Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-08-2021
Exécuté par Beghdad A (administrateur) sur BEGHDADA (Acer Aspire E1-570) (16-08-2021 18:25:52)
Exécuté depuis C:\Users\Beghdad A\Desktop
Profils chargés: Beghdad A
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(CANON INC. -> CANON INC.) C:\Windows\System32\CNAB4RPD.EXE
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\pingsender.exe
(Piriform Software Ltd) [Fichier non signé] C:\Program Files\CCleaner\CCleaner64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-08-16] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32427008 2021-01-13] (Piriform Software Ltd) [Fichier non signé]
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\...\Print\Monitors\CNAB4 Monitor: C:\Windows\system32\CNAB4LMD.DLL [58880 2010-01-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\FPP4:: C:\Windows\system32\fppmon4.dll [242424 2012-03-08] (FinePrint Software, LLC -> FinePrint Software, LLC)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [2061184 2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\ZARPRN Monitor: C:\Windows\system32\zarprnmon64.dll [47616 2010-08-19] () [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.131\Installer\chrmstp.exe [2021-08-03] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Status Window.lnk [2020-10-06]
ShortcutTarget: Canon LBP2900 Status Window.lnk -> C:\Windows\System32\spool\drivers\x64\3\CNAB4LAD.EXE (CANON INC. -> CANON INC.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0676DE16-2997-45F4-B86D-9FED5DD9AB83} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-04] (Google LLC -> Google LLC)
Task: {148E501B-AFB0-4FCD-B84B-D5AAD8B016FB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24611720 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {2598EFBB-F811-4EAE-BD2A-273A0E2DBF15} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {3C704095-F939-47C8-B0E2-935D798C36CF} - System32\Tasks\{23A2B308-BE25-43F8-9B51-0DACBDCA851C} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {41384A65-1826-4C1A-BC2B-EB8F44E8C01A} - System32\Tasks\{6631B2BD-5F58-4E0C-9A67-E69900C80F50} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Desktop\vstor_redist.exe" -d "C:\Users\Beghdad A\Desktop"
Task: {51E82917-FFD0-4E3D-A754-E0B7ABD94DAD} - System32\Tasks\{81927336-C20C-4AF3-B1BB-C250C22F27E8} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.3\OInstall.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.3"
Task: {71189641-0C8A-47EE-BC00-F25845CF8723} - System32\Tasks\{AE78A5BC-7812-4F27-8A2C-3B35C2404A4B} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Desktop\Wireless LAN_Broadcom_6.30.223.170_W81x64_A\WLAN_Broadcom_6.30.223.170_W81x64\Setup.exe" -d "C:\Users\Beghdad A\Desktop\Wireless LAN_Broadcom_6.30.223.170_W81x64_A\WLAN_Broadcom_6.30.223.170_W81x64"
Task: {876FAF9E-75F4-4439-A6D7-B7D95F2EB2C5} - System32\Tasks\{E32977F5-D7CF-4092-9955-90A1D6936B1B} => D:\برامج\Mon PC\Office 2019 Pro Plus Francais\Office Pro Plus 2019 Francais\Setup.exe [429136 2018-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8A8B46C5-99ED-4BC1-90D6-E9F05F895C41} - System32\Tasks\CorelUpdateHelperTask-074B7BB69844E4868E529CC3B4A34C88 => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe
Task: {9521BC8D-032D-4CCA-8D81-B542CB6EFA09} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2687A03-3DAC-485F-9E52-D9F20030B0BD} - System32\Tasks\{1309E0FF-6417-4D48-B967-23278E4DA28B} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.8\Office 2013-2019 C2R Install v6.4.8\OInstallLite.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.8\Office 2013-2019 C2R Install v6.4.8"
Task: {C2FEA261-67E7-46CE-8172-06636B620210} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-04] (Google LLC -> Google LLC)
Task: {D9E27AD6-6B43-4A0D-9F1E-AA448BE0BBB0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {DBCD0976-9FD7-4F67-80CA-1B68FD30D70E} - System32\Tasks\{C779679D-C66A-4A43-BD5D-7814F5601F92} => C:\Windows\system32\pcalua.exe -a "D:\برامج\Albayan - إضافة البيان البحثية\Albayan - الجديد في هذا الإصدار\vstor_redist.exe" -d "D:\برامج\Albayan - إضافة البيان البحثية\Albayan - الجديد في هذا الإصدار"
Task: {EC0C4A04-7F3F-4F32-B0D9-02984741EE06} - System32\Tasks\{AF146469-56EF-4F13-8EA6-D87EB07E09C3} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {ED2C17A1-D87C-440E-9524-E1C1983726BB} - System32\Tasks\{E1961689-C2C0-4C16-89B2-E0893863800E} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\ES_x64\ESSP_x64.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\ES_x64"
Task: {F31B77C2-0E53-4838-9185-B649B50CD44C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24611720 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {F642F05F-5E43-41F1-A480-21C306C1545E} - System32\Tasks\{66E2D47A-D347-461A-B170-7CA90CAA6625} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Force Office Removal\Force Office Removal.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Force Office Removal"
Task: {F651D953-FCEC-476C-8AF9-746D39C004C3} - System32\Tasks\{6C408DFD-C1EC-4A9D-BC0D-1AE36D31032C} => C:\Windows\system32\pcalua.exe -a "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2\OInstall.exe" -d "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2" -> -a "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2\OInstall.exe" -d "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العمل (l'élément de données a 96 caractères en plus).
Task: {F6D66616-E121-4194-83F3-FBD8CE062327} - System32\Tasks\{E6233ED7-AC09-4045-8C0F-A97C543EA3E1} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{293A0149-3055-4841-A844-9593A5FC736E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{503485E6-C985-4C1D-A0F5-A602965AE973}: [DhcpNameServer] 192.168.42.129
FireFox:
========
FF DefaultProfile: jmr3yg91.default
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 [2021-08-16]
FF Session Restore: Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 -> hxxps://www.youtube.com
FF Extension: (Pray Times!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\azan-times@hamid.net.xpi [2021-01-19]
FF Extension: (Webmail Ad Blocker) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\gmailnoads@mywebber.com.xpi [2021-06-28]
FF Extension: (IDM Integration Module) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2021-03-05]
FF Extension: (uBlock Origin) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\uBlock0@raymondhill.net.xpi [2021-07-30]
FF Extension: (Download All Images) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2021-07-05]
FF Extension: (Éditeur de PDF en ligne (pdf2go.com)) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2021-01-19]
FF Extension: (Language Change) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{bd2c5f82-e5ff-4bb1-8fa5-dc834d32d232}.xpi [2021-03-18]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-07-27]
FF Extension: (DownThemAll!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2021-01-19]
FF Extension: (iDM Integration Extension) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{ed9a84e6-a04e-4d97-ad7e-b7414f2912eb}.xpi [2021-01-19]
FF Extension: (Add-ons Search Detection) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\features\{e80764ea-dec6-49bd-b0b8-814615cbda5a}\addons-search-detection@mozilla.com.xpi [2021-08-13]
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883 [2021-08-16]
FF Session Restore: Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883 -> est activé.
FF Extension: (Pray Times!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\azan-times@hamid.net.xpi [2020-10-11]
FF Extension: (Webmail Ad Blocker) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\gmailnoads@mywebber.com.xpi [2020-10-11]
FF Extension: (IDM Integration Module) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2020-10-11]
FF Extension: (uBlock Origin) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\uBlock0@raymondhill.net.xpi [2020-10-11]
FF Extension: (Download All Images) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2020-10-11]
FF Extension: (Éditeur de PDF en ligne (pdf2go.com)) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2020-10-11]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-10-11]
FF Extension: (DownThemAll!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2020-10-11]
FF Extension: (iDM Integration Extension) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{ed9a84e6-a04e-4d97-ad7e-b7414f2912eb}.xpi [2020-10-11]
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\jmr3yg91.default [2021-08-16]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2019-08-25] [UpdateUrl:hxxps://data.internetdownloadmanager.com/idmmzcc3/update.json]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Beghdad A\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Beghdad A\AppData\Roaming\IDM\idmmzcc5 [2020-08-05] [] [non signé]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin: Soda PDF 8 -> C:\Program Files\Soda PDF 8\np-previewer.dll [2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\TurboPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\TurboPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-08-16]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Beghdad A\AppData\Local\Google\Chrome\User Data\System Profile [2021-08-16]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-08-05]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-08-05]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11118960 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-16] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-16] (ESET, spol. s r.o. -> ESET)
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [7477704 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
S3 Soda PDF 8; C:\Program Files\Soda PDF 8\ws.exe [2263504 2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
S3 Soda PDF 8 CrashHandler; C:\Program Files\Soda PDF 8\crash-handler-ws.exe [920016 2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.242\WsAppService.exe [495720 2018-08-29] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169424 2021-08-16] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [123472 2021-08-12] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [194776 2021-08-16] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43904 2021-08-12] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [70232 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [55840 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [107456 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [199128 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220752 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [198888 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [69016 2021-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [146840 2021-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-16 18:25 - 2021-08-16 18:27 - 000025222 _____ C:\Users\Beghdad A\Desktop\FRST.txt
2021-08-16 18:18 - 2021-08-16 18:18 - 000000000 ____D C:\Users\Beghdad A\Desktop\Nouveau dossier
2021-08-16 18:11 - 2021-08-16 18:11 - 000198888 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000146840 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000069016 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\IGDump
2021-08-16 18:09 - 2021-08-16 18:09 - 000001171 _____ C:\Users\Beghdad A\Desktop\عهد الرافعي بالأدب والصحافة - Raccourci.lnk
2021-08-16 18:08 - 2021-08-16 18:08 - 000220752 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2021-08-16 18:08 - 2021-08-16 18:08 - 000001924 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-08-16 18:08 - 2021-08-16 18:08 - 000001165 _____ C:\Users\Beghdad A\Desktop\دراسة ديوان ابن مسايب أو ابن سهلة - Raccourci.lnk
2021-08-16 18:07 - 2021-08-16 18:07 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-08-16 17:45 - 2021-08-16 17:45 - 002300416 _____ (Farbar) C:\Users\Beghdad A\Desktop\FRST64.exe
2021-08-16 17:40 - 2021-08-16 17:40 - 000001110 _____ C:\Users\Beghdad A\Desktop\جدلية التقابل في المثل الشعبي الجزائري - Raccourci.lnk
2021-08-16 15:12 - 2021-08-16 15:12 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Thinstall
2021-08-16 15:12 - 2021-08-16 15:12 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Thinstall
2021-08-16 15:00 - 2021-08-16 15:00 - 000001529 _____ C:\1.txt
2021-08-16 12:30 - 2021-08-16 18:26 - 000000000 ____D C:\FRST
2021-08-15 11:10 - 2021-08-15 11:10 - 000000132 _____ C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS6 Prefs
2021-08-15 10:09 - 2021-08-15 10:09 - 000001456 _____ C:\Users\Beghdad A\AppData\Local\Adobe Enregistrer pour le Web 12.0 Prefs
2021-08-15 07:47 - 2021-08-15 09:24 - 008363093 _____ C:\Users\Beghdad A\Desktop\الفصل الثاني دلالات الأمكنة والابعاد.pdf
2021-08-12 20:19 - 2021-08-15 11:18 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Adobe
2021-08-12 19:47 - 2021-08-15 10:40 - 000000132 _____ C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS5 Prefs
2021-08-11 18:12 - 2021-08-11 18:12 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2021-08-11 18:11 - 2021-08-11 18:11 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Adobe
2021-08-11 18:11 - 2021-08-11 18:11 - 000000000 ____D C:\ProgramData\Adobe
2021-08-08 09:13 - 2021-08-16 17:17 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\PDFCool Studio
2021-08-08 09:10 - 2021-08-08 09:10 - 000000000 ____D C:\Program Files (x86)\IconCool Software
2021-08-08 09:10 - 2010-03-17 16:29 - 000007549 _____ C:\Windows\system32\novak7.ctm
2021-08-07 09:06 - 2021-08-07 18:41 - 000000000 __SHD C:\found.001
2021-08-07 09:06 - 2021-08-07 09:06 - 000003296 ____N C:\bootsqm.dat
2021-07-30 22:32 - 2021-07-30 22:32 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Ulead Systems
2021-07-30 22:29 - 2021-07-30 22:29 - 000003144 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTask-074B7BB69844E4868E529CC3B4A34C88
2021-07-30 22:18 - 2021-07-30 22:18 - 000000000 ____D C:\ProgramData\UniqueId
2021-07-30 20:15 - 2021-07-30 20:15 - 000000000 ____D C:\Program Files (x86)\PDF Helper
2021-07-30 17:19 - 2021-07-30 17:19 - 000001433 _____ C:\Windows\system32\تجليات التفاعل الثقافي الجزائري المغاربي من خلال أعمال ابن رشيق الأدبية والنقدية The manifestations of the Algerian-Maghreb cultural interaction through works of Ibn rachik literary and critica.lnk
2021-07-25 16:12 - 2021-07-25 16:48 - 000000000 ____D C:\Users\Beghdad A\Desktop\دليــل إعــداد أطروحة الدكتوراه
2021-07-23 17:44 - 2021-08-16 17:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-07-21 14:50 - 2021-07-21 14:50 - 000001157 _____ C:\Users\Beghdad A\Desktop\جديد بحوث سيميائية - Raccourci.lnk
2021-07-19 09:53 - 2021-07-19 09:53 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Batchwork
2021-07-17 22:51 - 2021-07-17 22:51 - 000000000 ____D C:\Users\Beghdad A\Desktop\قراءة في مقدمة
2021-07-17 22:42 - 2021-07-17 22:46 - 000000000 ____D C:\Program Files (x86)\SwifDooPDF
2021-07-17 22:42 - 2021-07-17 22:45 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\SwifDooPDFData
2021-07-17 22:42 - 2021-07-17 22:42 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\AB0B9980-8A16-4595-89C0-FD6EF580CDAA
2021-07-17 22:34 - 2021-07-17 22:34 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Tracker Software
2021-07-17 22:33 - 2021-08-07 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tracker Software
2021-07-17 22:33 - 2021-07-17 22:33 - 000000000 ____D C:\ProgramData\FileOpen
2021-07-17 22:33 - 2021-07-12 21:30 - 002061184 _____ (Tracker Software Products (Canada) Ltd.) C:\Windows\system32\pxcpmL.dll
2021-07-17 22:32 - 2021-07-17 22:33 - 000000000 ____D C:\Program Files\Tracker Software
2021-07-17 17:56 - 2021-07-17 17:56 - 000012310 _____ C:\ProgramData\itjalhsf.rge
2021-07-17 17:56 - 2021-07-17 17:56 - 000000016 _____ C:\ProgramData\mntemp
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\MovaviPicverse
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Movavi
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\CrashRpt
2021-07-17 13:41 - 2021-07-17 13:41 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Lanmisoft
2021-07-17 09:52 - 2021-07-17 09:52 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\cache
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-16 18:25 - 2020-08-04 17:25 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\Mozilla
2021-08-16 18:14 - 2009-07-14 05:45 - 000025872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-08-16 18:14 - 2009-07-14 05:45 - 000025872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-08-16 18:13 - 2020-08-05 21:33 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Deployment
2021-08-16 18:13 - 2020-08-04 20:38 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\Temp
2021-08-16 18:12 - 2020-08-04 17:25 - 000000000 ____D C:\ProgramData\Mozilla
2021-08-16 18:08 - 2020-08-04 20:25 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-16 18:07 - 2021-01-18 21:22 - 000000000 ____D C:\Program Files\CCleaner
2021-08-16 18:07 - 2020-08-05 20:33 - 000000000 __SHD C:\Users\Beghdad A\IntelGraphicsProfiles
2021-08-16 18:05 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-08-16 18:04 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\DMCache
2021-08-16 18:02 - 2021-05-16 15:14 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-08-16 17:51 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-08-16 17:46 - 2021-05-03 15:53 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2021-08-16 17:46 - 2020-08-10 07:47 - 000194776 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000169424 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000107456 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000070232 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000055840 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys
2021-08-16 17:43 - 2020-08-23 14:35 - 000000000 ____D C:\ProgramData\Package Cache
2021-08-16 17:37 - 2020-08-04 11:40 - 000000000 ____D C:\Users\Beghdad A
2021-08-16 17:17 - 2021-06-27 23:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Everything
2021-08-16 17:17 - 2021-05-09 16:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2021-08-16 17:17 - 2021-05-09 16:18 - 000000000 ____D C:\Program Files\Hardcoded Software
2021-08-16 17:17 - 2020-08-14 11:53 - 000000000 ____D C:\ProgramData\ZARPRN
2021-08-16 17:17 - 2020-08-05 15:06 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\RaimaRadioPro
2021-08-16 17:17 - 2020-08-04 21:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-08-16 17:17 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\Downloads\Compressed
2021-08-16 17:17 - 2020-08-04 20:31 - 000000000 ____D C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
2021-08-16 17:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2021-08-16 17:17 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2021-08-16 15:20 - 2021-06-27 23:22 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Everything
2021-08-16 14:24 - 2021-06-26 11:56 - 000000000 ____D C:\Users\Beghdad A\Desktop\الإطارات - Bordures
2021-08-16 11:09 - 2020-08-14 11:42 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\ZHP
2021-08-15 10:42 - 2020-08-28 12:14 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\CrashDumps
2021-08-12 19:59 - 2021-02-01 21:48 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Soda PDF 8
2021-08-12 19:19 - 2020-08-10 07:47 - 000123472 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2021-08-12 19:19 - 2020-08-10 07:47 - 000043904 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
2021-08-07 20:49 - 2021-07-15 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avanquest
2021-08-07 20:49 - 2021-06-27 23:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
2021-08-07 20:47 - 2020-11-30 21:58 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Foxit Software
2021-08-06 19:24 - 2020-11-30 22:00 - 000000000 ____D C:\ProgramData\Foxit Software
2021-08-06 19:05 - 2020-11-06 19:35 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\YCanPDF
2021-08-06 09:11 - 2020-08-04 20:04 - 000000000 ____D C:\Users\Beghdad A\Downloads\Telegram Desktop
2021-08-05 13:30 - 2020-08-04 20:25 - 000003504 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-05 13:30 - 2020-08-04 20:25 - 000003376 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-29 12:40 - 2021-04-20 22:33 - 000161288 _____ C:\Users\Beghdad A\AppData\Local\GDIPFONTCACHEV1.DAT
2021-07-29 12:38 - 2021-04-20 22:28 - 000590496 _____ C:\Windows\system32\FNTCACHE.DAT
2021-07-27 20:45 - 2020-08-05 19:01 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\IDM
2021-07-24 22:18 - 2020-08-05 15:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\vlc
2021-07-17 23:14 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\Downloads\Video
2021-07-17 22:45 - 2021-07-05 08:44 - 017271837 _____ C:\Users\Beghdad A\Desktop\تراث كربلاء العدد 4.pdf
2021-07-17 22:32 - 2020-10-26 19:34 - 000000000 ____D C:\ProgramData\Tracker Software
2021-07-17 12:44 - 2009-07-14 16:24 - 000754028 _____ C:\Windows\system32\perfh00C.dat
2021-07-17 12:44 - 2009-07-14 16:24 - 000155090 _____ C:\Windows\system32\perfc00C.dat
2021-07-17 12:44 - 2009-07-14 06:13 - 001674396 _____ C:\Windows\system32\PerfStringBackup.INI
==================== Fichiers à la racine de certains dossiers ========
2021-08-12 19:47 - 2021-08-15 10:40 - 000000132 _____ () C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS5 Prefs
2021-08-15 11:10 - 2021-08-15 11:10 - 000000132 _____ () C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS6 Prefs
2020-08-05 13:50 - 2020-08-05 14:01 - 000003170 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMdefextmap.dat
2020-08-05 13:53 - 2020-08-05 14:55 - 000000220 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMfoldresHistory.txt
2020-08-05 13:50 - 2020-08-05 14:01 - 000003170 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMurlexclist.dat
2021-08-15 10:09 - 2021-08-15 10:09 - 000001456 _____ () C:\Users\Beghdad A\AppData\Local\Adobe Enregistrer pour le Web 12.0 Prefs
2020-08-13 12:46 - 2020-08-13 12:46 - 000000001 _____ () C:\Users\Beghdad A\AppData\Local\llftool.4.40.agreement
2020-10-14 09:05 - 2020-10-14 09:05 - 000000028 _____ () C:\Users\Beghdad A\AppData\Local\pdfcom.ini
2020-09-06 17:12 - 2020-09-06 17:12 - 000000000 _____ () C:\Users\Beghdad A\AppData\Local\{8A1DE995-A4F4-4B64-B9FA-A273EC8FA660}
2021-03-20 11:11 - 2021-03-20 11:11 - 000000000 _____ () C:\Users\Beghdad A\AppData\Local\{AF095711-9307-4B09-8E0F-DE6843476D98}
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2021-08-06 20:14
==================== Fin de FRST.txt ========================
Exécuté par Beghdad A (administrateur) sur BEGHDADA (Acer Aspire E1-570) (16-08-2021 18:25:52)
Exécuté depuis C:\Users\Beghdad A\Desktop
Profils chargés: Beghdad A
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(CANON INC. -> CANON INC.) C:\Windows\System32\CNAB4RPD.EXE
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\pingsender.exe
(Piriform Software Ltd) [Fichier non signé] C:\Program Files\CCleaner\CCleaner64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-08-16] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32427008 2021-01-13] (Piriform Software Ltd) [Fichier non signé]
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\...\Print\Monitors\CNAB4 Monitor: C:\Windows\system32\CNAB4LMD.DLL [58880 2010-01-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\FPP4:: C:\Windows\system32\fppmon4.dll [242424 2012-03-08] (FinePrint Software, LLC -> FinePrint Software, LLC)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [2061184 2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\ZARPRN Monitor: C:\Windows\system32\zarprnmon64.dll [47616 2010-08-19] () [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.131\Installer\chrmstp.exe [2021-08-03] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Status Window.lnk [2020-10-06]
ShortcutTarget: Canon LBP2900 Status Window.lnk -> C:\Windows\System32\spool\drivers\x64\3\CNAB4LAD.EXE (CANON INC. -> CANON INC.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0676DE16-2997-45F4-B86D-9FED5DD9AB83} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-04] (Google LLC -> Google LLC)
Task: {148E501B-AFB0-4FCD-B84B-D5AAD8B016FB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24611720 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {2598EFBB-F811-4EAE-BD2A-273A0E2DBF15} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {3C704095-F939-47C8-B0E2-935D798C36CF} - System32\Tasks\{23A2B308-BE25-43F8-9B51-0DACBDCA851C} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {41384A65-1826-4C1A-BC2B-EB8F44E8C01A} - System32\Tasks\{6631B2BD-5F58-4E0C-9A67-E69900C80F50} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Desktop\vstor_redist.exe" -d "C:\Users\Beghdad A\Desktop"
Task: {51E82917-FFD0-4E3D-A754-E0B7ABD94DAD} - System32\Tasks\{81927336-C20C-4AF3-B1BB-C250C22F27E8} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.3\OInstall.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.3"
Task: {71189641-0C8A-47EE-BC00-F25845CF8723} - System32\Tasks\{AE78A5BC-7812-4F27-8A2C-3B35C2404A4B} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Desktop\Wireless LAN_Broadcom_6.30.223.170_W81x64_A\WLAN_Broadcom_6.30.223.170_W81x64\Setup.exe" -d "C:\Users\Beghdad A\Desktop\Wireless LAN_Broadcom_6.30.223.170_W81x64_A\WLAN_Broadcom_6.30.223.170_W81x64"
Task: {876FAF9E-75F4-4439-A6D7-B7D95F2EB2C5} - System32\Tasks\{E32977F5-D7CF-4092-9955-90A1D6936B1B} => D:\برامج\Mon PC\Office 2019 Pro Plus Francais\Office Pro Plus 2019 Francais\Setup.exe [429136 2018-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8A8B46C5-99ED-4BC1-90D6-E9F05F895C41} - System32\Tasks\CorelUpdateHelperTask-074B7BB69844E4868E529CC3B4A34C88 => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe
Task: {9521BC8D-032D-4CCA-8D81-B542CB6EFA09} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2687A03-3DAC-485F-9E52-D9F20030B0BD} - System32\Tasks\{1309E0FF-6417-4D48-B967-23278E4DA28B} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.8\Office 2013-2019 C2R Install v6.4.8\OInstallLite.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Office 2013-2019 C2R Install v6.4.8\Office 2013-2019 C2R Install v6.4.8"
Task: {C2FEA261-67E7-46CE-8172-06636B620210} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-04] (Google LLC -> Google LLC)
Task: {D9E27AD6-6B43-4A0D-9F1E-AA448BE0BBB0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {DBCD0976-9FD7-4F67-80CA-1B68FD30D70E} - System32\Tasks\{C779679D-C66A-4A43-BD5D-7814F5601F92} => C:\Windows\system32\pcalua.exe -a "D:\برامج\Albayan - إضافة البيان البحثية\Albayan - الجديد في هذا الإصدار\vstor_redist.exe" -d "D:\برامج\Albayan - إضافة البيان البحثية\Albayan - الجديد في هذا الإصدار"
Task: {EC0C4A04-7F3F-4F32-B0D9-02984741EE06} - System32\Tasks\{AF146469-56EF-4F13-8EA6-D87EB07E09C3} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {ED2C17A1-D87C-440E-9524-E1C1983726BB} - System32\Tasks\{E1961689-C2C0-4C16-89B2-E0893863800E} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\ES_x64\ESSP_x64.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\ES_x64"
Task: {F31B77C2-0E53-4838-9185-B649B50CD44C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24611720 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {F642F05F-5E43-41F1-A480-21C306C1545E} - System32\Tasks\{66E2D47A-D347-461A-B170-7CA90CAA6625} => C:\Windows\system32\pcalua.exe -a "C:\Users\Beghdad A\Downloads\Compressed\Force Office Removal\Force Office Removal.exe" -d "C:\Users\Beghdad A\Downloads\Compressed\Force Office Removal"
Task: {F651D953-FCEC-476C-8AF9-746D39C004C3} - System32\Tasks\{6C408DFD-C1EC-4A9D-BC0D-1AE36D31032C} => C:\Windows\system32\pcalua.exe -a "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2\OInstall.exe" -d "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2" -> -a "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العملاقة لتفعيل ميكروسوفت\KMS Tools Portable 31.12.2016\Programs\Office 2013-2016 C2R Install v5.9.2\OInstall.exe" -d "I:\برامج - Logiciels\Drivers Asus X553M + Installation Logiciels\أدوات التفعيل\الاداة العمل (l'élément de données a 96 caractères en plus).
Task: {F6D66616-E121-4194-83F3-FBD8CE062327} - System32\Tasks\{E6233ED7-AC09-4045-8C0F-A97C543EA3E1} => D:\برامج\Office 2016 Pro Plus Francais\setup.exe [262336 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{293A0149-3055-4841-A844-9593A5FC736E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{503485E6-C985-4C1D-A0F5-A602965AE973}: [DhcpNameServer] 192.168.42.129
FireFox:
========
FF DefaultProfile: jmr3yg91.default
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 [2021-08-16]
FF Session Restore: Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412 -> hxxps://www.youtube.com
FF Extension: (Pray Times!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\azan-times@hamid.net.xpi [2021-01-19]
FF Extension: (Webmail Ad Blocker) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\gmailnoads@mywebber.com.xpi [2021-06-28]
FF Extension: (IDM Integration Module) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2021-03-05]
FF Extension: (uBlock Origin) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\uBlock0@raymondhill.net.xpi [2021-07-30]
FF Extension: (Download All Images) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2021-07-05]
FF Extension: (Éditeur de PDF en ligne (pdf2go.com)) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2021-01-19]
FF Extension: (Language Change) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{bd2c5f82-e5ff-4bb1-8fa5-dc834d32d232}.xpi [2021-03-18]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-07-27]
FF Extension: (DownThemAll!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2021-01-19]
FF Extension: (iDM Integration Extension) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\Extensions\{ed9a84e6-a04e-4d97-ad7e-b7414f2912eb}.xpi [2021-01-19]
FF Extension: (Add-ons Search Detection) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\0co8v77p.Utilisateur par défaut-1611074923412\features\{e80764ea-dec6-49bd-b0b8-814615cbda5a}\addons-search-detection@mozilla.com.xpi [2021-08-13]
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883 [2021-08-16]
FF Session Restore: Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883 -> est activé.
FF Extension: (Pray Times!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\azan-times@hamid.net.xpi [2020-10-11]
FF Extension: (Webmail Ad Blocker) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\gmailnoads@mywebber.com.xpi [2020-10-11]
FF Extension: (IDM Integration Module) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2020-10-11]
FF Extension: (uBlock Origin) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\uBlock0@raymondhill.net.xpi [2020-10-11]
FF Extension: (Download All Images) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2020-10-11]
FF Extension: (Éditeur de PDF en ligne (pdf2go.com)) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2020-10-11]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-10-11]
FF Extension: (DownThemAll!) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2020-10-11]
FF Extension: (iDM Integration Extension) - C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\5icpjysr.default-release-1602368838883\Extensions\{ed9a84e6-a04e-4d97-ad7e-b7414f2912eb}.xpi [2020-10-11]
FF ProfilePath: C:\Users\Beghdad A\AppData\Roaming\Mozilla\Firefox\Profiles\jmr3yg91.default [2021-08-16]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2019-08-25] [UpdateUrl:hxxps://data.internetdownloadmanager.com/idmmzcc3/update.json]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Beghdad A\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Beghdad A\AppData\Roaming\IDM\idmmzcc5 [2020-08-05] [] [non signé]
FF HKU\S-1-5-21-2155211433-1389179753-596404502-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin: Soda PDF 8 -> C:\Program Files\Soda PDF 8\np-previewer.dll [2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\TurboPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\TurboPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2155211433-1389179753-596404502-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-07-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-08-16]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Beghdad A\AppData\Local\Google\Chrome\User Data\System Profile [2021-08-16]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-08-05]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-08-05]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11118960 2020-08-06] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-16] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-16] (ESET, spol. s r.o. -> ESET)
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [7477704 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
S3 Soda PDF 8; C:\Program Files\Soda PDF 8\ws.exe [2263504 2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
S3 Soda PDF 8 CrashHandler; C:\Program Files\Soda PDF 8\crash-handler-ws.exe [920016 2016-04-19] (LULU Software -> LULU SOFTWARE LIMITED)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.242\WsAppService.exe [495720 2018-08-29] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169424 2021-08-16] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [123472 2021-08-12] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [194776 2021-08-16] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43904 2021-08-12] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [70232 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [55840 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [107456 2021-08-16] (ESET, spol. s r.o. -> ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [199128 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220752 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [198888 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [69016 2021-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-08-16] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [146840 2021-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-16 18:25 - 2021-08-16 18:27 - 000025222 _____ C:\Users\Beghdad A\Desktop\FRST.txt
2021-08-16 18:18 - 2021-08-16 18:18 - 000000000 ____D C:\Users\Beghdad A\Desktop\Nouveau dossier
2021-08-16 18:11 - 2021-08-16 18:11 - 000198888 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000146840 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000069016 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2021-08-16 18:11 - 2021-08-16 18:11 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\IGDump
2021-08-16 18:09 - 2021-08-16 18:09 - 000001171 _____ C:\Users\Beghdad A\Desktop\عهد الرافعي بالأدب والصحافة - Raccourci.lnk
2021-08-16 18:08 - 2021-08-16 18:08 - 000220752 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2021-08-16 18:08 - 2021-08-16 18:08 - 000001924 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-08-16 18:08 - 2021-08-16 18:08 - 000001165 _____ C:\Users\Beghdad A\Desktop\دراسة ديوان ابن مسايب أو ابن سهلة - Raccourci.lnk
2021-08-16 18:07 - 2021-08-16 18:07 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-08-16 17:45 - 2021-08-16 17:45 - 002300416 _____ (Farbar) C:\Users\Beghdad A\Desktop\FRST64.exe
2021-08-16 17:40 - 2021-08-16 17:40 - 000001110 _____ C:\Users\Beghdad A\Desktop\جدلية التقابل في المثل الشعبي الجزائري - Raccourci.lnk
2021-08-16 15:12 - 2021-08-16 15:12 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Thinstall
2021-08-16 15:12 - 2021-08-16 15:12 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Thinstall
2021-08-16 15:00 - 2021-08-16 15:00 - 000001529 _____ C:\1.txt
2021-08-16 12:30 - 2021-08-16 18:26 - 000000000 ____D C:\FRST
2021-08-15 11:10 - 2021-08-15 11:10 - 000000132 _____ C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS6 Prefs
2021-08-15 10:09 - 2021-08-15 10:09 - 000001456 _____ C:\Users\Beghdad A\AppData\Local\Adobe Enregistrer pour le Web 12.0 Prefs
2021-08-15 07:47 - 2021-08-15 09:24 - 008363093 _____ C:\Users\Beghdad A\Desktop\الفصل الثاني دلالات الأمكنة والابعاد.pdf
2021-08-12 20:19 - 2021-08-15 11:18 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Adobe
2021-08-12 19:47 - 2021-08-15 10:40 - 000000132 _____ C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS5 Prefs
2021-08-11 18:12 - 2021-08-11 18:12 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2021-08-11 18:11 - 2021-08-11 18:11 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Adobe
2021-08-11 18:11 - 2021-08-11 18:11 - 000000000 ____D C:\ProgramData\Adobe
2021-08-08 09:13 - 2021-08-16 17:17 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\PDFCool Studio
2021-08-08 09:10 - 2021-08-08 09:10 - 000000000 ____D C:\Program Files (x86)\IconCool Software
2021-08-08 09:10 - 2010-03-17 16:29 - 000007549 _____ C:\Windows\system32\novak7.ctm
2021-08-07 09:06 - 2021-08-07 18:41 - 000000000 __SHD C:\found.001
2021-08-07 09:06 - 2021-08-07 09:06 - 000003296 ____N C:\bootsqm.dat
2021-07-30 22:32 - 2021-07-30 22:32 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Ulead Systems
2021-07-30 22:29 - 2021-07-30 22:29 - 000003144 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTask-074B7BB69844E4868E529CC3B4A34C88
2021-07-30 22:18 - 2021-07-30 22:18 - 000000000 ____D C:\ProgramData\UniqueId
2021-07-30 20:15 - 2021-07-30 20:15 - 000000000 ____D C:\Program Files (x86)\PDF Helper
2021-07-30 17:19 - 2021-07-30 17:19 - 000001433 _____ C:\Windows\system32\تجليات التفاعل الثقافي الجزائري المغاربي من خلال أعمال ابن رشيق الأدبية والنقدية The manifestations of the Algerian-Maghreb cultural interaction through works of Ibn rachik literary and critica.lnk
2021-07-25 16:12 - 2021-07-25 16:48 - 000000000 ____D C:\Users\Beghdad A\Desktop\دليــل إعــداد أطروحة الدكتوراه
2021-07-23 17:44 - 2021-08-16 17:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-07-21 14:50 - 2021-07-21 14:50 - 000001157 _____ C:\Users\Beghdad A\Desktop\جديد بحوث سيميائية - Raccourci.lnk
2021-07-19 09:53 - 2021-07-19 09:53 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Batchwork
2021-07-17 22:51 - 2021-07-17 22:51 - 000000000 ____D C:\Users\Beghdad A\Desktop\قراءة في مقدمة
2021-07-17 22:42 - 2021-07-17 22:46 - 000000000 ____D C:\Program Files (x86)\SwifDooPDF
2021-07-17 22:42 - 2021-07-17 22:45 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\SwifDooPDFData
2021-07-17 22:42 - 2021-07-17 22:42 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\AB0B9980-8A16-4595-89C0-FD6EF580CDAA
2021-07-17 22:34 - 2021-07-17 22:34 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Tracker Software
2021-07-17 22:33 - 2021-08-07 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tracker Software
2021-07-17 22:33 - 2021-07-17 22:33 - 000000000 ____D C:\ProgramData\FileOpen
2021-07-17 22:33 - 2021-07-12 21:30 - 002061184 _____ (Tracker Software Products (Canada) Ltd.) C:\Windows\system32\pxcpmL.dll
2021-07-17 22:32 - 2021-07-17 22:33 - 000000000 ____D C:\Program Files\Tracker Software
2021-07-17 17:56 - 2021-07-17 17:56 - 000012310 _____ C:\ProgramData\itjalhsf.rge
2021-07-17 17:56 - 2021-07-17 17:56 - 000000016 _____ C:\ProgramData\mntemp
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\MovaviPicverse
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Movavi
2021-07-17 17:56 - 2021-07-17 17:56 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\CrashRpt
2021-07-17 13:41 - 2021-07-17 13:41 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Lanmisoft
2021-07-17 09:52 - 2021-07-17 09:52 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\cache
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-16 18:25 - 2020-08-04 17:25 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\Mozilla
2021-08-16 18:14 - 2009-07-14 05:45 - 000025872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-08-16 18:14 - 2009-07-14 05:45 - 000025872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-08-16 18:13 - 2020-08-05 21:33 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Deployment
2021-08-16 18:13 - 2020-08-04 20:38 - 000000000 ____D C:\Users\Beghdad A\AppData\LocalLow\Temp
2021-08-16 18:12 - 2020-08-04 17:25 - 000000000 ____D C:\ProgramData\Mozilla
2021-08-16 18:08 - 2020-08-04 20:25 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-16 18:07 - 2021-01-18 21:22 - 000000000 ____D C:\Program Files\CCleaner
2021-08-16 18:07 - 2020-08-05 20:33 - 000000000 __SHD C:\Users\Beghdad A\IntelGraphicsProfiles
2021-08-16 18:05 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-08-16 18:04 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\DMCache
2021-08-16 18:02 - 2021-05-16 15:14 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-08-16 17:51 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-08-16 17:46 - 2021-05-03 15:53 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2021-08-16 17:46 - 2020-08-10 07:47 - 000194776 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000169424 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000107456 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000070232 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2021-08-16 17:46 - 2020-08-10 07:47 - 000055840 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys
2021-08-16 17:43 - 2020-08-23 14:35 - 000000000 ____D C:\ProgramData\Package Cache
2021-08-16 17:37 - 2020-08-04 11:40 - 000000000 ____D C:\Users\Beghdad A
2021-08-16 17:17 - 2021-06-27 23:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Everything
2021-08-16 17:17 - 2021-05-09 16:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2021-08-16 17:17 - 2021-05-09 16:18 - 000000000 ____D C:\Program Files\Hardcoded Software
2021-08-16 17:17 - 2020-08-14 11:53 - 000000000 ____D C:\ProgramData\ZARPRN
2021-08-16 17:17 - 2020-08-05 15:06 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\RaimaRadioPro
2021-08-16 17:17 - 2020-08-04 21:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-08-16 17:17 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\Downloads\Compressed
2021-08-16 17:17 - 2020-08-04 20:31 - 000000000 ____D C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
2021-08-16 17:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2021-08-16 17:17 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2021-08-16 15:20 - 2021-06-27 23:22 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\Everything
2021-08-16 14:24 - 2021-06-26 11:56 - 000000000 ____D C:\Users\Beghdad A\Desktop\الإطارات - Bordures
2021-08-16 11:09 - 2020-08-14 11:42 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\ZHP
2021-08-15 10:42 - 2020-08-28 12:14 - 000000000 ____D C:\Users\Beghdad A\AppData\Local\CrashDumps
2021-08-12 19:59 - 2021-02-01 21:48 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Soda PDF 8
2021-08-12 19:19 - 2020-08-10 07:47 - 000123472 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2021-08-12 19:19 - 2020-08-10 07:47 - 000043904 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
2021-08-07 20:49 - 2021-07-15 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avanquest
2021-08-07 20:49 - 2021-06-27 23:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
2021-08-07 20:47 - 2020-11-30 21:58 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\Foxit Software
2021-08-06 19:24 - 2020-11-30 22:00 - 000000000 ____D C:\ProgramData\Foxit Software
2021-08-06 19:05 - 2020-11-06 19:35 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\YCanPDF
2021-08-06 09:11 - 2020-08-04 20:04 - 000000000 ____D C:\Users\Beghdad A\Downloads\Telegram Desktop
2021-08-05 13:30 - 2020-08-04 20:25 - 000003504 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-05 13:30 - 2020-08-04 20:25 - 000003376 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-29 12:40 - 2021-04-20 22:33 - 000161288 _____ C:\Users\Beghdad A\AppData\Local\GDIPFONTCACHEV1.DAT
2021-07-29 12:38 - 2021-04-20 22:28 - 000590496 _____ C:\Windows\system32\FNTCACHE.DAT
2021-07-27 20:45 - 2020-08-05 19:01 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\IDM
2021-07-24 22:18 - 2020-08-05 15:00 - 000000000 ____D C:\Users\Beghdad A\AppData\Roaming\vlc
2021-07-17 23:14 - 2020-08-04 20:47 - 000000000 ____D C:\Users\Beghdad A\Downloads\Video
2021-07-17 22:45 - 2021-07-05 08:44 - 017271837 _____ C:\Users\Beghdad A\Desktop\تراث كربلاء العدد 4.pdf
2021-07-17 22:32 - 2020-10-26 19:34 - 000000000 ____D C:\ProgramData\Tracker Software
2021-07-17 12:44 - 2009-07-14 16:24 - 000754028 _____ C:\Windows\system32\perfh00C.dat
2021-07-17 12:44 - 2009-07-14 16:24 - 000155090 _____ C:\Windows\system32\perfc00C.dat
2021-07-17 12:44 - 2009-07-14 06:13 - 001674396 _____ C:\Windows\system32\PerfStringBackup.INI
==================== Fichiers à la racine de certains dossiers ========
2021-08-12 19:47 - 2021-08-15 10:40 - 000000132 _____ () C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS5 Prefs
2021-08-15 11:10 - 2021-08-15 11:10 - 000000132 _____ () C:\Users\Beghdad A\AppData\Roaming\Adobe PNG Format CS6 Prefs
2020-08-05 13:50 - 2020-08-05 14:01 - 000003170 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMdefextmap.dat
2020-08-05 13:53 - 2020-08-05 14:55 - 000000220 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMfoldresHistory.txt
2020-08-05 13:50 - 2020-08-05 14:01 - 000003170 _____ () C:\Users\Beghdad A\AppData\Roaming\IDMurlexclist.dat
2021-08-15 10:09 - 2021-08-15 10:09 - 000001456 _____ () C:\Users\Beghdad A\AppData\Local\Adobe Enregistrer pour le Web 12.0 Prefs
2020-08-13 12:46 - 2020-08-13 12:46 - 000000001 _____ () C:\Users\Beghdad A\AppData\Local\llftool.4.40.agreement
2020-10-14 09:05 - 2020-10-14 09:05 - 000000028 _____ () C:\Users\Beghdad A\AppData\Local\pdfcom.ini
2020-09-06 17:12 - 2020-09-06 17:12 - 000000000 _____ () C:\Users\Beghdad A\AppData\Local\{8A1DE995-A4F4-4B64-B9FA-A273EC8FA660}
2021-03-20 11:11 - 2021-03-20 11:11 - 000000000 _____ () C:\Users\Beghdad A\AppData\Local\{AF095711-9307-4B09-8E0F-DE6843476D98}
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2021-08-06 20:14
==================== Fin de FRST.txt ========================