Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 07-07-2021
Exécuté par Fad (administrateur) sur FAD-PC (09-07-2021 11:43:54)
Exécuté depuis C:\Users\Fad\Desktop
Profils chargés: Fad & DefaultAppPool
Platform: Windows 10 Pro Version 20H2 19042.1083 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Program Files (x86)\GLPCCamera\monitorpad.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(Huawei Technologies Co.,Ltd. -> ) C:\ProgramData\MobileBrServ\mbbService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(QUALCOMM, Inc.) [Fichier non signé] C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISLE.EXE
(ultracopier.first-world.info) [Fichier non signé] C:\Program Files (x86)\Supercopier\supercopier.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [117472 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [GLSystray] => C:\Program Files (x86)\GLPCCamera\monitorpad.exe [69632 2014-03-11] () [Fichier non signé]
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Policies\Explorer: [NoThumbnailCache] 1
HKLM\...\Policies\Explorer: [DisableThumbnailCache] 1
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [ultracopier] => C:\Program Files (x86)\Supercopier\supercopier.exe [178688 2014-02-19] (ultracopier.first-world.info) [Fichier non signé]
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [34508416 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5549280 2021-05-28] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISLE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {5464a8b9-6cf6-11e9-9edc-002215fd5595} - "I:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {5c122c74-49be-11e9-846d-002215fd5595} - "H:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {6c0a7fe5-ded8-11ea-9f61-002215fd5595} - "I:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {82452e8e-a5a2-11e5-9c0d-002215fd5595} - "H:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\EPSON ET-2750 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBSLE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON PX830 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMHOE.DLL [120320 2018-06-01] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON SX600FW Series 64MonitorBE: C:\WINDOWS\system32\E_ILMEKE.DLL [108032 2007-12-07] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\PCL hpz3lw71: C:\WINDOWS\system32\hpz3lw71.dll [46080 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7844.104\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall LastPass RunOnce.lnk [2018-01-25]
ShortcutTarget: Uninstall LastPass RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass (Marvasol Inc) -> LastPass)
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {01BE1928-98A7-4AAD-9099-EA71DE7E92E7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {033E06A3-756D-4725-9D22-864E460FBD82} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960448 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12B068C6-5D58-4269-9827-7345FA84EA0F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {196BAA27-4594-44C3-8B99-1EDD031E305E} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {1D13CBB6-710B-4BC5-B225-BD1249BAB9C7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {2014DA8E-1065-4C4E-8438-6003FF7AF5F2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {24D77E93-18D0-4E1E-BC15-E6933C5301CA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {28264E94-342B-4CAA-97A9-EADFE360F514} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {28BACD54-F8FD-47D0-A455-A7D76D8A8ABA} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {295D4E5D-18D5-476A-98C4-C3A7191E56A3} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {31828C69-D6A4-4B51-A93B-587470BEDCE8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32CFAD3E-B4D8-42F7-9D36-D56F2A273186} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {33B7E3BC-AD44-453D-8301-6CC087AEDA80} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3D9559B5-2098-4577-BA92-24342C1CCFEC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3FF7A585-4B73-46B7-828C-163B317B28C2} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4E5403F5-F626-4478-AB96-F131DFB7EE44} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {52947AB9-1AA6-44D1-A8B5-17AD01506166} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {55B3C1FA-EFC4-4423-8BB5-A61DE3D6F894} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {56FA2679-87BC-421B-BCBD-B95E08A74737} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5DDEE0F9-E666-49FF-B56B-171D66BF0BD7} - System32\Tasks\IcarusAvastVpnUpgrade => C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe -> /silent /ShowVpnGui=0 /RestartUpdaterTaskName=IcarusAvastVpnUpgrade /RestartUpdaterAppExe="C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe"
Task: {5EEA4BA9-9DD1-4573-8F66-0B81E0BB7282} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {684CBA1D-9861-4F10-9DFF-849D6C0A77CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-06-19] (Google Inc -> Google Inc.)
Task: {6970E997-A697-43E6-8DCE-65A27E6B6CE0} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FDC8D15-1F6F-4FB9-B41C-B2DC4F305DEF} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {77B6D4E4-3F93-4A85-A0C6-607603B95D10} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Fad\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-07-03] (ESET, spol. s r.o. -> ESET)
Task: {802F66FD-5BB1-41D3-8DFF-D27214C77D39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86545672-9014-4554-A9A5-86355022F8EA} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {91771662-FF84-4CF3-A9AC-F2D7CB123F3A} - System32\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {92DA0163-8585-48B1-B8C7-D2AC701B5D41} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {94D6DDBF-E4D0-45AF-94E6-973DAB731912} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {94E6AD3A-2DBC-4D9F-BF7A-E9D72AD01029} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4686560 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
Task: {95A9E60E-55EE-4D18-BA09-231C488DC54F} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {983C29A9-5BD0-4D7E-800B-77C2A32774C5} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {9C8D805D-6220-4FCA-8EE6-FB9D24338164} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9DA65EE4-424D-41B5-9C9B-7BD7304672B5} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A23CE739-4472-4618-A4D5-685DA4C582C1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {A357CAF6-54CA-4787-BFC3-0044BA76EEC4} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Fad\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-07-03] (ESET, spol. s r.o. -> ESET)
Task: {AA5BE940-8FCE-4686-9EA9-94631D969A26} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AB62FF77-50B7-429A-B64C-64052996BEE0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {ABEC60C7-DAF7-4D5E-AB65-C03FD5FCF633} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {AF38AC70-2E5C-42ED-AA01-12F295FA18A3} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B2AC4584-F23D-43F4-A2AF-D865707F94C7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B6CEDA13-9CA8-4DF9-AC62-F63EDAB74C7C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [1790184 2021-04-29] (Avast Software s.r.o. -> Avast Software)
Task: {C3C7F737-B3D0-4929-BB87-6ABF7E8C8CC1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CA359FB0-BA80-4635-B19F-5524CD62A2C6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D8E89236-E7D2-4224-9738-2CB0D34775A1} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe
Task: {D9B74C85-A156-476B-A977-BAA40B4FC5D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {DDCC3CDC-C822-438A-BFE5-7A7560444CF1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {E0A3F3B2-24B7-45EA-8D59-EB718A85D98A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-06-19] (Google Inc -> Google Inc.)
Task: {E0C0ED04-51E7-4E50-A53C-142B5038D44A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EACDFC62-132A-4608-9315-943A3245211D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {F522D5AA-359B-4F03-8BED-DD7115D7D3BA} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F5A62FF5-BEFF-40F9-B24E-10342BCFFDCC} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F7C29DDB-657A-4428-AC82-5002B3528DCF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {FA39048D-E2C3-4EEB-8B26-D48812299DE2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FF9D0CA6-EBC7-4362-91B0-C77BC62D6832} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE:/EXE:{63901AB2-D67A-4D59-BEDC-76039C09DE44} /F:UpdateWORKGROUP\FAD-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{29def308-4923-4f0b-b5d6-39b4033e98c4}: [NameServer] 80.67.169.12,80.67.169.40
Tcpip\..\Interfaces\{29def308-4923-4f0b-b5d6-39b4033e98c4}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{459609c3-ec23-4313-94ea-ff0ec1b2b501}: [DhcpNameServer] 10.110.62.1
FireFox:
========
FF DefaultProfile: oex2qb1p.default-1435091326604-1600718620909
FF ProfilePath: C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909 [2021-07-09]
FF Homepage: Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909 -> hxxps://www.google.fr/
FF Extension: (OkayFreedom) - C:\Users\Fad\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2019-01-29] [UpdateUrl:hxxps://www.steganos.com/updates/okayfreedom/update_okayfreedom_ff.rdf]
FF Extension: (LastPass: Free Password Manager) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\support@lastpass.com.xpi [2021-07-01]
FF Extension: (uBlock Origin) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\uBlock0@raymondhill.net.xpi [2021-07-08]
FF Extension: (Video DownloadHelper) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-01]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-05-20]
FF Extension: (Greasemonkey) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2021-01-28]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default [2021-07-09]
CHR Notifications: Default -> hxxps://www.cnetfrance.fr
CHR HomePage: Default -> hxxp://www.google.fr/
CHR Extension: (Slides) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-07-08]
CHR Extension: (Docs) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-05]
CHR Extension: (Google Drive) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-11-07]
CHR Extension: (YouTube) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-11]
CHR Extension: (Recherche Google) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-11]
CHR Extension: (Tampermonkey) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-07-05]
CHR Extension: (Facebook Friends Xterminator) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeknamhakidpmlmaeibpngmejnhlhokb [2020-04-20]
CHR Extension: (Adobe Acrobat) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-16]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-18]
CHR Extension: (Ad 'n Popup-Blocker) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofhamhgcjpjmipbpegbjeododphaoep [2021-07-05]
CHR Extension: (Sheets) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-07-08]
CHR Extension: (Google Docs hors connexion) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-07-05]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-07-05]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-07-05]
CHR Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpcagpplmpfojmgmnngilcnanddlhb [2021-02-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Gmail) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-11-07]
CHR Extension: (Chrome Media Router) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-05]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7888408 2021-03-29] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [623216 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [353504 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56920 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056656 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7462200 2021-07-07] (Malwarebytes Inc -> Malwarebytes)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [242264 2015-09-23] (Huawei Technologies Co.,Ltd. -> )
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 qcmtusvc; C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe [83456 2014-10-16] (QUALCOMM, Inc.) [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394864 2021-07-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 VRAID Log Service; C:\Program Files (x86)\VIA\RAID\vialogsv.exe [55920 2011-03-15] (VIA Technologies Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-11-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-11-29] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35680 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [208552 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [365520 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [250328 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [99288 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [17328 2021-05-28] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41304 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [177872 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [524944 2021-05-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107808 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83368 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [850120 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [466696 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [216376 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 FcSerial; C:\WINDOWS\system32\DRIVERS\FcSerial.sys [221568 2013-01-30] (Flash Card.) [Fichier non signé]
R3 L1E; C:\WINDOWS\System32\drivers\L1E62x64.sys [59904 2019-12-07] (Microsoft Windows -> Atheros Communications, Inc.)
S3 leusbser; C:\WINDOWS\system32\DRIVERS\leusbser.sys [238080 2013-08-01] (QUALCOMM Incorporated) [Fichier non signé]
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-07-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-07-07] (Malwarebytes Inc -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
R1 ntflt; C:\WINDOWS\system32\DRIVERS\ntflt.sys [124144 2016-10-31] (MEDIATEK INC. -> )
S3 qcusbnet; C:\WINDOWS\System32\drivers\qcusbnet.sys [393216 2015-01-28] (QUALCOMM Incorporated) [Fichier non signé]
S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [243712 2015-01-28] (QUALCOMM Incorporated) [Fichier non signé]
S3 qcusbwwan; C:\WINDOWS\System32\drivers\qcusbwwan.sys [493568 2014-10-16] (QUALCOMM Incorporated) [Fichier non signé]
S3 silabenm; C:\WINDOWS\system32\DRIVERS\silabenm.sys [27336 2016-09-19] (Silicon Laboratories -> Silicon Laboratories) [Fichier non signé]
S3 SRS_SSCFilter; C:\WINDOWS\system32\drivers\srs_sscfilter_amd64.sys [346992 2009-12-15] (SRS Labs, Inc -> )
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Fichier non signé]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-11-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-11-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-11-29] (Microsoft Windows -> Microsoft Corporation)
S1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (Duodian Online Technology Co. Ltd. -> BigNox Corporation)
S1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] () [Fichier non signé]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-09 11:42 - 2021-07-09 11:43 - 000000000 ____D C:\Users\Fad\Desktop\FRST-OlderVersion
2021-07-08 21:12 - 2021-07-08 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2021-07-08 12:04 - 2021-07-08 12:04 - 000387583 _____ C:\Users\Fad\Desktop\ZHPDiag.txt
2021-07-08 11:54 - 2021-07-08 11:54 - 000000900 _____ C:\Users\Fad\Desktop\ZHPSuite.lnk
2021-07-08 11:51 - 2021-07-08 11:51 - 000009520 _____ C:\Users\Fad\Desktop\ZHPCleaner (R).html
2021-07-08 11:51 - 2021-07-08 11:51 - 000003231 _____ C:\Users\Fad\Desktop\ZHPCleaner (R).txt
2021-07-08 11:48 - 2021-07-08 11:48 - 000009512 _____ C:\Users\Fad\Desktop\ZHPCleaner (S).html
2021-07-08 11:48 - 2021-07-08 11:48 - 000003227 _____ C:\Users\Fad\Desktop\ZHPCleaner (S).txt
2021-07-08 11:27 - 2021-07-08 11:28 - 000000873 _____ C:\Users\Fad\Desktop\ZHPCleaner.lnk
2021-07-08 11:26 - 2021-07-08 11:23 - 000003549 _____ C:\Users\Fad\Desktop\AdwCleaner[C00].txt
2021-07-08 11:26 - 2021-07-08 11:22 - 000004390 _____ C:\Users\Fad\Desktop\AdwCleaner[S00].txt
2021-07-08 11:22 - 2021-07-08 11:23 - 000000000 ____D C:\AdwCleaner
2021-07-08 11:19 - 2021-07-08 11:19 - 003473048 _____ (Nicolas Coolman) C:\Users\Fad\Desktop\ZHPSuite (1).exe
2021-07-08 11:05 - 2021-07-08 11:05 - 008553680 _____ (Malwarebytes) C:\Users\Fad\Desktop\adwcleaner_8.3.0.exe
2021-07-08 09:26 - 2021-07-08 09:26 - 000000000 ____D C:\WINDOWS\Panther
2021-07-07 12:17 - 2021-07-07 12:17 - 000008597 _____ C:\Users\Fad\Desktop\résultat MB.txt
2021-07-07 12:05 - 2021-07-08 23:31 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\IGDump
2021-07-07 12:05 - 2021-07-07 12:05 - 000000000 ____D C:\Users\Fad\AppData\Local\mbam
2021-07-07 12:04 - 2021-07-08 12:29 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-07-07 12:04 - 2021-07-08 12:29 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-07-07 12:04 - 2021-07-07 12:04 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000000000 ____D C:\Program Files\Malwarebytes
2021-07-07 11:57 - 2021-07-07 11:57 - 000013943 _____ C:\Users\Fad\Desktop\Fixlog.txt
2021-07-07 11:53 - 2021-07-07 11:53 - 002093656 _____ (Malwarebytes) C:\Users\Fad\Desktop\MBSetup.exe
2021-07-07 10:02 - 2021-07-07 10:02 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-06 12:12 - 2021-07-06 12:21 - 000050033 _____ C:\Users\Fad\Desktop\Addition.txt
2021-07-06 12:10 - 2021-07-09 11:44 - 000036282 _____ C:\Users\Fad\Desktop\FRST.txt
2021-07-06 12:09 - 2021-07-09 11:44 - 000000000 ____D C:\FRST
2021-07-06 12:03 - 2021-07-09 11:42 - 002301440 _____ (Farbar) C:\Users\Fad\Desktop\FRST64.exe
2021-07-06 10:34 - 2021-07-06 10:34 - 003472536 _____ (Nicolas Coolman) C:\Users\Fad\Downloads\ZHPSuite.exe
2021-07-05 16:44 - 2021-07-05 16:44 - 001613092 _____ C:\Users\Fad\Downloads\Photos.zip
2021-07-05 12:49 - 2021-07-05 12:49 - 000000000 ____D C:\ProgramData\Package Cache
2021-07-05 11:55 - 2021-07-05 11:55 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-05 11:55 - 2021-07-05 11:55 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-05 11:55 - 2021-07-05 11:55 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-05 11:55 - 2021-07-05 11:55 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-05 11:54 - 2021-07-05 11:54 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-05 11:54 - 2021-07-05 11:54 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-05 11:54 - 2021-07-05 11:54 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-05 11:54 - 2021-07-05 11:54 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-05 11:51 - 2021-07-05 11:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-07-05 11:49 - 2015-11-05 09:00 - 001070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2021-07-05 11:49 - 2015-03-27 03:54 - 000163480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comDlg32.ocx
2021-07-05 11:49 - 2011-01-12 06:06 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71u.dll
2021-07-05 11:49 - 2011-01-12 05:49 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2021-07-05 11:49 - 2011-01-12 05:23 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2021-07-05 11:49 - 2007-02-01 14:43 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2021-07-05 11:46 - 2021-07-05 11:46 - 023871089 _____ (Igor Pavlov) C:\Users\Fad\Downloads\Visual C++ v56.exe
2021-07-05 10:50 - 2021-07-05 11:51 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-07-05 10:04 - 2021-07-05 10:04 - 000000000 ____D C:\Program Files\Microsoft Office
2021-07-03 18:50 - 2021-07-03 18:50 - 000918531 _____ C:\Users\Fad\AppData\Local\census.cache
2021-07-03 18:50 - 2021-07-03 18:50 - 000489029 _____ C:\Users\Fad\AppData\Local\ars.cache
2021-07-03 18:35 - 2021-07-03 18:35 - 000000010 _____ C:\Users\Fad\AppData\Local\sponge.last.runtime.cache
2021-07-03 18:33 - 2021-07-03 18:33 - 000000000 ____D C:\WINDOWS\Trend Micro
2021-07-03 18:33 - 2021-07-03 18:33 - 000000000 ____D C:\ProgramData\Trend Micro
2021-07-03 18:31 - 2021-07-03 18:31 - 000000036 _____ C:\Users\Fad\AppData\Local\housecall.guid.cache
2021-07-03 18:29 - 2021-07-03 23:55 - 000000000 ____D C:\Users\Fad\AppData\Local\FSDART
2021-07-03 18:29 - 2021-07-03 18:31 - 000000000 ____D C:\ProgramData\F-Secure
2021-07-03 18:29 - 2021-07-03 18:29 - 000000000 ____D C:\Users\Fad\AppData\Local\F-Secure
2021-07-03 18:27 - 2021-07-03 18:27 - 000003832 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2021-07-03 18:27 - 2021-07-03 18:27 - 000003390 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2021-07-03 18:14 - 2021-07-03 18:27 - 000001274 _____ C:\Users\Fad\Desktop\ESET Online Scanner.lnk
2021-07-03 18:13 - 2021-07-03 18:28 - 000001380 _____ C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2021-07-03 18:13 - 2021-07-03 18:13 - 000000000 ____D C:\Users\Fad\AppData\Local\ESET
2021-07-02 18:40 - 2021-07-02 18:40 - 000000000 _____ C:\Users\Fad\Desktop\Maintenance_tondeuse iron Favorita.pdf
2021-06-30 14:52 - 2021-06-30 14:52 - 000022798 _____ C:\Users\Fad\Desktop\certificat médical maman pour maison algérie.pdf
2021-06-29 21:51 - 2021-06-30 13:57 - 000002116 _____ C:\Users\Fad\Desktop\lettre cyber.txt
2021-06-25 09:45 - 2021-07-05 11:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-06-18 22:53 - 2021-07-02 18:57 - 000000000 ____D C:\Users\Fad\Desktop\LYCEE PROFESSIONNEL EMILE ZOLA - PRONOTE - Espace Élèves_fichiers
2021-06-18 22:53 - 2021-06-18 22:53 - 000388412 _____ C:\Users\Fad\Desktop\LYCEE PROFESSIONNEL EMILE ZOLA - PRONOTE - Espace Élèves.html
2021-06-09 09:30 - 2021-06-09 09:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-09 09:30 - 2021-06-09 09:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-09 09:30 - 2021-06-09 09:30 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-09 09:30 - 2021-06-09 09:30 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-09 09:30 - 2021-06-09 09:30 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-09 09:30 - 2021-06-09 09:30 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-09 09:29 - 2021-06-09 09:29 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-09 09:29 - 2021-06-09 09:29 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-09 11:40 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-09 11:40 - 2017-09-25 18:02 - 000000000 ____D C:\Program Files\CCleaner
2021-07-09 11:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-09 11:39 - 2017-11-07 19:15 - 000000000 ____D C:\Users\Fad\AppData\Local\Packages
2021-07-09 11:37 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-09 11:36 - 2016-10-01 22:38 - 000000000 ____D C:\Users\Fad\AppData\Local\CrashDumps
2021-07-09 11:34 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-09 11:33 - 2019-12-11 23:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2021-07-09 11:33 - 2016-11-18 21:53 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\Mozilla
2021-07-09 11:33 - 2015-06-19 22:17 - 000000000 ____D C:\Users\Fad\AppData\Roaming\AVAST Software
2021-07-09 11:33 - 2015-06-19 21:19 - 000000000 ____D C:\Program Files\AVAST Software
2021-07-09 11:33 - 2015-06-19 21:18 - 000000000 ____D C:\ProgramData\AVAST Software
2021-07-09 11:33 - 2015-06-19 15:54 - 000000000 ____D C:\ProgramData\Mozilla
2021-07-09 11:32 - 2018-06-07 19:54 - 000000000 ____D C:\Users\Fad\AppData\Local\AVAST Software
2021-07-09 11:17 - 2019-12-11 22:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-09 09:18 - 2019-12-11 23:05 - 002006362 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-09 09:18 - 2019-12-07 16:50 - 000865732 _____ C:\WINDOWS\system32\perfh00C.dat
2021-07-09 09:18 - 2019-12-07 16:50 - 000178082 _____ C:\WINDOWS\system32\perfc00C.dat
2021-07-09 09:18 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-09 09:15 - 2019-12-11 23:11 - 000004156 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{79886511-3621-4AF1-ABFC-A6969A839B0E}
2021-07-09 09:14 - 2019-10-03 13:34 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-07-09 09:14 - 2019-10-03 13:34 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-07-09 09:12 - 2017-07-19 14:01 - 000000000 ____D C:\ProgramData\NVIDIA
2021-07-09 09:11 - 2019-12-11 23:11 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-09 09:10 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-07-08 13:36 - 2019-01-10 16:25 - 000000000 ____D C:\Users\Fad\AppData\Local\D3DSCache
2021-07-08 12:04 - 2016-02-13 19:01 - 000000000 ____D C:\Users\Fad\AppData\Roaming\ZHP
2021-07-08 11:54 - 2017-10-03 14:39 - 000000000 ____D C:\Users\Fad\AppData\Local\ZHP
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Users\Fad\AppData\Roaming\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Users\Fad\AppData\Local\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\ProgramData\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2021-07-07 16:12 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-07 12:04 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-07-07 12:04 - 2017-10-23 17:23 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-07-07 11:57 - 2015-06-23 16:28 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\Temp
2021-07-07 11:40 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-07 11:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-07 10:02 - 2015-06-19 16:41 - 000414044 __RSH C:\bootmgr
2021-07-07 09:45 - 2019-12-11 23:11 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-07-05 12:01 - 2019-12-11 22:57 - 003088600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-05 12:01 - 2015-06-19 15:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-03 23:49 - 2016-01-30 22:26 - 000000000 ____D C:\Program Files\WBFS
2021-07-03 23:48 - 2016-01-18 00:00 - 000000000 ____D C:\Program Files\SAMSUNG
2021-07-03 23:37 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-03 23:25 - 2016-09-19 18:02 - 000000000 ____D C:\Program Files (x86)\Silabs
2021-07-03 23:24 - 2016-09-19 18:01 - 000000000 ____D C:\Users\Fad\.lfs
2021-07-03 23:22 - 2020-11-06 23:10 - 000000000 ____D C:\Users\Fad\AppData\Local\Facebook
2021-07-03 17:38 - 2019-12-11 23:11 - 000003358 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1647520781-1985113409-3864015634-1000
2021-07-03 17:38 - 2019-12-11 22:59 - 000002415 _____ C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-03 17:38 - 2015-07-29 20:02 - 000000000 ___RD C:\Users\Fad\OneDrive
2021-07-03 10:05 - 2021-04-03 13:04 - 000000933 _____ C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}.job
2021-07-02 19:46 - 2020-11-23 13:27 - 000000000 ____D C:\Users\Fad\AppData\Local\Discord
2021-07-02 19:45 - 2021-04-10 20:26 - 000000000 ____D C:\Program Files (x86)\CarteLoto
2021-07-02 19:45 - 2020-11-23 13:28 - 000000000 ____D C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2021-07-02 19:45 - 2020-11-23 13:28 - 000000000 ____D C:\Users\Fad\AppData\Roaming\discord
2021-07-02 19:09 - 2021-04-03 13:04 - 000003486 _____ C:\WINDOWS\system32\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}
2021-07-02 19:09 - 2019-12-11 23:11 - 000003516 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-07-02 19:09 - 2019-12-11 23:11 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-07-02 19:09 - 2019-12-11 23:11 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000003292 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-02 19:09 - 2019-12-11 23:11 - 000003176 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-07-02 19:09 - 2019-12-11 23:11 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002786 _____ C:\WINDOWS\system32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-07-02 19:09 - 2019-12-11 23:11 - 000002220 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-07-02 18:56 - 2015-06-20 00:01 - 000000000 ____D C:\Users\Fad\NiouzeFire_Plus
2021-07-02 18:48 - 2021-01-30 12:32 - 000000000 ____D C:\Users\Fad\Desktop\rapport de stage 2
2021-07-02 18:46 - 2015-06-19 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2021-07-02 18:32 - 2015-06-19 15:46 - 000000000 ____D C:\Users\Fad\AppData\Local\VirtualStore
2021-07-01 16:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-06-11 09:36 - 2020-11-20 09:36 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-06-09 10:19 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-09 09:17 - 2015-06-19 17:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-09 09:12 - 2015-06-19 17:25 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2020-07-13 16:21 - 2020-11-17 10:42 - 138722744 _____ (LifeScan, Inc.) C:\Users\Fad\otrdtt_patient_windows_FR.exe
2020-06-05 20:00 - 2020-06-05 20:00 - 024166400 _____ () C:\Program Files (x86)\GUT3F24.tmp
2020-06-08 08:49 - 2020-06-08 08:49 - 024166400 _____ () C:\Program Files (x86)\GUT697A.tmp
2020-06-06 11:04 - 2020-06-06 11:04 - 024166400 _____ () C:\Program Files (x86)\GUT6A06.tmp
2020-06-05 15:00 - 2020-06-05 15:00 - 024166400 _____ () C:\Program Files (x86)\GUT7A9A.tmp
2020-06-02 15:00 - 2020-06-02 15:00 - 024166400 _____ () C:\Program Files (x86)\GUT8DD9.tmp
2020-06-04 19:00 - 2020-06-04 19:00 - 024166400 _____ () C:\Program Files (x86)\GUTA034.tmp
2020-06-05 09:24 - 2020-06-05 09:24 - 024166400 _____ () C:\Program Files (x86)\GUTABF5.tmp
2020-06-07 10:54 - 2020-06-07 10:54 - 024166400 _____ () C:\Program Files (x86)\GUTCBF.tmp
2020-06-08 14:00 - 2020-06-08 14:00 - 024166400 _____ () C:\Program Files (x86)\GUTCF8.tmp
2020-06-06 16:00 - 2020-06-06 16:00 - 024166400 _____ () C:\Program Files (x86)\GUTD25F.tmp
2020-06-07 22:00 - 2020-06-07 22:00 - 024166400 _____ () C:\Program Files (x86)\GUTDD3C.tmp
2020-06-08 19:00 - 2020-06-08 19:00 - 024166400 _____ () C:\Program Files (x86)\GUTF7D1.tmp
2020-06-07 16:00 - 2020-06-07 16:00 - 024166400 _____ () C:\Program Files (x86)\GUTFC04.tmp
2015-06-20 14:50 - 2018-01-25 11:55 - 021405208 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2016-10-31 10:55 - 2016-10-31 13:29 - 000001856 _____ () C:\Users\Fad\AppData\Roaming\lua_setup_log.txt
2021-07-03 18:50 - 2021-07-03 18:50 - 000489029 _____ () C:\Users\Fad\AppData\Local\ars.cache
2021-07-03 18:50 - 2021-07-03 18:50 - 000918531 _____ () C:\Users\Fad\AppData\Local\census.cache
2021-07-03 18:31 - 2021-07-03 18:31 - 000000036 _____ () C:\Users\Fad\AppData\Local\housecall.guid.cache
2018-10-01 12:42 - 2018-10-01 12:42 - 000000000 _____ () C:\Users\Fad\AppData\Local\oobelibMkey.log
2021-07-03 18:35 - 2021-07-03 18:35 - 000000010 _____ () C:\Users\Fad\AppData\Local\sponge.last.runtime.cache
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <==== ATTENTION
==================== Fin de FRST.txt ========================
Exécuté par Fad (administrateur) sur FAD-PC (09-07-2021 11:43:54)
Exécuté depuis C:\Users\Fad\Desktop
Profils chargés: Fad & DefaultAppPool
Platform: Windows 10 Pro Version 20H2 19042.1083 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Program Files (x86)\GLPCCamera\monitorpad.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(Huawei Technologies Co.,Ltd. -> ) C:\ProgramData\MobileBrServ\mbbService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(QUALCOMM, Inc.) [Fichier non signé] C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATISLE.EXE
(ultracopier.first-world.info) [Fichier non signé] C:\Program Files (x86)\Supercopier\supercopier.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [117472 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [GLSystray] => C:\Program Files (x86)\GLPCCamera\monitorpad.exe [69632 2014-03-11] () [Fichier non signé]
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Policies\Explorer: [NoThumbnailCache] 1
HKLM\...\Policies\Explorer: [DisableThumbnailCache] 1
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [ultracopier] => C:\Program Files (x86)\Supercopier\supercopier.exe [178688 2014-02-19] (ultracopier.first-world.info) [Fichier non signé]
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [34508416 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5549280 2021-05-28] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISLE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {5464a8b9-6cf6-11e9-9edc-002215fd5595} - "I:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {5c122c74-49be-11e9-846d-002215fd5595} - "H:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {6c0a7fe5-ded8-11ea-9f61-002215fd5595} - "I:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKU\S-1-5-21-1647520781-1985113409-3864015634-1000\...\MountPoints2: {82452e8e-a5a2-11e5-9c0d-002215fd5595} - "H:\Fondation_Ronald_McDonald_USB_2015.EXE"
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\EPSON ET-2750 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBSLE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON PX830 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMHOE.DLL [120320 2018-06-01] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON SX600FW Series 64MonitorBE: C:\WINDOWS\system32\E_ILMEKE.DLL [108032 2007-12-07] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\PCL hpz3lw71: C:\WINDOWS\system32\hpz3lw71.dll [46080 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7844.104\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall LastPass RunOnce.lnk [2018-01-25]
ShortcutTarget: Uninstall LastPass RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass (Marvasol Inc) -> LastPass)
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {01BE1928-98A7-4AAD-9099-EA71DE7E92E7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {033E06A3-756D-4725-9D22-864E460FBD82} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960448 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12B068C6-5D58-4269-9827-7345FA84EA0F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {196BAA27-4594-44C3-8B99-1EDD031E305E} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {1D13CBB6-710B-4BC5-B225-BD1249BAB9C7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {2014DA8E-1065-4C4E-8438-6003FF7AF5F2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {24D77E93-18D0-4E1E-BC15-E6933C5301CA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {28264E94-342B-4CAA-97A9-EADFE360F514} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {28BACD54-F8FD-47D0-A455-A7D76D8A8ABA} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {295D4E5D-18D5-476A-98C4-C3A7191E56A3} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {31828C69-D6A4-4B51-A93B-587470BEDCE8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32CFAD3E-B4D8-42F7-9D36-D56F2A273186} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {33B7E3BC-AD44-453D-8301-6CC087AEDA80} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3D9559B5-2098-4577-BA92-24342C1CCFEC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3FF7A585-4B73-46B7-828C-163B317B28C2} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4E5403F5-F626-4478-AB96-F131DFB7EE44} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {52947AB9-1AA6-44D1-A8B5-17AD01506166} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {55B3C1FA-EFC4-4423-8BB5-A61DE3D6F894} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {56FA2679-87BC-421B-BCBD-B95E08A74737} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5DDEE0F9-E666-49FF-B56B-171D66BF0BD7} - System32\Tasks\IcarusAvastVpnUpgrade => C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe -> /silent /ShowVpnGui=0 /RestartUpdaterTaskName=IcarusAvastVpnUpgrade /RestartUpdaterAppExe="C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe"
Task: {5EEA4BA9-9DD1-4573-8F66-0B81E0BB7282} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {684CBA1D-9861-4F10-9DFF-849D6C0A77CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-06-19] (Google Inc -> Google Inc.)
Task: {6970E997-A697-43E6-8DCE-65A27E6B6CE0} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FDC8D15-1F6F-4FB9-B41C-B2DC4F305DEF} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {77B6D4E4-3F93-4A85-A0C6-607603B95D10} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Fad\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-07-03] (ESET, spol. s r.o. -> ESET)
Task: {802F66FD-5BB1-41D3-8DFF-D27214C77D39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86545672-9014-4554-A9A5-86355022F8EA} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {91771662-FF84-4CF3-A9AC-F2D7CB123F3A} - System32\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {92DA0163-8585-48B1-B8C7-D2AC701B5D41} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {94D6DDBF-E4D0-45AF-94E6-973DAB731912} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {94E6AD3A-2DBC-4D9F-BF7A-E9D72AD01029} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4686560 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
Task: {95A9E60E-55EE-4D18-BA09-231C488DC54F} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {983C29A9-5BD0-4D7E-800B-77C2A32774C5} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {9C8D805D-6220-4FCA-8EE6-FB9D24338164} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9DA65EE4-424D-41B5-9C9B-7BD7304672B5} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A23CE739-4472-4618-A4D5-685DA4C582C1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {A357CAF6-54CA-4787-BFC3-0044BA76EEC4} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Fad\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-07-03] (ESET, spol. s r.o. -> ESET)
Task: {AA5BE940-8FCE-4686-9EA9-94631D969A26} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AB62FF77-50B7-429A-B64C-64052996BEE0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {ABEC60C7-DAF7-4D5E-AB65-C03FD5FCF633} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {AF38AC70-2E5C-42ED-AA01-12F295FA18A3} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B2AC4584-F23D-43F4-A2AF-D865707F94C7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B6CEDA13-9CA8-4DF9-AC62-F63EDAB74C7C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [1790184 2021-04-29] (Avast Software s.r.o. -> Avast Software)
Task: {C3C7F737-B3D0-4929-BB87-6ABF7E8C8CC1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CA359FB0-BA80-4635-B19F-5524CD62A2C6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D8E89236-E7D2-4224-9738-2CB0D34775A1} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe
Task: {D9B74C85-A156-476B-A977-BAA40B4FC5D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {DDCC3CDC-C822-438A-BFE5-7A7560444CF1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {E0A3F3B2-24B7-45EA-8D59-EB718A85D98A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-06-19] (Google Inc -> Google Inc.)
Task: {E0C0ED04-51E7-4E50-A53C-142B5038D44A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EACDFC62-132A-4608-9315-943A3245211D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {F522D5AA-359B-4F03-8BED-DD7115D7D3BA} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F5A62FF5-BEFF-40F9-B24E-10342BCFFDCC} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F7C29DDB-657A-4428-AC82-5002B3528DCF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {FA39048D-E2C3-4EEB-8B26-D48812299DE2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FF9D0CA6-EBC7-4362-91B0-C77BC62D6832} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSLE.EXE:/EXE:{63901AB2-D67A-4D59-BEDC-76039C09DE44} /F:UpdateWORKGROUP\FAD-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{29def308-4923-4f0b-b5d6-39b4033e98c4}: [NameServer] 80.67.169.12,80.67.169.40
Tcpip\..\Interfaces\{29def308-4923-4f0b-b5d6-39b4033e98c4}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{459609c3-ec23-4313-94ea-ff0ec1b2b501}: [DhcpNameServer] 10.110.62.1
FireFox:
========
FF DefaultProfile: oex2qb1p.default-1435091326604-1600718620909
FF ProfilePath: C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909 [2021-07-09]
FF Homepage: Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909 -> hxxps://www.google.fr/
FF Extension: (OkayFreedom) - C:\Users\Fad\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2019-01-29] [UpdateUrl:hxxps://www.steganos.com/updates/okayfreedom/update_okayfreedom_ff.rdf]
FF Extension: (LastPass: Free Password Manager) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\support@lastpass.com.xpi [2021-07-01]
FF Extension: (uBlock Origin) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\uBlock0@raymondhill.net.xpi [2021-07-08]
FF Extension: (Video DownloadHelper) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-01]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-05-20]
FF Extension: (Greasemonkey) - C:\Users\Fad\AppData\Roaming\Mozilla\Firefox\Profiles\oex2qb1p.default-1435091326604-1600718620909\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2021-01-28]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default [2021-07-09]
CHR Notifications: Default -> hxxps://www.cnetfrance.fr
CHR HomePage: Default -> hxxp://www.google.fr/
CHR Extension: (Slides) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-07-08]
CHR Extension: (Docs) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-05]
CHR Extension: (Google Drive) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-11-07]
CHR Extension: (YouTube) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-11]
CHR Extension: (Recherche Google) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-11]
CHR Extension: (Tampermonkey) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-07-05]
CHR Extension: (Facebook Friends Xterminator) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeknamhakidpmlmaeibpngmejnhlhokb [2020-04-20]
CHR Extension: (Adobe Acrobat) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-16]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-18]
CHR Extension: (Ad 'n Popup-Blocker) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofhamhgcjpjmipbpegbjeododphaoep [2021-07-05]
CHR Extension: (Sheets) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-07-08]
CHR Extension: (Google Docs hors connexion) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-07-05]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-07-05]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-07-05]
CHR Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpcagpplmpfojmgmnngilcnanddlhb [2021-02-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Gmail) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-11-07]
CHR Extension: (Chrome Media Router) - C:\Users\Fad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-05]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7888408 2021-03-29] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [623216 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [353504 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56920 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056656 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7462200 2021-07-07] (Malwarebytes Inc -> Malwarebytes)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [242264 2015-09-23] (Huawei Technologies Co.,Ltd. -> )
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 qcmtusvc; C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe [83456 2014-10-16] (QUALCOMM, Inc.) [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394864 2021-07-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 VRAID Log Service; C:\Program Files (x86)\VIA\RAID\vialogsv.exe [55920 2011-03-15] (VIA Technologies Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-11-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-11-29] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35680 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [208552 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [365520 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [250328 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [99288 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [17328 2021-05-28] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41304 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [177872 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [524944 2021-05-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107808 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83368 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [850120 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [466696 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [216376 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-03-22] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 FcSerial; C:\WINDOWS\system32\DRIVERS\FcSerial.sys [221568 2013-01-30] (Flash Card.) [Fichier non signé]
R3 L1E; C:\WINDOWS\System32\drivers\L1E62x64.sys [59904 2019-12-07] (Microsoft Windows -> Atheros Communications, Inc.)
S3 leusbser; C:\WINDOWS\system32\DRIVERS\leusbser.sys [238080 2013-08-01] (QUALCOMM Incorporated) [Fichier non signé]
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-07-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-07-07] (Malwarebytes Inc -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
R1 ntflt; C:\WINDOWS\system32\DRIVERS\ntflt.sys [124144 2016-10-31] (MEDIATEK INC. -> )
S3 qcusbnet; C:\WINDOWS\System32\drivers\qcusbnet.sys [393216 2015-01-28] (QUALCOMM Incorporated) [Fichier non signé]
S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [243712 2015-01-28] (QUALCOMM Incorporated) [Fichier non signé]
S3 qcusbwwan; C:\WINDOWS\System32\drivers\qcusbwwan.sys [493568 2014-10-16] (QUALCOMM Incorporated) [Fichier non signé]
S3 silabenm; C:\WINDOWS\system32\DRIVERS\silabenm.sys [27336 2016-09-19] (Silicon Laboratories -> Silicon Laboratories) [Fichier non signé]
S3 SRS_SSCFilter; C:\WINDOWS\system32\drivers\srs_sscfilter_amd64.sys [346992 2009-12-15] (SRS Labs, Inc -> )
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Fichier non signé]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-11-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-11-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-11-29] (Microsoft Windows -> Microsoft Corporation)
S1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (Duodian Online Technology Co. Ltd. -> BigNox Corporation)
S1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] () [Fichier non signé]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-09 11:42 - 2021-07-09 11:43 - 000000000 ____D C:\Users\Fad\Desktop\FRST-OlderVersion
2021-07-08 21:12 - 2021-07-08 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2021-07-08 12:04 - 2021-07-08 12:04 - 000387583 _____ C:\Users\Fad\Desktop\ZHPDiag.txt
2021-07-08 11:54 - 2021-07-08 11:54 - 000000900 _____ C:\Users\Fad\Desktop\ZHPSuite.lnk
2021-07-08 11:51 - 2021-07-08 11:51 - 000009520 _____ C:\Users\Fad\Desktop\ZHPCleaner (R).html
2021-07-08 11:51 - 2021-07-08 11:51 - 000003231 _____ C:\Users\Fad\Desktop\ZHPCleaner (R).txt
2021-07-08 11:48 - 2021-07-08 11:48 - 000009512 _____ C:\Users\Fad\Desktop\ZHPCleaner (S).html
2021-07-08 11:48 - 2021-07-08 11:48 - 000003227 _____ C:\Users\Fad\Desktop\ZHPCleaner (S).txt
2021-07-08 11:27 - 2021-07-08 11:28 - 000000873 _____ C:\Users\Fad\Desktop\ZHPCleaner.lnk
2021-07-08 11:26 - 2021-07-08 11:23 - 000003549 _____ C:\Users\Fad\Desktop\AdwCleaner[C00].txt
2021-07-08 11:26 - 2021-07-08 11:22 - 000004390 _____ C:\Users\Fad\Desktop\AdwCleaner[S00].txt
2021-07-08 11:22 - 2021-07-08 11:23 - 000000000 ____D C:\AdwCleaner
2021-07-08 11:19 - 2021-07-08 11:19 - 003473048 _____ (Nicolas Coolman) C:\Users\Fad\Desktop\ZHPSuite (1).exe
2021-07-08 11:05 - 2021-07-08 11:05 - 008553680 _____ (Malwarebytes) C:\Users\Fad\Desktop\adwcleaner_8.3.0.exe
2021-07-08 09:26 - 2021-07-08 09:26 - 000000000 ____D C:\WINDOWS\Panther
2021-07-07 12:17 - 2021-07-07 12:17 - 000008597 _____ C:\Users\Fad\Desktop\résultat MB.txt
2021-07-07 12:05 - 2021-07-08 23:31 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\IGDump
2021-07-07 12:05 - 2021-07-07 12:05 - 000000000 ____D C:\Users\Fad\AppData\Local\mbam
2021-07-07 12:04 - 2021-07-08 12:29 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-07-07 12:04 - 2021-07-08 12:29 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-07-07 12:04 - 2021-07-07 12:04 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-07-07 12:04 - 2021-07-07 12:04 - 000000000 ____D C:\Program Files\Malwarebytes
2021-07-07 11:57 - 2021-07-07 11:57 - 000013943 _____ C:\Users\Fad\Desktop\Fixlog.txt
2021-07-07 11:53 - 2021-07-07 11:53 - 002093656 _____ (Malwarebytes) C:\Users\Fad\Desktop\MBSetup.exe
2021-07-07 10:02 - 2021-07-07 10:02 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-06 12:12 - 2021-07-06 12:21 - 000050033 _____ C:\Users\Fad\Desktop\Addition.txt
2021-07-06 12:10 - 2021-07-09 11:44 - 000036282 _____ C:\Users\Fad\Desktop\FRST.txt
2021-07-06 12:09 - 2021-07-09 11:44 - 000000000 ____D C:\FRST
2021-07-06 12:03 - 2021-07-09 11:42 - 002301440 _____ (Farbar) C:\Users\Fad\Desktop\FRST64.exe
2021-07-06 10:34 - 2021-07-06 10:34 - 003472536 _____ (Nicolas Coolman) C:\Users\Fad\Downloads\ZHPSuite.exe
2021-07-05 16:44 - 2021-07-05 16:44 - 001613092 _____ C:\Users\Fad\Downloads\Photos.zip
2021-07-05 12:49 - 2021-07-05 12:49 - 000000000 ____D C:\ProgramData\Package Cache
2021-07-05 11:55 - 2021-07-05 11:55 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-05 11:55 - 2021-07-05 11:55 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-05 11:55 - 2021-07-05 11:55 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-05 11:55 - 2021-07-05 11:55 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-05 11:54 - 2021-07-05 11:54 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-05 11:54 - 2021-07-05 11:54 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-05 11:54 - 2021-07-05 11:54 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-05 11:54 - 2021-07-05 11:54 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-05 11:54 - 2021-07-05 11:54 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-05 11:51 - 2021-07-05 11:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-07-05 11:49 - 2015-11-05 09:00 - 001070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2021-07-05 11:49 - 2015-03-27 03:54 - 000163480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comDlg32.ocx
2021-07-05 11:49 - 2011-01-12 06:06 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71u.dll
2021-07-05 11:49 - 2011-01-12 05:49 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2021-07-05 11:49 - 2011-01-12 05:23 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2021-07-05 11:49 - 2007-02-01 14:43 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2021-07-05 11:46 - 2021-07-05 11:46 - 023871089 _____ (Igor Pavlov) C:\Users\Fad\Downloads\Visual C++ v56.exe
2021-07-05 10:50 - 2021-07-05 11:51 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-07-05 10:04 - 2021-07-05 10:04 - 000000000 ____D C:\Program Files\Microsoft Office
2021-07-03 18:50 - 2021-07-03 18:50 - 000918531 _____ C:\Users\Fad\AppData\Local\census.cache
2021-07-03 18:50 - 2021-07-03 18:50 - 000489029 _____ C:\Users\Fad\AppData\Local\ars.cache
2021-07-03 18:35 - 2021-07-03 18:35 - 000000010 _____ C:\Users\Fad\AppData\Local\sponge.last.runtime.cache
2021-07-03 18:33 - 2021-07-03 18:33 - 000000000 ____D C:\WINDOWS\Trend Micro
2021-07-03 18:33 - 2021-07-03 18:33 - 000000000 ____D C:\ProgramData\Trend Micro
2021-07-03 18:31 - 2021-07-03 18:31 - 000000036 _____ C:\Users\Fad\AppData\Local\housecall.guid.cache
2021-07-03 18:29 - 2021-07-03 23:55 - 000000000 ____D C:\Users\Fad\AppData\Local\FSDART
2021-07-03 18:29 - 2021-07-03 18:31 - 000000000 ____D C:\ProgramData\F-Secure
2021-07-03 18:29 - 2021-07-03 18:29 - 000000000 ____D C:\Users\Fad\AppData\Local\F-Secure
2021-07-03 18:27 - 2021-07-03 18:27 - 000003832 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2021-07-03 18:27 - 2021-07-03 18:27 - 000003390 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2021-07-03 18:14 - 2021-07-03 18:27 - 000001274 _____ C:\Users\Fad\Desktop\ESET Online Scanner.lnk
2021-07-03 18:13 - 2021-07-03 18:28 - 000001380 _____ C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2021-07-03 18:13 - 2021-07-03 18:13 - 000000000 ____D C:\Users\Fad\AppData\Local\ESET
2021-07-02 18:40 - 2021-07-02 18:40 - 000000000 _____ C:\Users\Fad\Desktop\Maintenance_tondeuse iron Favorita.pdf
2021-06-30 14:52 - 2021-06-30 14:52 - 000022798 _____ C:\Users\Fad\Desktop\certificat médical maman pour maison algérie.pdf
2021-06-29 21:51 - 2021-06-30 13:57 - 000002116 _____ C:\Users\Fad\Desktop\lettre cyber.txt
2021-06-25 09:45 - 2021-07-05 11:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-06-18 22:53 - 2021-07-02 18:57 - 000000000 ____D C:\Users\Fad\Desktop\LYCEE PROFESSIONNEL EMILE ZOLA - PRONOTE - Espace Élèves_fichiers
2021-06-18 22:53 - 2021-06-18 22:53 - 000388412 _____ C:\Users\Fad\Desktop\LYCEE PROFESSIONNEL EMILE ZOLA - PRONOTE - Espace Élèves.html
2021-06-09 09:30 - 2021-06-09 09:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-09 09:30 - 2021-06-09 09:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-09 09:30 - 2021-06-09 09:30 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-09 09:30 - 2021-06-09 09:30 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-09 09:30 - 2021-06-09 09:30 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-09 09:30 - 2021-06-09 09:30 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-09 09:29 - 2021-06-09 09:29 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-09 09:29 - 2021-06-09 09:29 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-09 09:29 - 2021-06-09 09:29 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-09 11:40 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-09 11:40 - 2017-09-25 18:02 - 000000000 ____D C:\Program Files\CCleaner
2021-07-09 11:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-09 11:39 - 2017-11-07 19:15 - 000000000 ____D C:\Users\Fad\AppData\Local\Packages
2021-07-09 11:37 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-09 11:36 - 2016-10-01 22:38 - 000000000 ____D C:\Users\Fad\AppData\Local\CrashDumps
2021-07-09 11:34 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-09 11:33 - 2019-12-11 23:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2021-07-09 11:33 - 2016-11-18 21:53 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\Mozilla
2021-07-09 11:33 - 2015-06-19 22:17 - 000000000 ____D C:\Users\Fad\AppData\Roaming\AVAST Software
2021-07-09 11:33 - 2015-06-19 21:19 - 000000000 ____D C:\Program Files\AVAST Software
2021-07-09 11:33 - 2015-06-19 21:18 - 000000000 ____D C:\ProgramData\AVAST Software
2021-07-09 11:33 - 2015-06-19 15:54 - 000000000 ____D C:\ProgramData\Mozilla
2021-07-09 11:32 - 2018-06-07 19:54 - 000000000 ____D C:\Users\Fad\AppData\Local\AVAST Software
2021-07-09 11:17 - 2019-12-11 22:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-09 09:18 - 2019-12-11 23:05 - 002006362 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-09 09:18 - 2019-12-07 16:50 - 000865732 _____ C:\WINDOWS\system32\perfh00C.dat
2021-07-09 09:18 - 2019-12-07 16:50 - 000178082 _____ C:\WINDOWS\system32\perfc00C.dat
2021-07-09 09:18 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-09 09:15 - 2019-12-11 23:11 - 000004156 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{79886511-3621-4AF1-ABFC-A6969A839B0E}
2021-07-09 09:14 - 2019-10-03 13:34 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-07-09 09:14 - 2019-10-03 13:34 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-07-09 09:12 - 2017-07-19 14:01 - 000000000 ____D C:\ProgramData\NVIDIA
2021-07-09 09:11 - 2019-12-11 23:11 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-09 09:10 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-07-08 13:36 - 2019-01-10 16:25 - 000000000 ____D C:\Users\Fad\AppData\Local\D3DSCache
2021-07-08 12:04 - 2016-02-13 19:01 - 000000000 ____D C:\Users\Fad\AppData\Roaming\ZHP
2021-07-08 11:54 - 2017-10-03 14:39 - 000000000 ____D C:\Users\Fad\AppData\Local\ZHP
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Users\Fad\AppData\Roaming\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Users\Fad\AppData\Local\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\ProgramData\Lavasoft
2021-07-08 11:23 - 2018-04-17 14:24 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2021-07-07 16:12 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-07 12:04 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-07-07 12:04 - 2017-10-23 17:23 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-07-07 11:57 - 2015-06-23 16:28 - 000000000 ____D C:\Users\Fad\AppData\LocalLow\Temp
2021-07-07 11:40 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-07 11:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-07 10:02 - 2015-06-19 16:41 - 000414044 __RSH C:\bootmgr
2021-07-07 09:45 - 2019-12-11 23:11 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-07-05 12:01 - 2019-12-11 22:57 - 003088600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-05 12:01 - 2015-06-19 15:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-05 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-03 23:49 - 2016-01-30 22:26 - 000000000 ____D C:\Program Files\WBFS
2021-07-03 23:48 - 2016-01-18 00:00 - 000000000 ____D C:\Program Files\SAMSUNG
2021-07-03 23:37 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-03 23:25 - 2016-09-19 18:02 - 000000000 ____D C:\Program Files (x86)\Silabs
2021-07-03 23:24 - 2016-09-19 18:01 - 000000000 ____D C:\Users\Fad\.lfs
2021-07-03 23:22 - 2020-11-06 23:10 - 000000000 ____D C:\Users\Fad\AppData\Local\Facebook
2021-07-03 17:38 - 2019-12-11 23:11 - 000003358 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1647520781-1985113409-3864015634-1000
2021-07-03 17:38 - 2019-12-11 22:59 - 000002415 _____ C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-03 17:38 - 2015-07-29 20:02 - 000000000 ___RD C:\Users\Fad\OneDrive
2021-07-03 10:05 - 2021-04-03 13:04 - 000000933 _____ C:\WINDOWS\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}.job
2021-07-02 19:46 - 2020-11-23 13:27 - 000000000 ____D C:\Users\Fad\AppData\Local\Discord
2021-07-02 19:45 - 2021-04-10 20:26 - 000000000 ____D C:\Program Files (x86)\CarteLoto
2021-07-02 19:45 - 2020-11-23 13:28 - 000000000 ____D C:\Users\Fad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2021-07-02 19:45 - 2020-11-23 13:28 - 000000000 ____D C:\Users\Fad\AppData\Roaming\discord
2021-07-02 19:09 - 2021-04-03 13:04 - 000003486 _____ C:\WINDOWS\system32\Tasks\EPSON ET-2750 Series Update {63901AB2-D67A-4D59-BEDC-76039C09DE44}
2021-07-02 19:09 - 2019-12-11 23:11 - 000003516 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-07-02 19:09 - 2019-12-11 23:11 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-07-02 19:09 - 2019-12-11 23:11 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000003292 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-02 19:09 - 2019-12-11 23:11 - 000003176 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-07-02 19:09 - 2019-12-11 23:11 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002786 _____ C:\WINDOWS\system32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-07-02 19:09 - 2019-12-11 23:11 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-07-02 19:09 - 2019-12-11 23:11 - 000002220 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-07-02 18:56 - 2015-06-20 00:01 - 000000000 ____D C:\Users\Fad\NiouzeFire_Plus
2021-07-02 18:48 - 2021-01-30 12:32 - 000000000 ____D C:\Users\Fad\Desktop\rapport de stage 2
2021-07-02 18:46 - 2015-06-19 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2021-07-02 18:32 - 2015-06-19 15:46 - 000000000 ____D C:\Users\Fad\AppData\Local\VirtualStore
2021-07-01 16:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-06-11 09:36 - 2020-11-20 09:36 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-09 10:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-06-09 10:19 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-09 09:17 - 2015-06-19 17:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-09 09:12 - 2015-06-19 17:25 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2020-07-13 16:21 - 2020-11-17 10:42 - 138722744 _____ (LifeScan, Inc.) C:\Users\Fad\otrdtt_patient_windows_FR.exe
2020-06-05 20:00 - 2020-06-05 20:00 - 024166400 _____ () C:\Program Files (x86)\GUT3F24.tmp
2020-06-08 08:49 - 2020-06-08 08:49 - 024166400 _____ () C:\Program Files (x86)\GUT697A.tmp
2020-06-06 11:04 - 2020-06-06 11:04 - 024166400 _____ () C:\Program Files (x86)\GUT6A06.tmp
2020-06-05 15:00 - 2020-06-05 15:00 - 024166400 _____ () C:\Program Files (x86)\GUT7A9A.tmp
2020-06-02 15:00 - 2020-06-02 15:00 - 024166400 _____ () C:\Program Files (x86)\GUT8DD9.tmp
2020-06-04 19:00 - 2020-06-04 19:00 - 024166400 _____ () C:\Program Files (x86)\GUTA034.tmp
2020-06-05 09:24 - 2020-06-05 09:24 - 024166400 _____ () C:\Program Files (x86)\GUTABF5.tmp
2020-06-07 10:54 - 2020-06-07 10:54 - 024166400 _____ () C:\Program Files (x86)\GUTCBF.tmp
2020-06-08 14:00 - 2020-06-08 14:00 - 024166400 _____ () C:\Program Files (x86)\GUTCF8.tmp
2020-06-06 16:00 - 2020-06-06 16:00 - 024166400 _____ () C:\Program Files (x86)\GUTD25F.tmp
2020-06-07 22:00 - 2020-06-07 22:00 - 024166400 _____ () C:\Program Files (x86)\GUTDD3C.tmp
2020-06-08 19:00 - 2020-06-08 19:00 - 024166400 _____ () C:\Program Files (x86)\GUTF7D1.tmp
2020-06-07 16:00 - 2020-06-07 16:00 - 024166400 _____ () C:\Program Files (x86)\GUTFC04.tmp
2015-06-20 14:50 - 2018-01-25 11:55 - 021405208 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2016-10-31 10:55 - 2016-10-31 13:29 - 000001856 _____ () C:\Users\Fad\AppData\Roaming\lua_setup_log.txt
2021-07-03 18:50 - 2021-07-03 18:50 - 000489029 _____ () C:\Users\Fad\AppData\Local\ars.cache
2021-07-03 18:50 - 2021-07-03 18:50 - 000918531 _____ () C:\Users\Fad\AppData\Local\census.cache
2021-07-03 18:31 - 2021-07-03 18:31 - 000000036 _____ () C:\Users\Fad\AppData\Local\housecall.guid.cache
2018-10-01 12:42 - 2018-10-01 12:42 - 000000000 _____ () C:\Users\Fad\AppData\Local\oobelibMkey.log
2021-07-03 18:35 - 2021-07-03 18:35 - 000000010 _____ () C:\Users\Fad\AppData\Local\sponge.last.runtime.cache
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <==== ATTENTION
==================== Fin de FRST.txt ========================