 2019-04-28 11:52 - 000079094 _____ C:\Users\yves\Documents\PSYCHIATRIE DE LIAISON DIAPO.pptx
2021-03-03 10:24 - 2019-01-24 22:32 - 000088531 _____ C:\Users\yves\Documents\PRELEVEMENT LOYER GARAGE.pdf
2021-03-03 10:24 - 2018-11-04 16:55 - 000079203 _____ C:\Users\yves\Documents\PRESCRIRE A TOUT PRIX PRESCRIRE A QUEL PRIX.pptx
2021-03-03 10:24 - 2018-03-22 18:53 - 000071506 _____ C:\Users\yves\Documents\Prescrire, entre technicité et acte de langage NOIR.pptx
2021-03-03 10:23 - 2020-12-16 10:55 - 000145263 _____ C:\Users\yves\Documents\Présentation DR MULLER MME FINKELSTEIN 15122020 CH E T Marseille V2.pptx
2021-03-03 10:23 - 2018-11-04 12:48 - 000079159 _____ C:\Users\yves\Documents\Prescrire, entre technicité et acte de langage.pptx
2021-03-03 10:22 - 2020-02-12 01:25 - 000227840 _____ C:\Users\yves\Documents\PROJET MEDICAL CME avril DIAPO 2016-2020.ppt
2021-03-03 10:21 - 2021-03-09 09:27 - 011281757 _____ C:\Users\yves\Desktop\Passage13.pptx
2021-03-02 18:29 - 2021-05-15 16:57 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-02 18:29 - 2021-05-15 16:57 - 000002204 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-03-02 18:29 - 2021-05-15 16:57 - 000002204 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-02 18:29 - 2021-03-02 18:29 - 000000000 ____D C:\Program Files\Google
2021-03-02 18:28 - 2021-04-23 07:30 - 000003588 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-02 18:28 - 2021-04-23 07:30 - 000003464 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-02 18:28 - 2021-03-02 18:28 - 000000000 ____D C:\Program Files (x86)\Google
2021-03-02 18:27 - 2021-03-03 11:03 - 000000000 ____D C:\Users\yves\AppData\Local\Google
2021-03-02 18:27 - 2021-03-02 18:27 - 001304160 _____ (Google LLC) C:\Users\yves\Downloads\ChromeSetup.exe
2021-02-28 21:39 - 2021-02-28 21:39 - 000033715 _____ C:\Users\yves\Documents\FACTURE HOPITAL NORD 2021.pdf
2021-02-28 15:49 - 2021-02-28 15:53 - 000356718 _____ C:\Users\yves\Documents\A FORMATION ADDICTION LARAGNE2020.pptx
2021-02-26 12:23 - 2021-02-26 12:23 - 000064451 _____ C:\Users\yves\Downloads\RE__Bilan_(ARS)___GJ.zip
2021-02-26 11:04 - 2021-02-26 11:04 - 000227528 _____ C:\Users\yves\Downloads\ARGUMENTAIRE_SISM2021_VF.pdf
2021-02-21 21:28 - 2021-02-21 21:28 - 000001779 _____ C:\Users\yves\Desktop\COLLOUE ADDICTION PARIS 2021.pptx - Raccourci.lnk
2021-02-21 21:27 - 2021-03-13 21:59 - 000090183 _____ C:\Users\yves\Documents\COLLOUE ADDICTION PARIS 2021.pptx
2021-02-18 02:27 - 2021-02-18 02:27 - 000004096 ____H C:\Users\yves\AppData\Local\keyfile3.drm
2021-02-17 23:50 - 2021-02-18 02:24 - 000000000 ____D C:\Users\yves\Desktop\ARS PREVENTION 2021
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-05-16 20:48 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-05-16 20:47 - 2016-11-21 15:23 - 000000000 ____D C:\Users\yves\AppData\LocalLow\Mozilla
2021-05-16 20:47 - 2012-08-25 14:19 - 000000000 ____D C:\ProgramData\Mozilla
2021-05-16 20:42 - 2016-05-10 01:05 - 000000000 ____D C:\Users\yves\AppData\Roaming\ZHP
2021-05-16 20:28 - 2020-08-27 22:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-05-16 19:33 - 2016-10-06 17:55 - 000000000 ____D C:\Program Files\CCleaner
2021-05-16 18:51 - 2020-05-27 23:12 - 000000000 ____D C:\Users\yves\AppData\LocalLow\IGDump
2021-05-16 18:27 - 2017-08-27 17:32 - 000000000 ____D C:\ProgramData\NVIDIA
2021-05-16 18:26 - 2020-08-27 22:35 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-05-16 18:26 - 2020-08-27 22:04 - 000008192 ___SH C:\DumpStack.log.tmp
2021-05-16 18:25 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-05-16 18:19 - 2018-12-14 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2021-05-16 18:19 - 2018-12-14 23:33 - 000000000 ____D C:\Users\yves\AppData\Roaming\Samsung
2021-05-16 18:19 - 2018-12-14 23:32 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-05-16 18:19 - 2016-05-05 08:25 - 000000000 ____D C:\Users\yves\AppData\Local\CrashDumps
2021-05-16 18:19 - 2016-05-01 17:51 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-05-16 18:03 - 2015-11-03 21:28 - 000000000 ____D C:\Program Files (x86)\Adobe
2021-05-16 18:01 - 2020-08-27 22:29 - 002005062 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-05-16 18:01 - 2019-12-07 16:50 - 000865430 _____ C:\WINDOWS\system32\perfh00C.dat
2021-05-16 18:01 - 2019-12-07 16:50 - 000177780 _____ C:\WINDOWS\system32\perfc00C.dat
2021-05-16 18:01 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-05-15 22:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-05-15 22:55 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-05-15 22:54 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-05-15 22:54 - 2018-05-21 17:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-05-15 22:42 - 2020-08-27 22:04 - 000447560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-05-15 22:40 - 2019-08-22 13:59 - 000001210 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-05-15 22:40 - 2019-08-22 13:59 - 000001206 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2021-05-15 22:40 - 2019-04-14 10:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-05-15 22:36 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-05-15 22:36 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-05-15 20:56 - 2018-01-23 02:34 - 000000000 ____D C:\Users\yves\AppData\Local\Packages
2021-05-15 20:38 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-05-15 20:37 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-05-15 19:30 - 2020-08-27 22:35 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-05-15 19:30 - 2016-10-06 17:55 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-05-15 19:30 - 2016-10-06 17:55 - 000000863 _____ C:\ProgramData\Desktop\CCleaner.lnk
2021-05-15 19:26 - 2016-02-16 23:39 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-05-15 18:16 - 2013-08-15 10:43 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-05-15 18:12 - 2010-02-08 22:03 - 132732536 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-05-15 16:46 - 2020-08-27 22:35 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3824958484-2069351139-209342545-1000
2021-05-15 16:46 - 2020-08-27 13:54 - 000002435 _____ C:\Users\yves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-05-15 16:46 - 2016-07-23 08:26 - 000000000 ___RD C:\Users\yves\OneDrive
2021-05-15 16:22 - 2017-04-17 18:06 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002280 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-05-15 15:35 - 2019-02-10 20:59 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-05-05 07:24 - 2020-08-27 22:35 - 000004270 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-05-05 07:24 - 2020-08-27 22:35 - 000004038 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2021-05-02 12:52 - 2021-01-24 15:59 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-05-01 18:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-04-27 07:10 - 2020-08-27 22:35 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-27 07:10 - 2020-08-27 22:35 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2016-07-22 00:23 - 2016-07-22 00:23 - 002230272 _____ () C:\Users\yves\ZHPDiag3.exe
2018-05-20 22:50 - 2018-05-20 22:50 - 000000268 ____H () C:\Users\yves\AppData\Roaming\Tuner
2018-05-20 22:46 - 2018-05-20 22:46 - 000000000 _____ () C:\Users\yves\AppData\Roaming\URLs
2018-05-20 22:50 - 2018-05-20 22:50 - 000000268 ____H () C:\Users\yves\AppData\Roaming\User Loops
2010-04-19 18:24 - 2010-04-19 18:24 - 000033134 _____ () C:\Users\yves\AppData\Roaming\UserTile.png
2010-02-16 23:54 - 2010-02-17 01:18 - 000021891 _____ () C:\Users\yves\AppData\Roaming\Valeurs séparées par des virgules (Windows).ADR
2014-05-11 19:10 - 2019-03-24 17:24 - 000007680 _____ () C:\Users\yves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-02-18 02:27 - 2021-02-18 02:27 - 000004096 ____H () C:\Users\yves\AppData\Local\keyfile3.drm
==================== SigCheckExt =========================
2006-12-02 00:37 - 2006-12-02 00:37 - 000904704 _____ (Microsoft Corporation) C:\msdia80.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:32 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-07-10 05:30 - 2015-07-10 05:30 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2015-07-10 05:30 - 2015-07-10 05:30 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-04-17 18:45 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 003447296 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPScanTRDrvWn8.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 000303616 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPWia2DrvRootWn8.dll
2017-05-13 15:44 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2016-06-19 18:51 - 2016-05-20 23:07 - 001359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll
2012-09-26 00:32 - 2012-08-21 23:01 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\OxpsConverter.exe
2014-12-20 16:42 - 2018-10-06 22:18 - 000117248 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2015-03-05 00:52 - 2015-01-09 05:14 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\powertracker.dll
2011-06-25 16:27 - 2010-11-20 15:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushPrinterConnections.exe
2016-02-15 13:14 - 2015-12-20 20:50 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpGroupPolicyExtension.dll
2012-06-23 17:26 - 2012-04-26 07:34 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrmemptylst.exe
2015-07-10 05:35 - 2015-07-10 05:35 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeSubscription.exe
2015-09-10 23:54 - 2015-07-22 18:48 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2012-11-17 20:20 - 2012-07-26 04:36 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wdfres.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2016-03-08 22:52 - 2016-02-12 20:18 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2010-02-15 19:50 - 2009-07-11 19:10 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\atl80.dll
2009-01-05 15:44 - 2009-01-05 15:44 - 000053248 _____ C:\WINDOWS\bdoscandel.exe
2010-02-15 19:50 - 2001-06-01 10:26 - 000372736 _____ (Intel Corporation) C:\WINDOWS\ijl15.dll
2012-01-14 23:43 - 1998-07-30 13:51 - 000305152 _____ (InstallShield Software Corporation) C:\WINDOWS\IsUninst.exe
2010-02-15 19:50 - 2002-01-05 06:48 - 000974848 _____ (Microsoft Corporation) C:\WINDOWS\mfc70.dll
2010-02-15 19:50 - 2009-07-11 20:46 - 001105920 _____ (Microsoft Corporation) C:\WINDOWS\mfc80.dll
2010-02-15 19:50 - 2009-07-11 20:46 - 001093120 _____ (Microsoft Corporation) C:\WINDOWS\mfc80u.dll
2010-02-15 19:50 - 2009-07-12 01:56 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\mfcm80.dll
2010-02-15 19:50 - 2009-07-12 01:55 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\mfcm80u.dll
2010-02-15 19:50 - 2004-08-04 02:56 - 001392671 _____ (Microsoft Corporation) C:\WINDOWS\msvbvm60.dll
2010-02-15 19:50 - 2009-07-12 01:55 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\msvcm80.dll
2010-02-15 19:50 - 2002-01-05 05:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\msvcp70.dll
2010-02-15 19:50 - 2002-01-05 05:37 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\msvcr70.dll
2011-12-12 00:43 - 2008-04-27 22:28 - 000962560 _____ C:\WINDOWS\tesseract.exe
2016-05-14 01:14 - 2016-05-14 01:11 - 000024064 _____ C:\WINDOWS\zoek-delete.exe
2013-02-27 19:40 - 2013-01-13 23:16 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:12 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:17 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2015-05-29 10:28 - 2015-05-29 10:28 - 000048640 _____ C:\WINDOWS\SysWOW64\ASGT.exe
2014-05-11 17:09 - 2018-05-20 22:51 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ATL71.DLL
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2010-02-03 18:43 - 2009-06-16 06:05 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2015-07-10 05:40 - 2015-07-10 05:40 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2017-03-16 22:51 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-07-16 13:44 - 2016-07-17 00:46 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2013-11-21 01:05 - 2013-11-21 01:05 - 000645120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsIntl.dll
1999-03-15 13:52 - 1999-03-15 13:52 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42FRA.DLL
2013-08-17 22:14 - 2013-08-17 22:14 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2014-05-01 18:58 - 2012-10-18 20:55 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHS.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHT.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71DEU.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ENU.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ESP.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71FRA.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ITA.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71JPN.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71KOR.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71u.dll
2016-06-19 18:51 - 2016-05-20 23:07 - 001155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmlmedia.dll
1999-04-06 18:06 - 1999-04-06 18:06 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPRPFR.DLL
2000-05-11 14:06 - 2000-05-11 14:06 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSRDO20.DLL
1998-08-09 20:07 - 1998-08-09 20:07 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTKPRP.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2013-08-17 22:14 - 2013-08-17 22:14 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2008-08-25 17:17 - 2008-08-25 17:17 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2008-08-25 17:17 - 2008-08-25 17:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2011-06-25 16:31 - 2009-07-14 03:16 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pmcsnap.dll
2011-06-25 16:31 - 2009-07-14 03:16 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ppcsnap.dll
2011-06-25 16:31 - 2010-11-20 14:17 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PushPrinterConnections.exe
2011-12-12 00:43 - 2009-10-29 05:46 - 001883136 _____ (Debenu Pty Ltd) C:\WINDOWS\SysWOW64\QuickPDFAX0717.dll
2000-04-03 18:52 - 2000-04-03 18:52 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RDOCURS.DLL
2014-09-25 21:18 - 2012-08-23 13:12 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp_winip.dll
2006-10-26 13:45 - 2006-10-26 13:45 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WISPTIS.EXE
2016-07-22 00:23 - 2016-07-22 00:23 - 002230272 _____ C:\Users\yves\ZHPDiag3.exe
2021-05-15 21:43 - 2021-05-15 21:43 - 002299392 _____ (Farbar) C:\Users\yves\Desktop\FRST64.exe
2021-05-16 17:27 - 2021-05-16 17:27 - 003327128 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPCleaner.exe
2021-05-15 21:08 - 2021-05-15 21:09 - 003469464 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPSuite.exe
2018-02-04 17:23 - 2018-02-04 17:23 - 004179293 _____ (Lavalys, Inc. ) C:\Users\yves\Downloads\everesthome220.exe
2011-12-12 00:41 - 2011-12-12 00:41 - 000159757 _____ (Free OCR) C:\Users\yves\Downloads\freeocr.exe
2013-10-01 23:10 - 2013-10-01 23:16 - 023173327 _____ (Realtek Semiconductor Corp.) C:\Users\yves\Downloads\HDMI_R270.exe
2012-01-14 23:42 - 2012-01-14 23:42 - 004469078 _____ (Plustech Inc.) C:\Users\yves\Downloads\IPChanger20Eng.exe
2013-02-27 23:55 - 2013-02-27 23:56 - 063273522 _____ (Stellarium team ) C:\Users\yves\Downloads\stellarium-0.12.0-win64.exe
2013-02-28 00:01 - 2013-02-28 00:02 - 060974528 _____ (Stellarium team ) C:\Users\yves\Downloads\stellarium_stellarium_0.12_32_bits_anglais_18474.exe
2018-02-04 15:04 - 2018-02-04 15:04 - 000045056 _____ C:\Users\yves\Downloads\winaskey (1).exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {62bce062-c9dd-11e9-bef5-f6517e4835dd}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {195d97bd-50a2-11e6-8217-d47f63ed64d0}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{195d97be-50a2-11e6-8217-d47f63ed64d0}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride Recovery
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{195d97be-50a2-11e6-8217-d47f63ed64d0}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {62bce065-c9dd-11e9-bef5-f6517e4835dd}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {62bce062-c9dd-11e9-bef5-f6517e4835dd}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {62bce065-c9dd-11e9-bef5-f6517e4835dd}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{62bce066-c9dd-11e9-bef5-f6517e4835dd}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{62bce066-c9dd-11e9-bef5-f6517e4835dd}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {b106327d-10e1-11df-ba7b-a16e7dd984be}
device ramdisk=[C:]\Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\Winre.wim,{b106327e-10e1-11df-ba7b-a16e7dd984be}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\Winre.wim,{b106327e-10e1-11df-ba7b-a16e7dd984be}
systemroot \windows
nx OptIn
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {62bce062-c9dd-11e9-bef5-f6517e4835dd}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {62bce065-c9dd-11e9-bef5-f6517e4835dd}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {62bce066-c9dd-11e9-bef5-f6517e4835dd}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {b106327e-10e1-11df-ba7b-a16e7dd984be}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par yves (administrateur) sur YVES-PC (16-05-2021 20:48:19)
Exécuté depuis C:\Users\yves\Desktop
Profils chargés: yves
Platform: Windows 10 Pro Version 2004 19041.985 (X64) Langue: Français (France)
Navigateur par défaut: IE
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
() [Fichier non signé] C:\Windows\SysWOW64\ASGT.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ArcSoft, Inc. -> ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(INDEX EDUCATION SASU -> Index Education) C:\Program Files (x86)\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Portrait Displays Inc.) [Fichier non signé] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe
(Portrait Displays, Inc) [Fichier non signé] C:\Program Files (x86)\Portrait Displays\HP My Display\dthtml.exe
(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Portrait Displays\Pivot Software\Floater.exe
(Portrait Displays, Inc. -> ) C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe
(Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-05-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-05-22] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2017-11-18] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [340440 2021-04-16] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe [694008 2007-02-09] (Portrait Displays, Inc. -> )
HKLM-x32\...\Run: [DT HPW] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [86016 2009-10-06] () [Fichier non signé]
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation) [Fichier non signé]
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8172264 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\...\Run: [com.squirrel.Teams.Teams] => C:\Users\yves\AppData\Local\Microsoft\Teams\Update.exe [2452664 2020-12-21] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33698888 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3824958484-2069351139-209342545-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [224768 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2016-07-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP CC11 Status Monitor: C:\Windows\system32\hpinkstsCC11LM.dll [391992 2019-03-15] (HP Inc -> HP Inc.)
HKLM\...\Print\Monitors\PCL hpz3lw71: C:\Windows\system32\hpz3lw71.dll [46080 2016-07-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [117248 2018-10-06] (pdfforge GmbH) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\90.0.4430.212\Installer\chrmstp.exe [2021-05-15] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02580460-2A8C-4071-873F-F1EE0205EAAC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-04-22] (Piriform Software Ltd -> Piriform)
Task: {02C7E6A6-48F2-41FF-87F2-301CBB9E915A} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [696304 2021-05-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {04C1E4A4-0111-4369-9D45-FEB7DF4D80D2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12C15D16-DDBF-4D8D-BDD4-528ADD9179CA} - System32\Tasks\ArcSoft Connect => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft, Inc. -> ArcSoft Inc.)
Task: {15D916CA-400D-4388-887E-0F1F7DFBD1AE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
Task: {1F581206-E661-4D03-8EA4-3CD1116B59A9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {29A700E5-B110-4AAD-B72D-196A33549DA4} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B9C48A9-3426-4D81-9291-13C462FA7FE3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28082760 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3DB9A334-A213-4BD0-A2BE-E667A6887160} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-02] (Google LLC -> Google LLC)
Task: {3E882EC5-708F-446F-873B-D45B5C43BBE5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-05-01] (Avast Software s.r.o. -> Avast Software)
Task: {3F7930AE-91E0-4270-8461-816EDE3C39A0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
Task: {43065BE3-9B26-4F2D-A661-C05A70582463} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4CEFEC0B-9C9D-41F1-AE2A-770733BA34D8} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {524A143C-0428-4DCC-9BD1-25F7ABDA4A97} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {540A549A-18A4-467E-A4FE-916B98AB4549} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5E3ECA61-3041-498E-8732-7C7BD407A0C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {60632300-0210-4772-8DA7-56C199E37ADA} - System32\Tasks\Programme de mise à jour en ligne de Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {6421113A-3679-4DB2-8EC4-99121F96CBFC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66AF4729-3DFA-4DD3-94AB-AEC5617259F3} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960448 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {864BE7B9-BC56-4421-BCAE-1E0066F57057} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {8FC89D0E-2337-4908-92A6-F41BA2A852C1} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {A1DFB7C0-7A0A-4BBE-8041-D263ED89277A} - System32\Tasks\HPCustParticipation HP ENVY 5640 series => C:\Program Files\HP\HP ENVY 5640 series\Bin\HPCustPartic.exe [6438536 2017-05-23] (Hewlett Packard -> HP Inc.)
Task: {A2B510B6-978F-4C11-A804-99AEE89FD140} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {AA78D079-AAD1-4801-92DD-9AEDCECE2147} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE0BE9BD-0B97-46B1-A074-232DA0F4179F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B3D68672-31A6-4602-90FE-6D2571BEB28A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B41D1C56-164B-4FD6-B17D-F8F534718467} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAB09838-EC1D-414C-8EF2-A684A00B027B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {C553B4B3-791F-41CD-9F7D-286FE781F206} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
Task: {CCBF6B3A-4C57-40AC-A868-EDE95FC14516} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {D44E91C5-221C-4A39-816B-F48592A6FDEB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-02] (Google LLC -> Google LLC)
Task: {DA6E1316-2C92-4075-99E5-06130B7E5798} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {E445B313-88CF-498B-9E6A-1CA411F9D76F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EE61F775-B2A9-4368-95B0-85FC863916F4} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {F7AAD64C-D44B-45B1-BE0F-657E9F4F6643} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{1ffe85a9-7573-4d13-ba65-1bd83104b500}: [DhcpNameServer] 192.168.10.110
Tcpip\..\Interfaces\{41cb5b4b-0af8-4e42-978c-f408d10b5c74}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{7f166a57-dcf2-42a9-8e12-4afdfc020c9b}: [DhcpNameServer] 172.20.10.1
Edge:
=======
DownloadDir: C:\Users\yves\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\yves\AppData\Local\Microsoft\Edge\User Data\Default [2021-05-16]
Edge StartupUrls: Default -> "hxxp://yahoo.fr/"
Edge DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search{google:pathWildcard}?ei={inputEncoding}&fr=crmas&p={searchTerms}
Edge DefaultSearchKeyword: Default -> fr.yahoo.com
Edge DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
FireFox:
========
FF DefaultProfile: 2auoa59h.default-1552346326434
FF ProfilePath: C:\Users\yves\AppData\Roaming\Mozilla\Firefox\Profiles\2auoa59h.default-1552346326434 [2021-05-16]
FF Homepage: Mozilla\Firefox\Profiles\2auoa59h.default-1552346326434 -> hxxps://fr.yahoo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-04-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3824958484-2069351139-209342545-1000: SkypeForBusinessPlugin-16.2 -> C:\Users\yves\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3824958484-2069351139-209342545-1000: SkypeForBusinessPlugin64-16.2 -> C:\Users\yves\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default [2021-05-16]
CHR Extension: (Slides) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-03-02]
CHR Extension: (Docs) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-03-02]
CHR Extension: (Google Drive) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-03-02]
CHR Extension: (YouTube) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-03-02]
CHR Extension: (Sheets) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-03-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-02]
CHR Extension: (Gmail) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-03-02]
CHR Extension: (Chrome Media Router) - C:\Users\yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-14]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S2 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-03-16] (Apple Inc. -> Apple Inc.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [48640 2015-05-29] () [Fichier non signé]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-02-10] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44272 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [69632 2009-10-06] () [Fichier non signé]
S3 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [400864 2013-04-15] (Elgato Systems -> Elgato Systems GmbH)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 MajIndexEducationService; C:\Program Files (x86)\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe [3241064 2019-07-30] (INDEX EDUCATION SASU -> Index Education)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-05-27] (Malwarebytes Inc -> Malwarebytes)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-08-02] (Martin Malik - REALiX -> REALiX(tm))
S3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-10-23] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 johci; C:\WINDOWS\System32\drivers\johci.sys [26208 2020-05-24] (JMicron Technology Corp. -> JMicron Technology Corp.)
R3 L1E; C:\WINDOWS\System32\drivers\L1E62x64.sys [59904 2019-12-07] (Microsoft Windows -> Atheros Communications, Inc.)
S3 LVPr2M64; C:\WINDOWS\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] (Logitech Inc -> )
S3 LVPr2Mon; C:\WINDOWS\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] (Logitech Inc -> )
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-05-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2016-10-02] (ASUSTeK Computer Inc. -> )
R3 PdiPorts; C:\WINDOWS\System32\drivers\PdiPorts.sys [19248 2006-11-16] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-05-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [421112 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
S3 ohci1394; \SystemRoot\System32\drivers\ohci1394.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-05-16 18:20 - 2021-05-16 18:20 - 000002775 _____ C:\Users\yves\Desktop\AdwCleaner[C00].txt
2021-05-16 18:15 - 2021-05-16 18:19 - 000000000 ____D C:\AdwCleaner
2021-05-16 18:13 - 2021-05-16 18:13 - 008534696 _____ (Malwarebytes) C:\Users\yves\Desktop\adwcleaner_8.2.exe
2021-05-16 17:27 - 2021-05-16 17:27 - 003327128 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPCleaner.exe
2021-05-15 22:03 - 2021-05-15 22:03 - 000300021 _____ C:\Users\yves\Desktop\Shortcut.txt
2021-05-15 21:58 - 2021-05-15 22:03 - 000053603 _____ C:\Users\yves\Desktop\Addition.txt
2021-05-15 21:47 - 2021-05-16 20:50 - 000025967 _____ C:\Users\yves\Desktop\FRST.txt
2021-05-15 21:46 - 2021-05-16 20:49 - 000000000 ____D C:\FRST
2021-05-15 21:43 - 2021-05-15 21:43 - 002299392 _____ (Farbar) C:\Users\yves\Desktop\FRST64.exe
2021-05-15 21:34 - 2021-05-16 20:42 - 000213943 _____ C:\Users\yves\Desktop\ZHPDiag.txt
2021-05-15 21:13 - 2021-05-15 21:13 - 000000901 _____ C:\Users\yves\Desktop\ZHPSuite.lnk
2021-05-15 21:12 - 2021-05-16 17:31 - 000000000 ____D C:\Users\yves\AppData\Local\ZHP
2021-05-15 21:08 - 2021-05-15 21:09 - 003469464 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPSuite.exe
2021-05-15 20:14 - 2021-05-15 20:14 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-05-15 20:14 - 2021-05-15 20:14 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-05-15 20:14 - 2021-05-15 20:14 - 000153600 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2021-05-15 20:13 - 2021-05-15 20:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-05-15 20:13 - 2021-05-15 20:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-05-15 20:13 - 2021-05-15 20:13 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-05-15 20:13 - 2021-05-15 20:13 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-05-15 20:13 - 2021-05-15 20:13 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-05-15 20:12 - 2021-05-15 20:12 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-05-15 20:10 - 2021-05-15 20:10 - 001823816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-05-15 20:10 - 2021-05-15 20:10 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-05-15 20:10 - 2021-05-15 20:10 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-05-15 20:08 - 2021-05-15 20:08 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-05-15 20:07 - 2021-05-15 20:07 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-05-15 19:56 - 2021-05-15 19:56 - 000033530 _____ C:\Users\yves\Documents\cc_20210515_195601.reg
2021-05-15 19:28 - 2021-05-15 19:28 - 031412280 _____ (Piriform Software Ltd) C:\Users\yves\Downloads\ccsetup579.exe
2021-05-15 19:26 - 2021-05-15 19:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-05-15 15:32 - 2021-05-15 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000044272 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-05-02 13:18 - 2021-05-02 13:18 - 003113626 _____ C:\Users\yves\Documents\JEAN OURY Transpassible.pdf
2021-05-02 13:17 - 2021-05-02 13:17 - 003109959 _____ C:\Users\yves\Documents\Scan_0046.pdf
2021-05-02 13:09 - 2021-05-02 13:09 - 001680211 _____ C:\Users\yves\Documents\JEAN OURY LE DIRE A Quelle heure passe le train.pdf
2021-05-02 13:07 - 2021-05-02 13:07 - 001676315 _____ C:\Users\yves\Documents\Scan_0045.pdf
2021-05-02 13:04 - 2021-05-02 13:04 - 000542978 _____ C:\Users\yves\Documents\Scan_0044.pdf
2021-05-01 18:50 - 2021-05-01 18:50 - 000566173 _____ C:\Users\yves\Desktop\Psychose diagnostic CAIRN.pdf
2021-04-24 14:34 - 2021-04-24 14:34 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2021-04-24 14:34 - 2021-04-24 14:34 - 000001816 _____ C:\ProgramData\Desktop\iTunes.lnk
2021-04-24 14:34 - 2021-04-24 14:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2021-04-24 14:32 - 2021-04-24 14:34 - 000000000 ____D C:\Program Files\iTunes
2021-04-15 08:42 - 2021-04-15 08:42 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-12 07:32 - 2021-04-12 07:32 - 000094001 _____ C:\Users\yves\Downloads\aide garde année 2021 YG.xlsx
2021-04-11 21:21 - 2021-04-11 21:21 - 000109508 _____ C:\Users\yves\Downloads\Curriculum Vitae.pdf
2021-04-11 20:53 - 2021-04-11 20:53 - 000383198 _____ C:\Users\yves\Downloads\Recommandations SFMU 31 mars 2021 PEC patient adulte à présentation psy structure urgence.pdf
2021-04-11 20:42 - 2021-04-11 20:48 - 000000000 ____D C:\Users\yves\Documents\CREDIT AGRICOLE
2021-04-10 09:10 - 2021-04-10 09:10 - 000793482 _____ C:\Users\yves\Documents\VACCIN COVID19.pdf
2021-03-26 09:02 - 2021-03-26 09:02 - 000016042 _____ C:\Users\yves\Desktop\Copie de 1-Tableau des actions PTSM13.xlsx
2021-03-24 09:21 - 2021-03-24 09:21 - 000302843 _____ C:\Users\yves\Downloads\++_Connexion_Teams_Séance_plénière_conférence_24_mars_2021_++.zip
2021-03-24 08:25 - 2021-03-24 08:25 - 000535922 _____ C:\Users\yves\Downloads\archive(4).zip
2021-03-21 22:04 - 2021-03-21 22:04 - 001799401 _____ C:\Users\yves\Documents\GARANT ELI 2021.pdf
2021-03-21 22:03 - 2021-03-21 22:03 - 001795656 _____ C:\Users\yves\Documents\Scan_0043.pdf
2021-03-17 10:47 - 2021-03-17 10:47 - 000130827 _____ C:\Users\yves\Downloads\CV Dr SLIMANOU Rachida.pdf
2021-03-17 10:47 - 2021-03-17 10:47 - 000052320 _____ C:\Users\yves\Downloads\SLIMANOU Rachida Dr Conseil National de l'Ordre des Médecins.pdf
2021-03-17 10:35 - 2021-03-17 10:35 - 001235328 _____ C:\Users\yves\Documents\LIVRET A FABIENNE 2021.pdf
2021-03-15 21:25 - 2021-03-16 00:02 - 001287032 _____ C:\Users\yves\Desktop\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pdf
2021-03-15 21:23 - 2021-03-16 00:02 - 000158653 _____ C:\Users\yves\Desktop\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pptx
2021-03-15 21:22 - 2021-03-15 21:22 - 000158551 _____ C:\Users\yves\Documents\CONGRES ADDICTIONS TROUBLES PSY PARIS MARS 2021.pptx
2021-03-14 09:58 - 2021-03-14 18:22 - 000158006 _____ C:\Users\yves\Documents\CONGRES ADDICTION PARIS 2021.pptx
2021-03-14 09:21 - 2021-03-14 18:18 - 000000000 ____D C:\Users\yves\Documents\FORMATION LARAGNE III2020
2021-03-12 19:01 - 2021-03-12 19:01 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-03-12 19:00 - 2021-03-12 19:00 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-12 18:59 - 2021-03-12 18:59 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-12 18:59 - 2021-03-12 18:59 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-09 11:49 - 2021-03-09 11:49 - 002735200 _____ (StarLeaf Ltd.) C:\Users\yves\Downloads\StarLeaf Launcher - tjN7-dv8.exe
2021-03-09 01:14 - 2021-03-09 01:14 - 000127739 _____ C:\Users\yves\Downloads\Motion definitive DPI CME 16 février 2021.pdf
2021-03-08 23:42 - 2021-03-09 00:10 - 000392404 _____ C:\Users\yves\Desktop\PASSAGE A L ACTE.pdf
2021-03-03 10:31 - 2021-01-17 19:56 - 001925005 _____ C:\Users\yves\Documents\INCURIE LOGEMENT.pdf
2021-03-03 10:31 - 2017-12-03 15:07 - 000516958 _____ C:\Users\yves\Documents\JLD ARTICLE 2017.pdf
2021-03-03 10:30 - 2021-01-26 00:04 - 000415108 _____ C:\Users\yves\Documents\LE CONCEPT DE POTENTIALITE PSYCHOTIQUE.pdf
2021-03-03 10:28 - 2020-01-21 09:57 - 000348906 _____ C:\Users\yves\Documents\SUIVI INTENSIF A DOMICILE 2020.pdf
2021-03-03 10:28 - 2019-04-28 18:12 - 000314447 _____ C:\Users\yves\Documents\Résumé Livre Prof Dia.pdf
2021-03-03 10:27 - 2019-09-30 17:40 - 000908674 _____ C:\Users\yves\Documents\RETABLISSEMENT.pdf
2021-03-03 10:26 - 2019-04-28 10:47 - 000104739 _____ C:\Users\yves\Documents\Psychiatrie de liaison.pdf
2021-03-03 10:25 - 2019-04-28 11:52 - 000079094 _____ C:\Users\yves\Documents\PSYCHIATRIE DE LIAISON DIAPO.pptx
2021-03-03 10:24 - 2019-01-24 22:32 - 000088531 _____ C:\Users\yves\Documents\PRELEVEMENT LOYER GARAGE.pdf
2021-03-03 10:24 - 2018-11-04 16:55 - 000079203 _____ C:\Users\yves\Documents\PRESCRIRE A TOUT PRIX PRESCRIRE A QUEL PRIX.pptx
2021-03-03 10:24 - 2018-03-22 18:53 - 000071506 _____ C:\Users\yves\Documents\Prescrire, entre technicité et acte de langage NOIR.pptx
2021-03-03 10:23 - 2020-12-16 10:55 - 000145263 _____ C:\Users\yves\Documents\Présentation DR MULLER MME FINKELSTEIN 15122020 CH E T Marseille V2.pptx
2021-03-03 10:23 - 2018-11-04 12:48 - 000079159 _____ C:\Users\yves\Documents\Prescrire, entre technicité et acte de langage.pptx
2021-03-03 10:22 - 2020-02-12 01:25 - 000227840 _____ C:\Users\yves\Documents\PROJET MEDICAL CME avril DIAPO 2016-2020.ppt
2021-03-03 10:21 - 2021-03-09 09:27 - 011281757 _____ C:\Users\yves\Desktop\Passage13.pptx
2021-03-02 18:29 - 2021-05-15 16:57 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-02 18:29 - 2021-05-15 16:57 - 000002204 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-03-02 18:29 - 2021-05-15 16:57 - 000002204 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-02 18:29 - 2021-03-02 18:29 - 000000000 ____D C:\Program Files\Google
2021-03-02 18:28 - 2021-04-23 07:30 - 000003588 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-02 18:28 - 2021-04-23 07:30 - 000003464 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-02 18:28 - 2021-03-02 18:28 - 000000000 ____D C:\Program Files (x86)\Google
2021-03-02 18:27 - 2021-03-03 11:03 - 000000000 ____D C:\Users\yves\AppData\Local\Google
2021-03-02 18:27 - 2021-03-02 18:27 - 001304160 _____ (Google LLC) C:\Users\yves\Downloads\ChromeSetup.exe
2021-02-28 21:39 - 2021-02-28 21:39 - 000033715 _____ C:\Users\yves\Documents\FACTURE HOPITAL NORD 2021.pdf
2021-02-28 15:49 - 2021-02-28 15:53 - 000356718 _____ C:\Users\yves\Documents\A FORMATION ADDICTION LARAGNE2020.pptx
2021-02-26 12:23 - 2021-02-26 12:23 - 000064451 _____ C:\Users\yves\Downloads\RE__Bilan_(ARS)___GJ.zip
2021-02-26 11:04 - 2021-02-26 11:04 - 000227528 _____ C:\Users\yves\Downloads\ARGUMENTAIRE_SISM2021_VF.pdf
2021-02-21 21:28 - 2021-02-21 21:28 - 000001779 _____ C:\Users\yves\Desktop\COLLOUE ADDICTION PARIS 2021.pptx - Raccourci.lnk
2021-02-21 21:27 - 2021-03-13 21:59 - 000090183 _____ C:\Users\yves\Documents\COLLOUE ADDICTION PARIS 2021.pptx
2021-02-18 02:27 - 2021-02-18 02:27 - 000004096 ____H C:\Users\yves\AppData\Local\keyfile3.drm
2021-02-17 23:50 - 2021-02-18 02:24 - 000000000 ____D C:\Users\yves\Desktop\ARS PREVENTION 2021
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-05-16 20:48 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-05-16 20:47 - 2016-11-21 15:23 - 000000000 ____D C:\Users\yves\AppData\LocalLow\Mozilla
2021-05-16 20:47 - 2012-08-25 14:19 - 000000000 ____D C:\ProgramData\Mozilla
2021-05-16 20:42 - 2016-05-10 01:05 - 000000000 ____D C:\Users\yves\AppData\Roaming\ZHP
2021-05-16 20:28 - 2020-08-27 22:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-05-16 19:33 - 2016-10-06 17:55 - 000000000 ____D C:\Program Files\CCleaner
2021-05-16 18:51 - 2020-05-27 23:12 - 000000000 ____D C:\Users\yves\AppData\LocalLow\IGDump
2021-05-16 18:27 - 2017-08-27 17:32 - 000000000 ____D C:\ProgramData\NVIDIA
2021-05-16 18:26 - 2020-08-27 22:35 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-05-16 18:26 - 2020-08-27 22:04 - 000008192 ___SH C:\DumpStack.log.tmp
2021-05-16 18:25 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-05-16 18:19 - 2018-12-14 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2021-05-16 18:19 - 2018-12-14 23:33 - 000000000 ____D C:\Users\yves\AppData\Roaming\Samsung
2021-05-16 18:19 - 2018-12-14 23:32 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-05-16 18:19 - 2016-05-05 08:25 - 000000000 ____D C:\Users\yves\AppData\Local\CrashDumps
2021-05-16 18:19 - 2016-05-01 17:51 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-05-16 18:03 - 2015-11-03 21:28 - 000000000 ____D C:\Program Files (x86)\Adobe
2021-05-16 18:01 - 2020-08-27 22:29 - 002005062 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-05-16 18:01 - 2019-12-07 16:50 - 000865430 _____ C:\WINDOWS\system32\perfh00C.dat
2021-05-16 18:01 - 2019-12-07 16:50 - 000177780 _____ C:\WINDOWS\system32\perfc00C.dat
2021-05-16 18:01 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-05-15 22:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-05-15 22:55 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-05-15 22:54 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-05-15 22:54 - 2018-05-21 17:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-05-15 22:42 - 2020-08-27 22:04 - 000447560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-05-15 22:40 - 2019-08-22 13:59 - 000001210 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-05-15 22:40 - 2019-08-22 13:59 - 000001206 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2021-05-15 22:40 - 2019-04-14 10:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-05-15 22:36 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-05-15 22:36 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-05-15 22:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-05-15 20:56 - 2018-01-23 02:34 - 000000000 ____D C:\Users\yves\AppData\Local\Packages
2021-05-15 20:38 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-05-15 20:37 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-05-15 19:30 - 2020-08-27 22:35 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-05-15 19:30 - 2016-10-06 17:55 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-05-15 19:30 - 2016-10-06 17:55 - 000000863 _____ C:\ProgramData\Desktop\CCleaner.lnk
2021-05-15 19:26 - 2016-02-16 23:39 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-05-15 18:16 - 2013-08-15 10:43 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-05-15 18:12 - 2010-02-08 22:03 - 132732536 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-05-15 16:46 - 2020-08-27 22:35 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3824958484-2069351139-209342545-1000
2021-05-15 16:46 - 2020-08-27 13:54 - 000002435 _____ C:\Users\yves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-05-15 16:46 - 2016-07-23 08:26 - 000000000 ___RD C:\Users\yves\OneDrive
2021-05-15 16:22 - 2017-04-17 18:06 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-05-15 15:50 - 2020-06-24 12:53 - 000002280 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-05-15 15:35 - 2019-02-10 20:59 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-05-05 07:24 - 2020-08-27 22:35 - 000004270 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-05-05 07:24 - 2020-08-27 22:35 - 000004038 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2021-05-02 12:52 - 2021-01-24 15:59 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-05-01 18:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-04-27 07:10 - 2020-08-27 22:35 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-27 07:10 - 2020-08-27 22:35 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2016-07-22 00:23 - 2016-07-22 00:23 - 002230272 _____ () C:\Users\yves\ZHPDiag3.exe
2018-05-20 22:50 - 2018-05-20 22:50 - 000000268 ____H () C:\Users\yves\AppData\Roaming\Tuner
2018-05-20 22:46 - 2018-05-20 22:46 - 000000000 _____ () C:\Users\yves\AppData\Roaming\URLs
2018-05-20 22:50 - 2018-05-20 22:50 - 000000268 ____H () C:\Users\yves\AppData\Roaming\User Loops
2010-04-19 18:24 - 2010-04-19 18:24 - 000033134 _____ () C:\Users\yves\AppData\Roaming\UserTile.png
2010-02-16 23:54 - 2010-02-17 01:18 - 000021891 _____ () C:\Users\yves\AppData\Roaming\Valeurs séparées par des virgules (Windows).ADR
2014-05-11 19:10 - 2019-03-24 17:24 - 000007680 _____ () C:\Users\yves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-02-18 02:27 - 2021-02-18 02:27 - 000004096 ____H () C:\Users\yves\AppData\Local\keyfile3.drm
==================== SigCheckExt =========================
2006-12-02 00:37 - 2006-12-02 00:37 - 000904704 _____ (Microsoft Corporation) C:\msdia80.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:32 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:35 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 22:31 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-07-10 05:30 - 2015-07-10 05:30 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2015-07-10 05:30 - 2015-07-10 05:30 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-04-17 18:45 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 003447296 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPScanTRDrvWn8.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 000303616 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPWia2DrvRootWn8.dll
2017-05-13 15:44 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2016-06-19 18:51 - 2016-05-20 23:07 - 001359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll
2012-09-26 00:32 - 2012-08-21 23:01 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\OxpsConverter.exe
2014-12-20 16:42 - 2018-10-06 22:18 - 000117248 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2015-03-05 00:52 - 2015-01-09 05:14 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\powertracker.dll
2011-06-25 16:27 - 2010-11-20 15:25 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushPrinterConnections.exe
2016-02-15 13:14 - 2015-12-20 20:50 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpGroupPolicyExtension.dll
2012-06-23 17:26 - 2012-04-26 07:34 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrmemptylst.exe
2015-07-10 05:35 - 2015-07-10 05:35 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeSubscription.exe
2015-09-10 23:54 - 2015-07-22 18:48 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2012-11-17 20:20 - 2012-07-26 04:36 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wdfres.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2016-03-08 22:52 - 2016-02-12 20:18 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2010-02-15 19:50 - 2009-07-11 19:10 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\atl80.dll
2009-01-05 15:44 - 2009-01-05 15:44 - 000053248 _____ C:\WINDOWS\bdoscandel.exe
2010-02-15 19:50 - 2001-06-01 10:26 - 000372736 _____ (Intel Corporation) C:\WINDOWS\ijl15.dll
2012-01-14 23:43 - 1998-07-30 13:51 - 000305152 _____ (InstallShield Software Corporation) C:\WINDOWS\IsUninst.exe
2010-02-15 19:50 - 2002-01-05 06:48 - 000974848 _____ (Microsoft Corporation) C:\WINDOWS\mfc70.dll
2010-02-15 19:50 - 2009-07-11 20:46 - 001105920 _____ (Microsoft Corporation) C:\WINDOWS\mfc80.dll
2010-02-15 19:50 - 2009-07-11 20:46 - 001093120 _____ (Microsoft Corporation) C:\WINDOWS\mfc80u.dll
2010-02-15 19:50 - 2009-07-12 01:56 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\mfcm80.dll
2010-02-15 19:50 - 2009-07-12 01:55 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\mfcm80u.dll
2010-02-15 19:50 - 2004-08-04 02:56 - 001392671 _____ (Microsoft Corporation) C:\WINDOWS\msvbvm60.dll
2010-02-15 19:50 - 2009-07-12 01:55 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\msvcm80.dll
2010-02-15 19:50 - 2002-01-05 05:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\msvcp70.dll
2010-02-15 19:50 - 2002-01-05 05:37 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\msvcr70.dll
2011-12-12 00:43 - 2008-04-27 22:28 - 000962560 _____ C:\WINDOWS\tesseract.exe
2016-05-14 01:14 - 2016-05-14 01:11 - 000024064 _____ C:\WINDOWS\zoek-delete.exe
2013-02-27 19:40 - 2013-01-13 23:16 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:12 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:17 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 19:40 - 2013-01-13 23:11 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2015-05-29 10:28 - 2015-05-29 10:28 - 000048640 _____ C:\WINDOWS\SysWOW64\ASGT.exe
2014-05-11 17:09 - 2018-05-20 22:51 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ATL71.DLL
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2010-02-03 18:43 - 2009-06-16 06:05 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2015-07-10 05:40 - 2015-07-10 05:40 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2017-03-16 22:51 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-07-16 13:44 - 2016-07-17 00:46 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2013-11-21 01:05 - 2013-11-21 01:05 - 000645120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsIntl.dll
1999-03-15 13:52 - 1999-03-15 13:52 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42FRA.DLL
2013-08-17 22:14 - 2013-08-17 22:14 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2014-05-01 18:58 - 2012-10-18 20:55 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHS.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHT.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71DEU.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ENU.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ESP.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71FRA.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ITA.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71JPN.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71KOR.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71u.dll
2016-06-19 18:51 - 2016-05-20 23:07 - 001155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmlmedia.dll
1999-04-06 18:06 - 1999-04-06 18:06 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPRPFR.DLL
2000-05-11 14:06 - 2000-05-11 14:06 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSRDO20.DLL
1998-08-09 20:07 - 1998-08-09 20:07 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTKPRP.DLL
2014-05-01 18:58 - 2012-10-18 20:55 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2013-08-17 22:14 - 2013-08-17 22:14 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2008-08-25 17:17 - 2008-08-25 17:17 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2008-08-25 17:17 - 2008-08-25 17:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2011-06-25 16:31 - 2009-07-14 03:16 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pmcsnap.dll
2011-06-25 16:31 - 2009-07-14 03:16 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ppcsnap.dll
2011-06-25 16:31 - 2010-11-20 14:17 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PushPrinterConnections.exe
2011-12-12 00:43 - 2009-10-29 05:46 - 001883136 _____ (Debenu Pty Ltd) C:\WINDOWS\SysWOW64\QuickPDFAX0717.dll
2000-04-03 18:52 - 2000-04-03 18:52 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RDOCURS.DLL
2014-09-25 21:18 - 2012-08-23 13:12 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpendp_winip.dll
2006-10-26 13:45 - 2006-10-26 13:45 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WISPTIS.EXE
2016-07-22 00:23 - 2016-07-22 00:23 - 002230272 _____ C:\Users\yves\ZHPDiag3.exe
2021-05-15 21:43 - 2021-05-15 21:43 - 002299392 _____ (Farbar) C:\Users\yves\Desktop\FRST64.exe
2021-05-16 17:27 - 2021-05-16 17:27 - 003327128 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPCleaner.exe
2021-05-15 21:08 - 2021-05-15 21:09 - 003469464 _____ (Nicolas Coolman) C:\Users\yves\Desktop\ZHPSuite.exe
2018-02-04 17:23 - 2018-02-04 17:23 - 004179293 _____ (Lavalys, Inc. ) C:\Users\yves\Downloads\everesthome220.exe
2011-12-12 00:41 - 2011-12-12 00:41 - 000159757 _____ (Free OCR) C:\Users\yves\Downloads\freeocr.exe
2013-10-01 23:10 - 2013-10-01 23:16 - 023173327 _____ (Realtek Semiconductor Corp.) C:\Users\yves\Downloads\HDMI_R270.exe
2012-01-14 23:42 - 2012-01-14 23:42 - 004469078 _____ (Plustech Inc.) C:\Users\yves\Downloads\IPChanger20Eng.exe
2013-02-27 23:55 - 2013-02-27 23:56 - 063273522 _____ (Stellarium team ) C:\Users\yves\Downloads\stellarium-0.12.0-win64.exe
2013-02-28 00:01 - 2013-02-28 00:02 - 060974528 _____ (Stellarium team ) C:\Users\yves\Downloads\stellarium_stellarium_0.12_32_bits_anglais_18474.exe
2018-02-04 15:04 - 2018-02-04 15:04 - 000045056 _____ C:\Users\yves\Downloads\winaskey (1).exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {62bce062-c9dd-11e9-bef5-f6517e4835dd}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {195d97bd-50a2-11e6-8217-d47f63ed64d0}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{195d97be-50a2-11e6-8217-d47f63ed64d0}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride Recovery
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{195d97be-50a2-11e6-8217-d47f63ed64d0}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {62bce065-c9dd-11e9-bef5-f6517e4835dd}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {62bce062-c9dd-11e9-bef5-f6517e4835dd}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {62bce065-c9dd-11e9-bef5-f6517e4835dd}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{62bce066-c9dd-11e9-bef5-f6517e4835dd}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{62bce066-c9dd-11e9-bef5-f6517e4835dd}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {b106327d-10e1-11df-ba7b-a16e7dd984be}
device ramdisk=[C:]\Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\Winre.wim,{b106327e-10e1-11df-ba7b-a16e7dd984be}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\Winre.wim,{b106327e-10e1-11df-ba7b-a16e7dd984be}
systemroot \windows
nx OptIn
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {62bce062-c9dd-11e9-bef5-f6517e4835dd}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {62bce065-c9dd-11e9-bef5-f6517e4835dd}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {62bce066-c9dd-11e9-bef5-f6517e4835dd}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {b106327e-10e1-11df-ba7b-a16e7dd984be}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\b106327d-10e1-11df-ba7b-a16e7dd984be\boot.sdi
==================== Fin de FRST.txt ========================