Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2021
Exécuté par Marc (administrateur) sur MARCPC (25-06-2021 13:14:01)
Exécuté depuis C:\Users\Marc\Desktop
Profils chargés: Marc
Platform: Windows 10 Pro Version 20H2 19042.1052 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\AdguardSvc.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\protectedservice.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicatorCom.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_778512ee63a728ec\RstMwService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2011.11613.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe <2>
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.Service.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.ShadowsocksService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(voidtools -> ) C:\Program Files (x86)\Everything\Everything.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [706192 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [AppManHelper] => C:\Program Files (x86)\Avid\Application Manager\AvidAppManHelper.exe [617984 2015-06-09] (Avid Technology, Inc.) [Fichier non signé]
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1710880 2019-01-26] (voidtools -> )
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [34508416 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Surfshark] => C:\Program Files (x86)\Surfshark\Surfshark.exe [5839160 2021-05-26] (Surfshark Ltd. -> Surfshark)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [SuuntolinkLauncher] => C:\Users\Marc\AppData\Local\Suuntolink\app-3.6.1\resources\app\LaunchAgents\SuuntolinkLauncher.exe [831832 2021-06-13] (Suunto Oy -> )
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [BackupOutlook] => C:\Program Files (x86)\Wisco\BackupOutlook\BackupOutlook.exe [3717232 2013-08-30] (Wisco Computerservice -> Wisco)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [HP Officejet 6500 E710a-f (NET)] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Amazon Photos] => C:\Users\Marc\AppData\Local\Amazon Drive\AmazonPhotos.exe [10182800 2021-05-10] (Amazon.com Services LLC -> Amazon.com Inc.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [5759392 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\MountPoints2: {1984c9fc-1214-11ea-9202-8c89a57f8209} - "F:\LaunchU3.exe"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [224768 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP 5512 Status Monitor: C:\WINDOWS\system32\hpinksts5512LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710a-f): C:\WINDOWS\system32\HPDiscoPM5512.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710n-z): C:\WINDOWS\system32\HPDiscoPM5412.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PDF Architect 7 Monitor: C:\Windows\system32\spool\DRIVERS\x64\pdf architect_pdfpmon_v.4.12.26.3.dll [932984 2020-09-25] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [116736 2019-11-28] (pdfforge GmbH) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.114\Installer\chrmstp.exe [2021-06-20] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-01-13]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avid Application Manager.lnk [2019-11-28]
ShortcutTarget: Avid Application Manager.lnk -> C:\Windows\Installer\{A59C0B17-6673-46E6-9E00-BB25E755A299}\NewShortcut1_E1E0FF1FC1474601A40EFEF248F11D43.exe (Flexera Software LLC) [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Philips GoGear SA4RGA Device Manager.lnk [2020-01-27]
ShortcutTarget: Philips GoGear SA4RGA Device Manager.lnk -> C:\Program Files (x86)\Philips\GoGear SA4RGA Device Manager\GoGear_SA4RGA_DeviceManager.exe (Koninklijke Philips Electronics N.V. -> Philips)
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f (réseau).lnk [2021-06-25]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f (réseau).lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet 6500 E710a-f\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN15V321HK05JZ;CONNECTION=NW;MONITOR=1;
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f.lnk [2020-12-31]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet 6500 E710a-f\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN15V321HK05JZ;CONNECTION=USB;MONITOR=1;
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-01-16]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0ACB176E-3A64-4A16-8898-4D07BD8F47E0} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1910128 2020-10-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D801D59-DB74-4D2D-B523-A2362ACE907A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {132B710A-649E-4037-9124-0CBDBED161D2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-28] (Google Inc -> Google Inc.)
Task: {21614497-7B02-47D2-848C-5051037B15B5} - \Microsoft_Hardware_Launch_itype_exe -> Pas de fichier <==== ATTENTION
Task: {23B6E137-327C-4EE1-B8A9-8288463B61B1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2DDBC3B4-5F77-44B6-8C54-824935CF40D7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {2DDE6448-5E57-4082-9CD4-EA6074CA81A8} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2434424 2020-10-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {345CC112-3840-4117-BB96-B239C667C584} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [903520 2019-02-13] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {4D999E7E-7955-4DB5-9508-14E61C40232C} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [230632 2020-11-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {4FC9FC27-6EFB-49F1-9418-0EE920927ED8} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2651216 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {56B3213F-4C05-414C-B671-EB55852E8798} - \Microsoft_Hardware_Launch_mousekeyboardcenter_exe -> Pas de fichier <==== ATTENTION
Task: {6100DADF-99D8-409B-A375-1B373E88832C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {69AA70CF-3429-47FB-89AC-4BE9A88E3BB9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {7701B4DA-5FE7-4DF8-BA96-CF7C8B97A025} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [6174816 2016-01-07] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {8948AC57-8DD4-4BFA-88EF-7F73970A69B7} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {89B792F6-CE88-4243-A896-59AFF3D13F49} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-28] (Google Inc -> Google Inc.)
Task: {A731DF77-B567-4A4D-9305-026D07A36F48} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [30106496 2020-10-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {AA063379-F6E2-4156-A747-799ACD3933CF} - \Microsoft_Hardware_Launch_ipoint_exe -> Pas de fichier <==== ATTENTION
Task: {B9B6FB4B-6273-4D88-A525-9B158035E27D} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [32624 2020-10-22] (Microsoft Corporation -> Microsoft)
Task: {E0C3A646-57DB-4950-9D78-07D8EFABC78C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-26] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
ProxyEnable: [.DEFAULT] => Proxy est activé.
ProxyServer: [.DEFAULT] => 127.0.0.1:1080
Tcpip\..\Interfaces\{253ecd10-36de-4203-93e2-85d434af57de}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ba6550ed-fa36-4115-bad9-e749131d41e5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d83b20ac-2956-4dbb-8956-75ebb2b819e9}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{F1011590-B729-4830-880A-4F5D8E9A2750}: [NameServer] 162.252.172.57 149.154.159.92
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Marc\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-25]
FireFox:
========
FF DefaultProfile: 4byowv6t.default
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default [2021-06-25]
FF DownloadDir: H:\Reception
FF Notifications: Mozilla\Firefox\Profiles\4byowv6t.default -> hxxps://www.tameteo.com; hxxps://messages.google.com; hxxps://www.musicdiffusion.com; hxxps://www.facebook.com
FF Extension: (Avira Browser Safety) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\abs@avira.com [2019-11-28]
FF Extension: (Protection Web Avira) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\abs@avira.com.xpi [2019-11-14]
FF Extension: (AdSwap) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{4582aaa7-9688-4038-a9ef-06345fa0f400}.xpi [2019-11-13]
FF Extension: (Surfshark VPN proxy) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{732216ec-0dab-43bb-ac85-4b5e1977599d}.xpi [2019-11-05]
FF Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-09-27]
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019 [2021-06-25]
FF Notifications: Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019 -> hxxps://www.lesnumeriques.com; hxxps://www.castorama.fr; hxxps://www.medisite.fr
FF Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-16]
FF Extension: (Turbo Ad Blocker) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{c58824d6-e24f-45a6-8ddd-1bba8824656e}.xpi [2021-05-18]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-06-06]
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default [2021-06-25]
CHR Extension: (Slides) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-01-25]
CHR Extension: (Docs) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-01-25]
CHR Extension: (Google Drive) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-25]
CHR Extension: (AdGuard AdBlocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2021-06-20]
CHR Extension: (YouTube) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-01-25]
CHR Extension: (Adobe Acrobat) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-06-20]
CHR Extension: (Video Downloader professional) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2021-06-20]
CHR Extension: (Sheets) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-01-25]
CHR Extension: (Google Docs hors connexion) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-23]
CHR Extension: (Eurosport Player) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\leadnpkekfeaadcgcfjkmadkblpnhlim [2021-05-13]
CHR Extension: (The Flash Video Downloader) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmieilamoollaknppoffbmdgdcolcafa [2021-06-20]
CHR Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-06-20]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-13]
CHR Extension: (Gmail) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-25]
CHR Extension: (Chrome Media Router) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-02]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-23] (Acronis International GmbH -> )
R2 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 Adguard Service; C:\Program Files (x86)\Adguard\AdguardSvc.exe [176032 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-26] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-04-16] (Acronis International GmbH -> )
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208432 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [537472 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484904 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484904 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [575776 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3743464 2021-03-09] (philandro Software GmbH -> philandro Software GmbH)
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [1097624 2021-06-25] (ASUSTeK Computer Inc. -> )
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [634768 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [383976 2021-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [246424 2020-11-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161376 2020-08-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1710880 2019-01-26] (voidtools -> )
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [285192 2020-10-28] (HP Inc. -> HP Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-06-24] (Malwarebytes Inc -> Malwarebytes)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393304 2021-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R2 Surfshark Service; C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe [440120 2020-06-15] (Surfshark Ltd. -> Surfshark)
R2 Surfshark Shadowsocks Service; C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe [440120 2020-06-15] (Surfshark Ltd. -> Surfshark)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [253912 2019-10-30] (Synology Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-04-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-04-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [94720 2021-02-20] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Ltd)
R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\WINDOWS\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [209744 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [199312 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2020-11-23] (Bitdefender SRL -> Bitdefender)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [57824 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159800 2021-04-22] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2020-12-16] (Martin Malik - REALiX -> REALiX(tm))
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-06-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-24] (Malwarebytes Inc -> Malwarebytes)
S3 MpKsl94882489; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2E824E7E-125E-4E50-A205-721E9BB59993}\MpKslDrv.sys [97528 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-09-10] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 RDID1117; C:\WINDOWS\system32\Drivers\RDWM1117.SYS [309888 2015-07-22] (Microsoft Windows Hardware Compatibility Publisher -> Roland Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SurfsharkSplitTunnelDriver; C:\Program Files (x86)\Surfshark\Resources\x64\SurfsharkSplitTunnelCalloutDriver.sys [39648 2020-12-28] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 tapsurfshark; C:\WINDOWS\System32\drivers\tapsurfshark.sys [38728 2019-05-22] (WDKTestCert Lenovo,131775874531219913 -> The OpenVPN Project)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-04-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [420072 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
R3 wintunshark; C:\WINDOWS\system32\DRIVERS\wintunshark.sys [31096 2020-09-17] (WDKTestCert nikod,132409123292239223 -> Surfshark Ltd)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-25 13:14 - 2021-06-25 13:14 - 000039014 _____ C:\Users\Marc\Desktop\FRST.txt
2021-06-25 13:13 - 2021-06-25 13:14 - 000000000 ____D C:\FRST
2021-06-25 13:04 - 2021-06-25 13:04 - 002300416 _____ (Farbar) C:\Users\Marc\Desktop\FRST64.exe
2021-06-25 11:03 - 2021-06-25 11:03 - 000000970 _____ C:\Users\Marc\Desktop\ZHPSuite (1).exe - Raccourci.lnk
2021-06-25 10:41 - 2021-06-25 10:41 - 008534696 _____ (Malwarebytes) C:\Users\Marc\Downloads\adwcleaner_8.2.exe
2021-06-24 23:42 - 2021-06-24 23:52 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-06-24 23:42 - 2021-06-24 23:42 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-06-24 23:42 - 2021-06-24 23:41 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-06-24 23:36 - 2021-06-24 23:36 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Adguard Software Ltd
2021-06-24 23:36 - 2021-06-24 23:36 - 000000000 ____D C:\Users\Marc\AppData\Local\Adguard_Software_Ltd
2021-06-24 23:23 - 2021-06-24 23:23 - 000001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2021-06-24 07:47 - 2021-06-25 11:00 - 000049044 _____ C:\Users\Marc\Desktop\ZHPFix.txt
2021-06-24 07:44 - 2021-06-25 08:56 - 000628392 _____ C:\Users\Marc\Desktop\ZHPDiag.html
2021-06-24 07:40 - 2021-06-25 11:03 - 000000904 _____ C:\Users\Marc\Desktop\ZHPSuite.lnk
2021-06-24 07:34 - 2021-06-25 08:57 - 000082316 _____ C:\Users\Marc\Desktop\ZHPDiag.txt
2021-06-22 17:44 - 2021-06-22 17:44 - 000002687 _____ C:\Users\Marc\Desktop\RouteYou.lnk
2021-06-21 19:15 - 2021-06-21 19:15 - 000000000 ____D C:\Users\Marc\AppData\Roaming\11911
2021-06-20 11:59 - 2021-06-25 13:14 - 000000000 ____D C:\ProgramData\Adguard
2021-06-20 11:59 - 2021-06-20 11:59 - 000001002 _____ C:\Users\Public\Desktop\AdGuard.lnk
2021-06-20 11:59 - 2021-06-20 11:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdGuard
2021-06-20 11:59 - 2021-06-20 11:59 - 000000000 ____D C:\Program Files (x86)\Adguard
2021-06-20 11:59 - 2021-02-20 08:59 - 000094720 _____ (Adguard Software Ltd) C:\WINDOWS\system32\Drivers\adgnetworkwfpdrv.sys
2021-06-20 09:55 - 2021-06-20 09:55 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-06-20 09:55 - 2021-06-20 09:55 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-06-20 09:55 - 2021-06-20 09:55 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2021-06-20 09:55 - 2021-06-20 09:55 - 000000000 ____D C:\Program Files (x86)\Adobe
2021-06-18 00:20 - 2021-06-18 00:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-06-17 20:14 - 2021-06-24 23:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-06-16 08:33 - 2021-06-16 08:33 - 000000322 ____H C:\WINDOWS\Tasks\Intel PTT EK Recertification.job
2021-06-09 17:06 - 2021-06-09 17:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-09 17:06 - 2021-06-09 17:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-09 17:06 - 2021-06-09 17:06 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-09 17:06 - 2021-06-09 17:06 - 001823792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-06-09 17:06 - 2021-06-09 17:06 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-09 17:06 - 2021-06-09 17:06 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-06-09 17:06 - 2021-06-09 17:06 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-09 17:06 - 2021-06-09 17:06 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-09 17:06 - 2021-06-09 17:06 - 000011353 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-06-09 17:05 - 2021-06-09 17:05 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-09 17:05 - 2021-06-09 17:05 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-06-09 17:05 - 2021-06-09 17:05 - 000097280 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-06-08 01:08 - 2021-06-18 17:09 - 000000015 _____ C:\Users\Marc\AppData\Roaming\obs-virtualcam.txt
2021-06-04 20:02 - 2021-06-05 20:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-06-03 09:43 - 2021-06-03 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Surfshark
2021-05-31 14:01 - 2021-06-02 10:00 - 000000000 ____D C:\Users\Marc\Desktop\CSAU
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-25 13:06 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-25 13:03 - 2020-11-05 04:27 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-06-25 12:03 - 2019-11-29 14:17 - 000000000 ____D C:\Users\Marc\AppData\Roaming\vlc
2021-06-25 11:08 - 2020-11-05 04:31 - 001769358 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-06-25 11:08 - 2019-12-07 16:50 - 000790592 _____ C:\WINDOWS\system32\perfh00C.dat
2021-06-25 11:08 - 2019-12-07 16:50 - 000149762 _____ C:\WINDOWS\system32\perfc00C.dat
2021-06-25 11:08 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-06-25 11:03 - 2020-11-07 02:34 - 000000000 ____D C:\Program Files\CCleaner
2021-06-25 11:03 - 2019-11-28 19:50 - 000000000 ____D C:\Users\Marc\AppData\Roaming\ZHP
2021-06-25 11:01 - 2020-12-18 17:54 - 001136496 _____ C:\WINDOWS\system32\wpbbin.exe
2021-06-25 11:01 - 2020-12-18 17:54 - 001097624 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2021-06-25 11:01 - 2020-11-05 04:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-06-25 11:01 - 2020-11-05 04:26 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-25 11:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-06-25 11:01 - 2019-11-27 19:15 - 000000000 ____D C:\ProgramData\NVIDIA
2021-06-25 11:00 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-06-25 10:56 - 2021-05-19 10:41 - 000009476 _____ C:\Users\Marc\Desktop\ZHPCleaner (R).html
2021-06-25 10:56 - 2021-05-08 19:39 - 000002728 _____ C:\Users\Marc\Desktop\ZHPCleaner (R).txt
2021-06-25 10:55 - 2021-05-19 10:39 - 000009135 _____ C:\Users\Marc\Desktop\ZHPCleaner (S).html
2021-06-25 10:55 - 2021-05-08 19:38 - 000002517 _____ C:\Users\Marc\Desktop\ZHPCleaner (S).txt
2021-06-25 10:12 - 2020-02-14 19:25 - 000000910 _____ C:\Users\Marc\Desktop\ZHPCleaner.lnk
2021-06-25 10:11 - 2019-11-27 20:25 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Mozilla
2021-06-25 09:48 - 2020-11-05 04:36 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{42B0454E-F3AA-4953-94A8-90CBAD59F792}
2021-06-25 08:44 - 2019-11-28 20:11 - 000000000 ____D C:\Users\Marc\AppData\Local\CrashDumps
2021-06-25 00:17 - 2020-06-10 11:06 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-25 00:17 - 2020-06-10 11:06 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-06-25 00:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-25 00:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-06-24 23:51 - 2021-05-21 12:14 - 000001270 _____ C:\Users\Marc\Desktop\Amazon Backup.lnk
2021-06-24 23:43 - 2021-05-21 12:12 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Amazon Cloud Drive
2021-06-24 23:42 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-24 23:42 - 2019-11-28 19:59 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-06-24 23:41 - 2019-11-28 19:59 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-06-24 23:33 - 2019-11-27 20:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-06-24 23:29 - 2021-01-19 10:14 - 000000000 ____D C:\Users\Marc\AppData\Roaming\qBittorrent
2021-06-24 23:23 - 2019-11-28 00:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2021-06-24 23:10 - 2019-11-27 20:25 - 000000000 ____D C:\ProgramData\Mozilla
2021-06-24 07:40 - 2019-11-28 19:50 - 000000000 ____D C:\Users\Marc\AppData\Local\ZHP
2021-06-23 18:33 - 2019-11-28 01:43 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Filmotech_prefs
2021-06-23 14:36 - 2019-11-28 18:35 - 000000000 ____D C:\Users\Marc\AppData\Roaming\obs-studio
2021-06-23 13:43 - 2019-11-28 01:43 - 000000000 ____D C:\Users\Marc\AppData\Roaming\CEFCache
2021-06-22 17:44 - 2021-05-13 12:31 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2021-06-21 20:05 - 2019-11-28 01:39 - 000000000 ____D C:\Users\Marc\AppData\Roaming\DVDFab11
2021-06-21 14:39 - 2021-04-09 18:08 - 000000000 ____D C:\Users\Marc\AppData\Roaming\PaperScan Free
2021-06-21 09:00 - 2019-11-28 15:38 - 000000000 ____D C:\Users\Marc\AppData\Local\Adobe
2021-06-21 09:00 - 2019-11-28 15:38 - 000000000 ____D C:\ProgramData\Adobe
2021-06-20 11:59 - 2019-11-28 01:43 - 000000000 ____D C:\ProgramData\Package Cache
2021-06-20 11:50 - 2019-11-28 00:18 - 000000000 ____D C:\Users\Marc\AppData\Local\Google
2021-06-20 09:57 - 2019-11-28 15:41 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Adobe
2021-06-20 09:56 - 2019-11-27 17:54 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Adobe
2021-06-20 09:56 - 2019-11-27 17:54 - 000000000 ____D C:\Users\Marc\AppData\Local\Packages
2021-06-18 20:14 - 2020-11-11 20:49 - 000000000 ____D C:\Users\Marc\AppData\Roaming\WhatsApp
2021-06-18 20:13 - 2020-11-11 20:50 - 000000000 ____D C:\Users\Marc\AppData\Local\WhatsApp
2021-06-18 20:13 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Local\SquirrelTemp
2021-06-18 19:11 - 2020-09-30 01:42 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-18 18:04 - 2020-11-05 04:36 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-06-18 00:20 - 2019-11-27 20:25 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-06-16 21:58 - 2020-11-05 04:36 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1884309661-4178977230-3774313253-1001
2021-06-16 21:58 - 2020-11-05 04:29 - 000002438 _____ C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-06-16 21:58 - 2019-11-27 17:57 - 000000000 ___RD C:\Users\Marc\OneDrive
2021-06-16 18:33 - 2019-11-28 01:39 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-06-13 13:13 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Suuntolink
2021-06-13 12:30 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Local\Suuntolink
2021-06-13 12:29 - 2019-12-25 11:23 - 000002358 _____ C:\Users\Marc\Desktop\Suuntolink.lnk
2021-06-13 12:29 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto
2021-06-10 11:35 - 2019-11-28 15:14 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Surfshark
2021-06-10 11:05 - 2021-05-12 05:51 - 000000000 ____D C:\Users\Marc\AppData\Local\Notepad
2021-06-10 11:05 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-06-10 11:03 - 2020-11-05 04:27 - 000542544 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-06-10 11:03 - 2019-11-28 19:23 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2021-06-10 11:02 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-06-09 17:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-09 17:01 - 2019-11-27 22:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-09 16:59 - 2019-11-28 01:26 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2021-06-09 16:59 - 2019-11-27 22:27 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-09 14:16 - 2019-03-19 06:49 - 000000167 _____ C:\WINDOWS\win.ini
2021-06-05 20:30 - 2019-11-27 20:28 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-06-03 09:43 - 2019-11-28 15:15 - 000001018 _____ C:\Users\Public\Desktop\Surfshark.lnk
2021-06-03 09:43 - 2019-11-28 15:15 - 000000000 ____D C:\ProgramData\Surfshark
2021-06-03 09:43 - 2019-11-28 15:14 - 000000000 ____D C:\Program Files (x86)\Surfshark
==================== Fichiers à la racine de certains dossiers ========
2020-12-08 03:17 - 2020-12-08 03:17 - 000000258 _____ () C:\ProgramData\fontcacheev1.dat
2019-11-28 01:39 - 2019-11-28 01:39 - 000000171 _____ () C:\Users\Marc\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2019-11-28 15:34 - 2019-11-28 15:34 - 001236762 _____ () C:\Users\Marc\AppData\Roaming\AvidApplicationManager_Install.log
2021-04-03 11:51 - 2021-04-20 19:43 - 000000016 _____ () C:\Users\Marc\AppData\Roaming\msregsvv.dll
2021-06-08 01:08 - 2021-06-18 17:09 - 000000015 _____ () C:\Users\Marc\AppData\Roaming\obs-virtualcam.txt
2021-05-18 13:56 - 2021-05-18 13:56 - 000038479 _____ () C:\Users\Marc\AppData\Roaming\Valeurs séparées par une virgule.ADR
2021-05-18 14:28 - 2021-05-18 14:40 - 000013009 _____ () C:\Users\Marc\AppData\Roaming\Valeurs séparées par une virgule.CAL
2020-04-03 13:23 - 2020-10-15 10:28 - 000008192 _____ () C:\Users\Marc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-12-18 19:16 - 2020-12-18 19:16 - 000007597 _____ () C:\Users\Marc\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Marc (administrateur) sur MARCPC (25-06-2021 13:14:01)
Exécuté depuis C:\Users\Marc\Desktop
Profils chargés: Marc
Platform: Windows 10 Pro Version 20H2 19042.1052 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\AdguardSvc.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\protectedservice.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicatorCom.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_778512ee63a728ec\RstMwService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2011.11613.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe <2>
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.Service.exe
(Surfshark Ltd. -> Surfshark) C:\Program Files (x86)\Surfshark\Surfshark.ShadowsocksService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(voidtools -> ) C:\Program Files (x86)\Everything\Everything.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [706192 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [AppManHelper] => C:\Program Files (x86)\Avid\Application Manager\AvidAppManHelper.exe [617984 2015-06-09] (Avid Technology, Inc.) [Fichier non signé]
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1710880 2019-01-26] (voidtools -> )
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [34508416 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Surfshark] => C:\Program Files (x86)\Surfshark\Surfshark.exe [5839160 2021-05-26] (Surfshark Ltd. -> Surfshark)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [SuuntolinkLauncher] => C:\Users\Marc\AppData\Local\Suuntolink\app-3.6.1\resources\app\LaunchAgents\SuuntolinkLauncher.exe [831832 2021-06-13] (Suunto Oy -> )
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91591032 2020-04-14] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [BackupOutlook] => C:\Program Files (x86)\Wisco\BackupOutlook\BackupOutlook.exe [3717232 2013-08-30] (Wisco Computerservice -> Wisco)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [HP Officejet 6500 E710a-f (NET)] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Amazon Photos] => C:\Users\Marc\AppData\Local\Amazon Drive\AmazonPhotos.exe [10182800 2021-05-10] (Amazon.com Services LLC -> Amazon.com Inc.)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [5759392 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\MountPoints2: {1984c9fc-1214-11ea-9202-8c89a57f8209} - "F:\LaunchU3.exe"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [224768 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP 5512 Status Monitor: C:\WINDOWS\system32\hpinksts5512LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710a-f): C:\WINDOWS\system32\HPDiscoPM5512.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710n-z): C:\WINDOWS\system32\HPDiscoPM5412.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PDF Architect 7 Monitor: C:\Windows\system32\spool\DRIVERS\x64\pdf architect_pdfpmon_v.4.12.26.3.dll [932984 2020-09-25] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [116736 2019-11-28] (pdfforge GmbH) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.114\Installer\chrmstp.exe [2021-06-20] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-01-13]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avid Application Manager.lnk [2019-11-28]
ShortcutTarget: Avid Application Manager.lnk -> C:\Windows\Installer\{A59C0B17-6673-46E6-9E00-BB25E755A299}\NewShortcut1_E1E0FF1FC1474601A40EFEF248F11D43.exe (Flexera Software LLC) [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Philips GoGear SA4RGA Device Manager.lnk [2020-01-27]
ShortcutTarget: Philips GoGear SA4RGA Device Manager.lnk -> C:\Program Files (x86)\Philips\GoGear SA4RGA Device Manager\GoGear_SA4RGA_DeviceManager.exe (Koninklijke Philips Electronics N.V. -> Philips)
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f (réseau).lnk [2021-06-25]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f (réseau).lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet 6500 E710a-f\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN15V321HK05JZ;CONNECTION=NW;MONITOR=1;
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f.lnk [2020-12-31]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Officejet 6500 E710a-f.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet 6500 E710a-f\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN15V321HK05JZ;CONNECTION=USB;MONITOR=1;
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2020-01-16]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0ACB176E-3A64-4A16-8898-4D07BD8F47E0} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1910128 2020-10-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D801D59-DB74-4D2D-B523-A2362ACE907A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {132B710A-649E-4037-9124-0CBDBED161D2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-28] (Google Inc -> Google Inc.)
Task: {21614497-7B02-47D2-848C-5051037B15B5} - \Microsoft_Hardware_Launch_itype_exe -> Pas de fichier <==== ATTENTION
Task: {23B6E137-327C-4EE1-B8A9-8288463B61B1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2DDBC3B4-5F77-44B6-8C54-824935CF40D7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {2DDE6448-5E57-4082-9CD4-EA6074CA81A8} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2434424 2020-10-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {345CC112-3840-4117-BB96-B239C667C584} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [903520 2019-02-13] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {4D999E7E-7955-4DB5-9508-14E61C40232C} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [230632 2020-11-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {4FC9FC27-6EFB-49F1-9418-0EE920927ED8} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2651216 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {56B3213F-4C05-414C-B671-EB55852E8798} - \Microsoft_Hardware_Launch_mousekeyboardcenter_exe -> Pas de fichier <==== ATTENTION
Task: {6100DADF-99D8-409B-A375-1B373E88832C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {69AA70CF-3429-47FB-89AC-4BE9A88E3BB9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {7701B4DA-5FE7-4DF8-BA96-CF7C8B97A025} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [6174816 2016-01-07] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {8948AC57-8DD4-4BFA-88EF-7F73970A69B7} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {89B792F6-CE88-4243-A896-59AFF3D13F49} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-28] (Google Inc -> Google Inc.)
Task: {A731DF77-B567-4A4D-9305-026D07A36F48} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [30106496 2020-10-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {AA063379-F6E2-4156-A747-799ACD3933CF} - \Microsoft_Hardware_Launch_ipoint_exe -> Pas de fichier <==== ATTENTION
Task: {B9B6FB4B-6273-4D88-A525-9B158035E27D} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [32624 2020-10-22] (Microsoft Corporation -> Microsoft)
Task: {E0C3A646-57DB-4950-9D78-07D8EFABC78C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-26] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
ProxyEnable: [.DEFAULT] => Proxy est activé.
ProxyServer: [.DEFAULT] => 127.0.0.1:1080
Tcpip\..\Interfaces\{253ecd10-36de-4203-93e2-85d434af57de}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ba6550ed-fa36-4115-bad9-e749131d41e5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d83b20ac-2956-4dbb-8956-75ebb2b819e9}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{F1011590-B729-4830-880A-4F5D8E9A2750}: [NameServer] 162.252.172.57 149.154.159.92
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Marc\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-25]
FireFox:
========
FF DefaultProfile: 4byowv6t.default
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default [2021-06-25]
FF DownloadDir: H:\Reception
FF Notifications: Mozilla\Firefox\Profiles\4byowv6t.default -> hxxps://www.tameteo.com; hxxps://messages.google.com; hxxps://www.musicdiffusion.com; hxxps://www.facebook.com
FF Extension: (Avira Browser Safety) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\abs@avira.com [2019-11-28]
FF Extension: (Protection Web Avira) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\abs@avira.com.xpi [2019-11-14]
FF Extension: (AdSwap) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{4582aaa7-9688-4038-a9ef-06345fa0f400}.xpi [2019-11-13]
FF Extension: (Surfshark VPN proxy) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{732216ec-0dab-43bb-ac85-4b5e1977599d}.xpi [2019-11-05]
FF Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\4byowv6t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-09-27]
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019 [2021-06-25]
FF Notifications: Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019 -> hxxps://www.lesnumeriques.com; hxxps://www.castorama.fr; hxxps://www.medisite.fr
FF Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-16]
FF Extension: (Turbo Ad Blocker) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{c58824d6-e24f-45a6-8ddd-1bba8824656e}.xpi [2021-05-18]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\foxl963v.default-release-1601650998019\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-06-06]
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default [2021-06-25]
CHR Extension: (Slides) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-01-25]
CHR Extension: (Docs) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-01-25]
CHR Extension: (Google Drive) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-25]
CHR Extension: (AdGuard AdBlocker) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2021-06-20]
CHR Extension: (YouTube) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-01-25]
CHR Extension: (Adobe Acrobat) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-06-20]
CHR Extension: (Video Downloader professional) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2021-06-20]
CHR Extension: (Sheets) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-01-25]
CHR Extension: (Google Docs hors connexion) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-23]
CHR Extension: (Eurosport Player) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\leadnpkekfeaadcgcfjkmadkblpnhlim [2021-05-13]
CHR Extension: (The Flash Video Downloader) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmieilamoollaknppoffbmdgdcolcafa [2021-06-20]
CHR Extension: (Video DownloadHelper) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-06-20]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-13]
CHR Extension: (Gmail) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-25]
CHR Extension: (Chrome Media Router) - C:\Users\Marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-02]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-23] (Acronis International GmbH -> )
R2 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 Adguard Service; C:\Program Files (x86)\Adguard\AdguardSvc.exe [176032 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-26] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-04-16] (Acronis International GmbH -> )
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208432 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [537472 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484904 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484904 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [575776 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3743464 2021-03-09] (philandro Software GmbH -> philandro Software GmbH)
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [1097624 2021-06-25] (ASUSTeK Computer Inc. -> )
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [634768 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [383976 2021-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [246424 2020-11-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161376 2020-08-25] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1710880 2019-01-26] (voidtools -> )
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [285192 2020-10-28] (HP Inc. -> HP Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-06-24] (Malwarebytes Inc -> Malwarebytes)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393304 2021-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-09-24] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-09-24] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R2 Surfshark Service; C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe [440120 2020-06-15] (Surfshark Ltd. -> Surfshark)
R2 Surfshark Shadowsocks Service; C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe [440120 2020-06-15] (Surfshark Ltd. -> Surfshark)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [253912 2019-10-30] (Synology Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-04-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-04-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [94720 2021-02-20] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Ltd)
R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\WINDOWS\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [209744 2021-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [199312 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2020-11-23] (Bitdefender SRL -> Bitdefender)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [57824 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159800 2021-04-22] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2020-12-16] (Martin Malik - REALiX -> REALiX(tm))
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-06-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-24] (Malwarebytes Inc -> Malwarebytes)
S3 MpKsl94882489; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2E824E7E-125E-4E50-A205-721E9BB59993}\MpKslDrv.sys [97528 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-09-10] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 RDID1117; C:\WINDOWS\system32\Drivers\RDWM1117.SYS [309888 2015-07-22] (Microsoft Windows Hardware Compatibility Publisher -> Roland Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SurfsharkSplitTunnelDriver; C:\Program Files (x86)\Surfshark\Resources\x64\SurfsharkSplitTunnelCalloutDriver.sys [39648 2020-12-28] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 tapsurfshark; C:\WINDOWS\System32\drivers\tapsurfshark.sys [38728 2019-05-22] (WDKTestCert Lenovo,131775874531219913 -> The OpenVPN Project)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-04-16] (Acronis International GmbH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-04-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [420072 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-04-07] (Microsoft Windows -> Microsoft Corporation)
R3 wintunshark; C:\WINDOWS\system32\DRIVERS\wintunshark.sys [31096 2020-09-17] (WDKTestCert nikod,132409123292239223 -> Surfshark Ltd)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-25 13:14 - 2021-06-25 13:14 - 000039014 _____ C:\Users\Marc\Desktop\FRST.txt
2021-06-25 13:13 - 2021-06-25 13:14 - 000000000 ____D C:\FRST
2021-06-25 13:04 - 2021-06-25 13:04 - 002300416 _____ (Farbar) C:\Users\Marc\Desktop\FRST64.exe
2021-06-25 11:03 - 2021-06-25 11:03 - 000000970 _____ C:\Users\Marc\Desktop\ZHPSuite (1).exe - Raccourci.lnk
2021-06-25 10:41 - 2021-06-25 10:41 - 008534696 _____ (Malwarebytes) C:\Users\Marc\Downloads\adwcleaner_8.2.exe
2021-06-24 23:42 - 2021-06-24 23:52 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-06-24 23:42 - 2021-06-24 23:42 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-06-24 23:42 - 2021-06-24 23:41 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-06-24 23:36 - 2021-06-24 23:36 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Adguard Software Ltd
2021-06-24 23:36 - 2021-06-24 23:36 - 000000000 ____D C:\Users\Marc\AppData\Local\Adguard_Software_Ltd
2021-06-24 23:23 - 2021-06-24 23:23 - 000001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2021-06-24 07:47 - 2021-06-25 11:00 - 000049044 _____ C:\Users\Marc\Desktop\ZHPFix.txt
2021-06-24 07:44 - 2021-06-25 08:56 - 000628392 _____ C:\Users\Marc\Desktop\ZHPDiag.html
2021-06-24 07:40 - 2021-06-25 11:03 - 000000904 _____ C:\Users\Marc\Desktop\ZHPSuite.lnk
2021-06-24 07:34 - 2021-06-25 08:57 - 000082316 _____ C:\Users\Marc\Desktop\ZHPDiag.txt
2021-06-22 17:44 - 2021-06-22 17:44 - 000002687 _____ C:\Users\Marc\Desktop\RouteYou.lnk
2021-06-21 19:15 - 2021-06-21 19:15 - 000000000 ____D C:\Users\Marc\AppData\Roaming\11911
2021-06-20 11:59 - 2021-06-25 13:14 - 000000000 ____D C:\ProgramData\Adguard
2021-06-20 11:59 - 2021-06-20 11:59 - 000001002 _____ C:\Users\Public\Desktop\AdGuard.lnk
2021-06-20 11:59 - 2021-06-20 11:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdGuard
2021-06-20 11:59 - 2021-06-20 11:59 - 000000000 ____D C:\Program Files (x86)\Adguard
2021-06-20 11:59 - 2021-02-20 08:59 - 000094720 _____ (Adguard Software Ltd) C:\WINDOWS\system32\Drivers\adgnetworkwfpdrv.sys
2021-06-20 09:55 - 2021-06-20 09:55 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-06-20 09:55 - 2021-06-20 09:55 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-06-20 09:55 - 2021-06-20 09:55 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2021-06-20 09:55 - 2021-06-20 09:55 - 000000000 ____D C:\Program Files (x86)\Adobe
2021-06-18 00:20 - 2021-06-18 00:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-06-17 20:14 - 2021-06-24 23:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-06-16 08:33 - 2021-06-16 08:33 - 000000322 ____H C:\WINDOWS\Tasks\Intel PTT EK Recertification.job
2021-06-09 17:06 - 2021-06-09 17:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-09 17:06 - 2021-06-09 17:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-09 17:06 - 2021-06-09 17:06 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-09 17:06 - 2021-06-09 17:06 - 001823792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-06-09 17:06 - 2021-06-09 17:06 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-06-09 17:06 - 2021-06-09 17:06 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-09 17:06 - 2021-06-09 17:06 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-06-09 17:06 - 2021-06-09 17:06 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-09 17:06 - 2021-06-09 17:06 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-09 17:06 - 2021-06-09 17:06 - 000011353 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-06-09 17:05 - 2021-06-09 17:05 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-09 17:05 - 2021-06-09 17:05 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-09 17:05 - 2021-06-09 17:05 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-06-09 17:05 - 2021-06-09 17:05 - 000097280 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-06-08 01:08 - 2021-06-18 17:09 - 000000015 _____ C:\Users\Marc\AppData\Roaming\obs-virtualcam.txt
2021-06-04 20:02 - 2021-06-05 20:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-06-03 09:43 - 2021-06-03 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Surfshark
2021-05-31 14:01 - 2021-06-02 10:00 - 000000000 ____D C:\Users\Marc\Desktop\CSAU
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-25 13:06 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-25 13:03 - 2020-11-05 04:27 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-06-25 12:03 - 2019-11-29 14:17 - 000000000 ____D C:\Users\Marc\AppData\Roaming\vlc
2021-06-25 11:08 - 2020-11-05 04:31 - 001769358 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-06-25 11:08 - 2019-12-07 16:50 - 000790592 _____ C:\WINDOWS\system32\perfh00C.dat
2021-06-25 11:08 - 2019-12-07 16:50 - 000149762 _____ C:\WINDOWS\system32\perfc00C.dat
2021-06-25 11:08 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-06-25 11:03 - 2020-11-07 02:34 - 000000000 ____D C:\Program Files\CCleaner
2021-06-25 11:03 - 2019-11-28 19:50 - 000000000 ____D C:\Users\Marc\AppData\Roaming\ZHP
2021-06-25 11:01 - 2020-12-18 17:54 - 001136496 _____ C:\WINDOWS\system32\wpbbin.exe
2021-06-25 11:01 - 2020-12-18 17:54 - 001097624 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2021-06-25 11:01 - 2020-11-05 04:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-06-25 11:01 - 2020-11-05 04:26 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-25 11:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-06-25 11:01 - 2019-11-27 19:15 - 000000000 ____D C:\ProgramData\NVIDIA
2021-06-25 11:00 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-06-25 10:56 - 2021-05-19 10:41 - 000009476 _____ C:\Users\Marc\Desktop\ZHPCleaner (R).html
2021-06-25 10:56 - 2021-05-08 19:39 - 000002728 _____ C:\Users\Marc\Desktop\ZHPCleaner (R).txt
2021-06-25 10:55 - 2021-05-19 10:39 - 000009135 _____ C:\Users\Marc\Desktop\ZHPCleaner (S).html
2021-06-25 10:55 - 2021-05-08 19:38 - 000002517 _____ C:\Users\Marc\Desktop\ZHPCleaner (S).txt
2021-06-25 10:12 - 2020-02-14 19:25 - 000000910 _____ C:\Users\Marc\Desktop\ZHPCleaner.lnk
2021-06-25 10:11 - 2019-11-27 20:25 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Mozilla
2021-06-25 09:48 - 2020-11-05 04:36 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{42B0454E-F3AA-4953-94A8-90CBAD59F792}
2021-06-25 08:44 - 2019-11-28 20:11 - 000000000 ____D C:\Users\Marc\AppData\Local\CrashDumps
2021-06-25 00:17 - 2020-06-10 11:06 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-25 00:17 - 2020-06-10 11:06 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-06-25 00:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-25 00:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-06-24 23:51 - 2021-05-21 12:14 - 000001270 _____ C:\Users\Marc\Desktop\Amazon Backup.lnk
2021-06-24 23:43 - 2021-05-21 12:12 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Amazon Cloud Drive
2021-06-24 23:42 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-24 23:42 - 2019-11-28 19:59 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-06-24 23:41 - 2019-11-28 19:59 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-06-24 23:33 - 2019-11-27 20:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-06-24 23:29 - 2021-01-19 10:14 - 000000000 ____D C:\Users\Marc\AppData\Roaming\qBittorrent
2021-06-24 23:23 - 2019-11-28 00:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2021-06-24 23:10 - 2019-11-27 20:25 - 000000000 ____D C:\ProgramData\Mozilla
2021-06-24 07:40 - 2019-11-28 19:50 - 000000000 ____D C:\Users\Marc\AppData\Local\ZHP
2021-06-23 18:33 - 2019-11-28 01:43 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Filmotech_prefs
2021-06-23 14:36 - 2019-11-28 18:35 - 000000000 ____D C:\Users\Marc\AppData\Roaming\obs-studio
2021-06-23 13:43 - 2019-11-28 01:43 - 000000000 ____D C:\Users\Marc\AppData\Roaming\CEFCache
2021-06-22 17:44 - 2021-05-13 12:31 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2021-06-21 20:05 - 2019-11-28 01:39 - 000000000 ____D C:\Users\Marc\AppData\Roaming\DVDFab11
2021-06-21 14:39 - 2021-04-09 18:08 - 000000000 ____D C:\Users\Marc\AppData\Roaming\PaperScan Free
2021-06-21 09:00 - 2019-11-28 15:38 - 000000000 ____D C:\Users\Marc\AppData\Local\Adobe
2021-06-21 09:00 - 2019-11-28 15:38 - 000000000 ____D C:\ProgramData\Adobe
2021-06-20 11:59 - 2019-11-28 01:43 - 000000000 ____D C:\ProgramData\Package Cache
2021-06-20 11:50 - 2019-11-28 00:18 - 000000000 ____D C:\Users\Marc\AppData\Local\Google
2021-06-20 09:57 - 2019-11-28 15:41 - 000000000 ____D C:\Users\Marc\AppData\LocalLow\Adobe
2021-06-20 09:56 - 2019-11-27 17:54 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Adobe
2021-06-20 09:56 - 2019-11-27 17:54 - 000000000 ____D C:\Users\Marc\AppData\Local\Packages
2021-06-18 20:14 - 2020-11-11 20:49 - 000000000 ____D C:\Users\Marc\AppData\Roaming\WhatsApp
2021-06-18 20:13 - 2020-11-11 20:50 - 000000000 ____D C:\Users\Marc\AppData\Local\WhatsApp
2021-06-18 20:13 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Local\SquirrelTemp
2021-06-18 19:11 - 2020-09-30 01:42 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-18 18:04 - 2020-11-05 04:36 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-06-18 00:20 - 2019-11-27 20:25 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-06-16 21:58 - 2020-11-05 04:36 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1884309661-4178977230-3774313253-1001
2021-06-16 21:58 - 2020-11-05 04:29 - 000002438 _____ C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-06-16 21:58 - 2019-11-27 17:57 - 000000000 ___RD C:\Users\Marc\OneDrive
2021-06-16 18:33 - 2019-11-28 01:39 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-06-13 13:13 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Suuntolink
2021-06-13 12:30 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Local\Suuntolink
2021-06-13 12:29 - 2019-12-25 11:23 - 000002358 _____ C:\Users\Marc\Desktop\Suuntolink.lnk
2021-06-13 12:29 - 2019-12-25 11:23 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suunto
2021-06-10 11:35 - 2019-11-28 15:14 - 000000000 ____D C:\Users\Marc\AppData\Roaming\Surfshark
2021-06-10 11:05 - 2021-05-12 05:51 - 000000000 ____D C:\Users\Marc\AppData\Local\Notepad
2021-06-10 11:05 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-06-10 11:03 - 2020-11-05 04:27 - 000542544 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-06-10 11:03 - 2019-11-28 19:23 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2021-06-10 11:02 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-06-10 11:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-06-09 17:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-09 17:01 - 2019-11-27 22:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-09 16:59 - 2019-11-28 01:26 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2021-06-09 16:59 - 2019-11-27 22:27 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-09 14:16 - 2019-03-19 06:49 - 000000167 _____ C:\WINDOWS\win.ini
2021-06-05 20:30 - 2019-11-27 20:28 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-06-03 09:43 - 2019-11-28 15:15 - 000001018 _____ C:\Users\Public\Desktop\Surfshark.lnk
2021-06-03 09:43 - 2019-11-28 15:15 - 000000000 ____D C:\ProgramData\Surfshark
2021-06-03 09:43 - 2019-11-28 15:14 - 000000000 ____D C:\Program Files (x86)\Surfshark
==================== Fichiers à la racine de certains dossiers ========
2020-12-08 03:17 - 2020-12-08 03:17 - 000000258 _____ () C:\ProgramData\fontcacheev1.dat
2019-11-28 01:39 - 2019-11-28 01:39 - 000000171 _____ () C:\Users\Marc\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2019-11-28 15:34 - 2019-11-28 15:34 - 001236762 _____ () C:\Users\Marc\AppData\Roaming\AvidApplicationManager_Install.log
2021-04-03 11:51 - 2021-04-20 19:43 - 000000016 _____ () C:\Users\Marc\AppData\Roaming\msregsvv.dll
2021-06-08 01:08 - 2021-06-18 17:09 - 000000015 _____ () C:\Users\Marc\AppData\Roaming\obs-virtualcam.txt
2021-05-18 13:56 - 2021-05-18 13:56 - 000038479 _____ () C:\Users\Marc\AppData\Roaming\Valeurs séparées par une virgule.ADR
2021-05-18 14:28 - 2021-05-18 14:40 - 000013009 _____ () C:\Users\Marc\AppData\Roaming\Valeurs séparées par une virgule.CAL
2020-04-03 13:23 - 2020-10-15 10:28 - 000008192 _____ () C:\Users\Marc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-12-18 19:16 - 2020-12-18 19:16 - 000007597 _____ () C:\Users\Marc\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================