Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 29-10-2021
Exécuté par emeline (administrateur) sur LAPTOP-UKJOK1VG (HP HP Notebook) (29-10-2021 21:31:20)
Exécuté depuis C:\Users\emeli\Desktop
Profils chargés: emeline
Platform: Microsoft Windows 10 Famille Version 2004 19041.1288 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10>
(Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(HP Inc.) [Fichier non signé] C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126577.inf_amd64_ae71f87c8938d56a\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126577.inf_amd64_ae71f87c8938d56a\igfxEM.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.10421.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(VTech Electronics North America, LLC -> ) C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(VTech Electronics North America, LLC -> VTech) C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechServiceInstaller.exe
(VTech Electronics North America, LLC -> VTech) C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechUSBSocketService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8850688 2016-03-01] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [StartCN] => c:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [229592 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2016-01-29] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] (VTech Electronics North America, LLC -> )
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [TomTom MySports Connect.exe] => C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe [638464 2018-09-03] (TomTom) [Fichier non signé]
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91667312 2020-05-12] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33169992 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Uninstall 21.180.0905.0007] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\21.180.0905.0007"
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3500 series: C:\WINDOWS\system32\CNMLMBV.DLL [391168 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.54\Installer\chrmstp.exe [2021-10-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-09-14]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {01774244-FD74-4B07-83FC-4C6AC32AE2C2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {02EB627A-3D08-476F-9017-8B6CCB842BE4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {03DA2859-C56E-4563-8B2B-272050881B74} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {10833FC4-5211-4300-AF5D-D8AFE7C17438} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {11A2A8B7-EAB7-45C2-8CBA-171E1B3A4B98} - System32\Tasks\DropboxUpdateTaskMachineCore1d454b58b7070d1 => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {15E64552-8737-4B1E-9BF0-9FB7FE63A4E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-17] (Google Inc -> Google Inc.)
Task: {180E271E-91D3-4B73-AD3B-BE445971BC61} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1162160 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {2B39611F-D138-4C1D-B2EF-FACEA0FE86D3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {2D684B57-3993-45BF-AA95-3D5F8A97264C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27616328 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2D832F84-6690-4A4A-ABDC-200284818399} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> )
Task: {3174FA66-4B97-4142-9722-18BA6D2D65FC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-18] (Piriform Software Ltd -> Piriform)
Task: {3934422F-9F19-42CC-8BAF-21527A0EEAB8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {52D49DC5-0054-482F-AE3C-F0FB1D009A48} - System32\Tasks\HPDAS => C:\Program [Argument = Files\HP\HP ePrint\HP.DeliveryAndStatus.Desktop.App.exe /CheckJobs]
Task: {5F7D2FB3-E8AF-4A15-B73E-4C8AD4F2A08C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {70DF1A84-1FAD-41B7-9B1E-122D4C0F7A6D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7FB08C30-944F-43C8-9F94-82FC0F1DE70C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {8E2CD360-38BC-4AB3-802A-B7F6BCC964D0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {97271EFB-CA8F-4278-8151-77AA6FE83F04} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {AC9019D5-D3A3-42C2-AEDB-EC457E899206} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B10696AB-AE60-48D8-A79C-23B85EBA86FE} - System32\Tasks\Avast SecureLine VPN Update => c:\program files\avast software\secureline\vpnupdate.exe [1390472 2019-10-28] (AVAST Software s.r.o. -> AVAST Software)
Task: {C57155C8-5F94-47EE-9A4B-53AC258E9EE5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB3C47CE-9BBD-4A8B-A6C7-AB26965E9D34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-17] (Google Inc -> Google Inc.)
Task: {D047F6AB-CC65-4FEE-BB48-34E4F5FF6A9D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {D54631AB-78A6-430E-BDB8-BD09EF15DD5D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2021-10-11] (HP Inc. -> HP Inc.)
Task: {DAF5625C-00B0-4DFA-98BB-B47BB3284F19} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {DC2EF720-F6EB-4988-929C-BE1D72FD9302} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1123504 2021-10-11] (HP Inc. -> HP Inc.)
Task: {DC94D8B3-B0C6-482F-822A-EF8DE22975EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [560816 2021-10-11] (HP Inc. -> HP Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d454b58b7070d1.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78f72a33-006d-4877-855c-6dda544cffda}: [DhcpNameServer] 172.168.0.7
Tcpip\..\Interfaces\{88f6a9d7-9afe-4c56-ac06-c396158541b1}: [NameServer] 185.156.172.178,185.93.180.131
Tcpip\..\Interfaces\{88f6a9d7-9afe-4c56-ac06-c396158541b1}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\emeli\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-29]
Edge DefaultSearchURL: Default -> hxxps//www.google.fr/search?q={searchTerms}&ie={inputEncoding?}&oe={outputEncoding?}
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default [2021-10-29]
CHR Notifications: Default -> hxxps//convertisseur-youtube-mp3.net; hxxps//fr.softonic.com
CHR Extension: (Slides) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-27]
CHR Extension: (YouTube) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-17]
CHR Extension: (Sheets) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-23]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-10-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Gmail) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-27]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [127192 2015-11-19] (Realtek Semiconductor Corp -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 HP Comm Recover; c:\Program Files\HPCommRecovery\HPCommRecovery.exe [44032 2016-03-03] (HP Inc.) [Fichier non signé]
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [755704 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [754184 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [751104 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [754688 2021-10-11] (HP Inc. -> HP Inc.)
S2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
R2 VTechUSBSocketService; C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechServiceInstaller.exe [82344 2012-05-07] (VTech Electronics North America, LLC -> VTech)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthAudioHF; C:\WINDOWS\system32\drivers\RtkHfp.sys [104688 2015-09-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-29 21:31 - 2021-10-29 21:33 - 000024008 _____ C:\Users\emeli\Desktop\FRST.txt
2021-10-29 21:30 - 2021-10-29 21:32 - 000000000 ____D C:\FRST
2021-10-29 21:28 - 2021-10-29 21:28 - 002310656 _____ (Farbar) C:\Users\emeli\Desktop\FRST64.exe
2021-10-29 21:18 - 2021-10-29 21:18 - 000322217 _____ C:\Users\emeli\Desktop\ZHPDiag.txt
2021-10-29 21:03 - 2021-10-29 21:18 - 000000000 ____D C:\Users\emeli\AppData\Roaming\ZHP
2021-10-29 21:03 - 2021-10-29 21:03 - 000000872 _____ C:\Users\emeli\Desktop\ZHPSuite.lnk
2021-10-29 21:03 - 2021-10-29 21:03 - 000000000 ____D C:\Users\emeli\AppData\Local\ZHP
2021-10-29 21:01 - 2021-10-29 21:01 - 003476632 _____ (Nicolas Coolman) C:\Users\emeli\Desktop\ZHPSuite.exe
2021-10-29 20:19 - 2021-10-29 20:19 - 000013254 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2503284700.pdf
2021-10-19 21:09 - 2021-10-19 21:09 - 000013307 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2456955538.pdf
2021-10-19 21:09 - 2021-10-19 21:09 - 000013220 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2436749139.pdf
2021-10-18 19:52 - 2021-10-18 19:52 - 000085547 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2450011485.pdf
2021-10-17 19:43 - 2021-10-17 19:43 - 000046871 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2446018825.pdf
2021-10-16 17:09 - 2021-10-16 17:10 - 000185432 _____ C:\Users\emeli\Downloads\Sites-STANDPRIVE-Site (1).pdf
2021-10-16 17:09 - 2021-10-16 17:09 - 000061538 _____ C:\Users\emeli\Downloads\XY044493803RR.pdf
2021-10-16 00:09 - 2021-10-16 00:09 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2021-10-16 00:09 - 2021-10-16 00:09 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2021-10-16 00:08 - 2021-10-16 00:08 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-16 00:07 - 2021-10-16 00:07 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-16 00:07 - 2021-10-16 00:07 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-16 00:07 - 2021-10-16 00:07 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-16 00:07 - 2021-10-16 00:07 - 000011495 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-16 00:06 - 2021-10-16 00:06 - 001823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-16 00:06 - 2021-10-16 00:06 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-16 00:05 - 2021-10-16 00:05 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-16 00:05 - 2021-10-16 00:05 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-16 00:05 - 2021-10-16 00:05 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-16 00:04 - 2021-10-16 00:04 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-15 08:49 - 2021-10-15 08:49 - 000000000 ___HD C:\$WinREAgent
2021-10-07 20:38 - 2021-10-07 20:38 - 000000000 ____D C:\Users\emeli\AppData\Roaming\HP
2021-10-07 20:33 - 2021-10-07 20:33 - 000001170 _____ C:\Users\Public\Desktop\HP Support Assistant.lnk
2021-10-07 20:28 - 2021-10-07 20:28 - 000000000 ____D C:\Users\emeli\AppData\Roaming\hpqLog
2021-09-20 16:31 - 2021-09-20 16:31 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-20 16:30 - 2021-09-20 16:30 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-20 16:30 - 2021-09-20 16:30 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-20 16:30 - 2021-09-20 16:30 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-20 16:29 - 2021-09-20 16:29 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-20 16:28 - 2021-09-20 16:28 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-20 16:28 - 2021-09-20 16:28 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-20 16:28 - 2021-09-20 16:28 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-20 16:28 - 2021-09-20 16:28 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-20 14:08 - 2021-09-20 14:08 - 000371137 _____ C:\Users\emeli\Downloads\ob_0102ef_mdz-affichage-nombres-pour-la-date (1).pdf
2021-09-20 14:07 - 2021-09-20 14:08 - 004732267 _____ C:\Users\emeli\Downloads\ob_3ea690_mdz-mois-de-l-annee-3ecritures-pou (1).pdf
2021-09-20 14:07 - 2021-09-20 14:08 - 002469059 _____ C:\Users\emeli\Downloads\ob_853b69_mdz-affichage-jour-3-ecritures-poes (1).pdf
2021-09-01 20:01 - 2021-09-01 20:01 - 000093577 _____ C:\Users\emeli\Downloads\attestation zelie.pdf
2021-08-30 17:02 - 2021-08-30 17:03 - 000177568 _____ C:\Users\emeli\Downloads\2777-Avenant-CT-Ama_FORMplus.pdf
2021-08-27 19:54 - 2021-08-27 19:54 - 001222377 _____ C:\Users\emeli\Downloads\Attestation pole emploi.pdf
2021-08-19 21:31 - 2021-08-19 21:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-19 21:31 - 2021-08-19 21:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-11 14:21 - 2021-08-11 14:21 - 000163024 _____ C:\Users\emeli\Downloads\Avis_d_impot_2021_sur_les_revenus_2020.pdf
2021-08-08 13:03 - 2021-08-08 13:03 - 000012095 _____ C:\Users\emeli\Downloads\contrat (1).pdf
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-29 21:35 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-29 21:35 - 2016-09-17 13:51 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-29 21:27 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-29 21:27 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-29 21:22 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-29 21:18 - 2020-09-27 10:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-29 20:48 - 2016-04-12 03:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-10-29 20:27 - 2018-09-20 11:09 - 000000000 ____D C:\Program Files\CCleaner
2021-10-29 20:24 - 2020-06-16 09:08 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-29 20:24 - 2020-06-16 09:08 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-28 17:49 - 2020-12-13 11:31 - 000182272 _____ C:\Users\emeli\Documents\Emeline 2021.xls
2021-10-28 17:43 - 2020-09-27 11:20 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2905203744-3397430099-1393252957-1001
2021-10-28 17:42 - 2021-05-18 18:45 - 000002428 _____ C:\Users\emeli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-23 17:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-23 16:27 - 2020-09-27 10:53 - 000000000 ____D C:\Users\emeli
2021-10-23 16:26 - 2020-09-27 11:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-23 16:26 - 2020-09-27 10:47 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-23 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-19 21:13 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-17 21:18 - 2020-09-27 11:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-10-17 21:14 - 2020-09-27 10:47 - 000549784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-17 21:14 - 2016-06-09 19:39 - 000000000 ____D C:\ProgramData\Intel
2021-10-17 21:12 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-16 17:10 - 2019-03-08 13:58 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-10-15 08:22 - 2016-09-19 16:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-10-15 08:20 - 2016-09-19 16:24 - 139806512 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-10-15 08:04 - 2020-09-20 23:33 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-13 08:06 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\HP_Inc
2021-10-11 20:29 - 2016-04-12 03:47 - 000000000 ____D C:\Program Files\HP
2021-10-11 18:46 - 2020-09-27 11:20 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-11 18:46 - 2020-09-27 11:20 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-07 20:48 - 2016-06-09 19:50 - 000000000 ____D C:\ProgramData\HP
2021-10-07 20:33 - 2017-11-09 22:07 - 000000000 ____D C:\Users\emeli\AppData\Local\Packages
2021-10-07 20:33 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\HP
2021-10-07 20:33 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\Hewlett-Packard
2021-10-07 20:33 - 2016-04-12 03:47 - 000000000 ____D C:\Program Files (x86)\HP
2021-10-07 20:29 - 2016-06-09 19:34 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-10-07 20:29 - 2016-06-09 19:30 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-10-07 20:29 - 2016-04-12 03:48 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2021-10-07 20:25 - 2016-04-12 13:09 - 000000000 ____D C:\SWSetup
2021-10-07 20:09 - 2018-09-25 12:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-06 16:01 - 2020-09-27 11:20 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-06 16:01 - 2020-09-27 11:20 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2016-09-17 13:42 - 2021-10-29 19:51 - 001118208 _____ () C:\Users\emeli\AppData\Local\BTServer.log
2018-04-27 18:21 - 2018-04-27 18:21 - 000003584 _____ () C:\Users\emeli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-03-16 20:02 - 2017-04-01 13:28 - 000000600 _____ () C:\Users\emeli\AppData\Local\PUTTY.RND
==================== SigCheckExt =========================
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2016-09-19 14:01 - 2016-07-01 05:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2016-07-16 13:41 - 2016-07-16 13:41 - 000206848 _____ (CANON INC.) C:\WINDOWS\system32\CNHLCL1.DLL
2016-07-16 13:41 - 2016-07-16 13:41 - 000019968 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCAN.DLL
2016-07-16 13:41 - 2016-07-16 13:41 - 000107520 _____ (CANON INC.) C:\WINDOWS\system32\CNHWCL1.DLL
2015-10-30 09:19 - 2015-10-30 09:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-06-08 21:04 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2016-04-12 03:48 - 2016-02-04 03:17 - 000135168 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPMUIDir.exe
2016-02-19 17:49 - 2016-02-19 17:49 - 000189440 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4377.dll
2017-04-01 12:23 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2016-06-09 19:46 - 2015-10-07 15:04 - 000050588 _____ C:\WINDOWS\system32\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2015-10-30 09:19 - 2015-10-30 09:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2017-04-01 12:23 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-07-16 13:44 - 2016-07-17 00:45 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2016-06-09 19:44 - 2010-12-01 09:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2015-05-22 01:00 - 2015-05-22 01:00 - 000002560 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\IusEventLog.dll
2015-10-30 09:19 - 2016-09-19 17:28 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-10-30 09:19 - 2016-09-19 17:28 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2021-10-29 21:28 - 2021-10-29 21:28 - 002310656 _____ (Farbar) C:\Users\emeli\Desktop\FRST64.exe
2021-10-29 21:01 - 2021-10-29 21:01 - 003476632 _____ (Nicolas Coolman) C:\Users\emeli\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{a737ba7c-1129-11ea-b955-806e6f6e6963}
{58b0fed9-7a8f-11e7-b92b-806e6f6e6963}
{4b02079d-2eb8-11e6-9065-b9676fc516ce}
{4b02079e-2eb8-11e6-9065-b9676fc516ce}
{a737ba7a-1129-11ea-b955-806e6f6e6963}
{a737ba7b-1129-11ea-b955-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {4b02079d-2eb8-11e6-9065-b9676fc516ce}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {4b02079e-2eb8-11e6-9065-b9676fc516ce}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {58b0fed9-7a8f-11e7-b92b-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7a-1129-11ea-b955-806e6f6e6963}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7b-1129-11ea-b955-806e6f6e6963}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7c-1129-11ea-b955-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par emeline (administrateur) sur LAPTOP-UKJOK1VG (HP HP Notebook) (29-10-2021 21:31:20)
Exécuté depuis C:\Users\emeli\Desktop
Profils chargés: emeline
Platform: Microsoft Windows 10 Famille Version 2004 19041.1288 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10>
(Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(HP Inc.) [Fichier non signé] C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126577.inf_amd64_ae71f87c8938d56a\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126577.inf_amd64_ae71f87c8938d56a\igfxEM.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.10421.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(VTech Electronics North America, LLC -> ) C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(VTech Electronics North America, LLC -> VTech) C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechServiceInstaller.exe
(VTech Electronics North America, LLC -> VTech) C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechUSBSocketService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8850688 2016-03-01] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [StartCN] => c:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [229592 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2016-01-29] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] (VTech Electronics North America, LLC -> )
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [TomTom MySports Connect.exe] => C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe [638464 2018-09-03] (TomTom) [Fichier non signé]
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91667312 2020-05-12] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33169992 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2905203744-3397430099-1393252957-1001\...\RunOnce: [Uninstall 21.180.0905.0007] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\emeli\AppData\Local\Microsoft\OneDrive\21.180.0905.0007"
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3500 series: C:\WINDOWS\system32\CNMLMBV.DLL [391168 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.54\Installer\chrmstp.exe [2021-10-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-09-14]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {01774244-FD74-4B07-83FC-4C6AC32AE2C2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {02EB627A-3D08-476F-9017-8B6CCB842BE4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {03DA2859-C56E-4563-8B2B-272050881B74} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {10833FC4-5211-4300-AF5D-D8AFE7C17438} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {11A2A8B7-EAB7-45C2-8CBA-171E1B3A4B98} - System32\Tasks\DropboxUpdateTaskMachineCore1d454b58b7070d1 => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {15E64552-8737-4B1E-9BF0-9FB7FE63A4E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-17] (Google Inc -> Google Inc.)
Task: {180E271E-91D3-4B73-AD3B-BE445971BC61} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1162160 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {2B39611F-D138-4C1D-B2EF-FACEA0FE86D3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {2D684B57-3993-45BF-AA95-3D5F8A97264C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27616328 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2D832F84-6690-4A4A-ABDC-200284818399} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> )
Task: {3174FA66-4B97-4142-9722-18BA6D2D65FC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-18] (Piriform Software Ltd -> Piriform)
Task: {3934422F-9F19-42CC-8BAF-21527A0EEAB8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {52D49DC5-0054-482F-AE3C-F0FB1D009A48} - System32\Tasks\HPDAS => C:\Program [Argument = Files\HP\HP ePrint\HP.DeliveryAndStatus.Desktop.App.exe /CheckJobs]
Task: {5F7D2FB3-E8AF-4A15-B73E-4C8AD4F2A08C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {70DF1A84-1FAD-41B7-9B1E-122D4C0F7A6D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7FB08C30-944F-43C8-9F94-82FC0F1DE70C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {8E2CD360-38BC-4AB3-802A-B7F6BCC964D0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {97271EFB-CA8F-4278-8151-77AA6FE83F04} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {AC9019D5-D3A3-42C2-AEDB-EC457E899206} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B10696AB-AE60-48D8-A79C-23B85EBA86FE} - System32\Tasks\Avast SecureLine VPN Update => c:\program files\avast software\secureline\vpnupdate.exe [1390472 2019-10-28] (AVAST Software s.r.o. -> AVAST Software)
Task: {C57155C8-5F94-47EE-9A4B-53AC258E9EE5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB3C47CE-9BBD-4A8B-A6C7-AB26965E9D34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-09-17] (Google Inc -> Google Inc.)
Task: {D047F6AB-CC65-4FEE-BB48-34E4F5FF6A9D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {D54631AB-78A6-430E-BDB8-BD09EF15DD5D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2021-10-11] (HP Inc. -> HP Inc.)
Task: {DAF5625C-00B0-4DFA-98BB-B47BB3284F19} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {DC2EF720-F6EB-4988-929C-BE1D72FD9302} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1123504 2021-10-11] (HP Inc. -> HP Inc.)
Task: {DC94D8B3-B0C6-482F-822A-EF8DE22975EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [560816 2021-10-11] (HP Inc. -> HP Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d454b58b7070d1.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78f72a33-006d-4877-855c-6dda544cffda}: [DhcpNameServer] 172.168.0.7
Tcpip\..\Interfaces\{88f6a9d7-9afe-4c56-ac06-c396158541b1}: [NameServer] 185.156.172.178,185.93.180.131
Tcpip\..\Interfaces\{88f6a9d7-9afe-4c56-ac06-c396158541b1}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\emeli\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-29]
Edge DefaultSearchURL: Default -> hxxps//www.google.fr/search?q={searchTerms}&ie={inputEncoding?}&oe={outputEncoding?}
FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-10-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default [2021-10-29]
CHR Notifications: Default -> hxxps//convertisseur-youtube-mp3.net; hxxps//fr.softonic.com
CHR Extension: (Slides) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-27]
CHR Extension: (YouTube) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-17]
CHR Extension: (Sheets) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-23]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-10-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Gmail) - C:\Users\emeli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-27]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [127192 2015-11-19] (Realtek Semiconductor Corp -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 HP Comm Recover; c:\Program Files\HPCommRecovery\HPCommRecovery.exe [44032 2016-03-03] (HP Inc.) [Fichier non signé]
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [755704 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [754184 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [751104 2021-10-11] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [754688 2021-10-11] (HP Inc. -> HP Inc.)
S2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-23] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
R2 VTechUSBSocketService; C:\Program Files (x86)\VTech\DownloadManager\Applications\AppAccessory\12051\VTechUSBSocketService\VTechServiceInstaller.exe [82344 2012-05-07] (VTech Electronics North America, LLC -> VTech)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthAudioHF; C:\WINDOWS\system32\drivers\RtkHfp.sys [104688 2015-09-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-29 21:31 - 2021-10-29 21:33 - 000024008 _____ C:\Users\emeli\Desktop\FRST.txt
2021-10-29 21:30 - 2021-10-29 21:32 - 000000000 ____D C:\FRST
2021-10-29 21:28 - 2021-10-29 21:28 - 002310656 _____ (Farbar) C:\Users\emeli\Desktop\FRST64.exe
2021-10-29 21:18 - 2021-10-29 21:18 - 000322217 _____ C:\Users\emeli\Desktop\ZHPDiag.txt
2021-10-29 21:03 - 2021-10-29 21:18 - 000000000 ____D C:\Users\emeli\AppData\Roaming\ZHP
2021-10-29 21:03 - 2021-10-29 21:03 - 000000872 _____ C:\Users\emeli\Desktop\ZHPSuite.lnk
2021-10-29 21:03 - 2021-10-29 21:03 - 000000000 ____D C:\Users\emeli\AppData\Local\ZHP
2021-10-29 21:01 - 2021-10-29 21:01 - 003476632 _____ (Nicolas Coolman) C:\Users\emeli\Desktop\ZHPSuite.exe
2021-10-29 20:19 - 2021-10-29 20:19 - 000013254 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2503284700.pdf
2021-10-19 21:09 - 2021-10-19 21:09 - 000013307 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2456955538.pdf
2021-10-19 21:09 - 2021-10-19 21:09 - 000013220 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2436749139.pdf
2021-10-18 19:52 - 2021-10-18 19:52 - 000085547 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2450011485.pdf
2021-10-17 19:43 - 2021-10-17 19:43 - 000046871 _____ C:\Users\emeli\Downloads\Bordereau-Vinted-2446018825.pdf
2021-10-16 17:09 - 2021-10-16 17:10 - 000185432 _____ C:\Users\emeli\Downloads\Sites-STANDPRIVE-Site (1).pdf
2021-10-16 17:09 - 2021-10-16 17:09 - 000061538 _____ C:\Users\emeli\Downloads\XY044493803RR.pdf
2021-10-16 00:09 - 2021-10-16 00:09 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2021-10-16 00:09 - 2021-10-16 00:09 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2021-10-16 00:08 - 2021-10-16 00:08 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-16 00:07 - 2021-10-16 00:07 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-16 00:07 - 2021-10-16 00:07 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-16 00:07 - 2021-10-16 00:07 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-16 00:07 - 2021-10-16 00:07 - 000011495 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-16 00:06 - 2021-10-16 00:06 - 001823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-16 00:06 - 2021-10-16 00:06 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-16 00:05 - 2021-10-16 00:05 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-16 00:05 - 2021-10-16 00:05 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-16 00:05 - 2021-10-16 00:05 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-16 00:04 - 2021-10-16 00:04 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-15 08:49 - 2021-10-15 08:49 - 000000000 ___HD C:\$WinREAgent
2021-10-07 20:38 - 2021-10-07 20:38 - 000000000 ____D C:\Users\emeli\AppData\Roaming\HP
2021-10-07 20:33 - 2021-10-07 20:33 - 000001170 _____ C:\Users\Public\Desktop\HP Support Assistant.lnk
2021-10-07 20:28 - 2021-10-07 20:28 - 000000000 ____D C:\Users\emeli\AppData\Roaming\hpqLog
2021-09-20 16:31 - 2021-09-20 16:31 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-20 16:30 - 2021-09-20 16:30 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-20 16:30 - 2021-09-20 16:30 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-20 16:30 - 2021-09-20 16:30 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-20 16:30 - 2021-09-20 16:30 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-20 16:29 - 2021-09-20 16:29 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-20 16:28 - 2021-09-20 16:28 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-20 16:28 - 2021-09-20 16:28 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-20 16:28 - 2021-09-20 16:28 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-20 16:28 - 2021-09-20 16:28 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-20 14:08 - 2021-09-20 14:08 - 000371137 _____ C:\Users\emeli\Downloads\ob_0102ef_mdz-affichage-nombres-pour-la-date (1).pdf
2021-09-20 14:07 - 2021-09-20 14:08 - 004732267 _____ C:\Users\emeli\Downloads\ob_3ea690_mdz-mois-de-l-annee-3ecritures-pou (1).pdf
2021-09-20 14:07 - 2021-09-20 14:08 - 002469059 _____ C:\Users\emeli\Downloads\ob_853b69_mdz-affichage-jour-3-ecritures-poes (1).pdf
2021-09-01 20:01 - 2021-09-01 20:01 - 000093577 _____ C:\Users\emeli\Downloads\attestation zelie.pdf
2021-08-30 17:02 - 2021-08-30 17:03 - 000177568 _____ C:\Users\emeli\Downloads\2777-Avenant-CT-Ama_FORMplus.pdf
2021-08-27 19:54 - 2021-08-27 19:54 - 001222377 _____ C:\Users\emeli\Downloads\Attestation pole emploi.pdf
2021-08-19 21:31 - 2021-08-19 21:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-19 21:31 - 2021-08-19 21:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-11 14:21 - 2021-08-11 14:21 - 000163024 _____ C:\Users\emeli\Downloads\Avis_d_impot_2021_sur_les_revenus_2020.pdf
2021-08-08 13:03 - 2021-08-08 13:03 - 000012095 _____ C:\Users\emeli\Downloads\contrat (1).pdf
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-29 21:35 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-29 21:35 - 2016-09-17 13:51 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-29 21:27 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-29 21:27 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-29 21:22 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-29 21:18 - 2020-09-27 10:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-29 20:48 - 2016-04-12 03:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-10-29 20:27 - 2018-09-20 11:09 - 000000000 ____D C:\Program Files\CCleaner
2021-10-29 20:24 - 2020-06-16 09:08 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-29 20:24 - 2020-06-16 09:08 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-28 17:49 - 2020-12-13 11:31 - 000182272 _____ C:\Users\emeli\Documents\Emeline 2021.xls
2021-10-28 17:43 - 2020-09-27 11:20 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2905203744-3397430099-1393252957-1001
2021-10-28 17:42 - 2021-05-18 18:45 - 000002428 _____ C:\Users\emeli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-23 17:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-23 16:27 - 2020-09-27 10:53 - 000000000 ____D C:\Users\emeli
2021-10-23 16:26 - 2020-09-27 11:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-23 16:26 - 2020-09-27 10:47 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-23 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-19 21:13 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-17 21:18 - 2020-09-27 11:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-10-17 21:14 - 2020-09-27 10:47 - 000549784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-17 21:14 - 2016-06-09 19:39 - 000000000 ____D C:\ProgramData\Intel
2021-10-17 21:12 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-10-17 21:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-16 17:10 - 2019-03-08 13:58 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-10-15 08:22 - 2016-09-19 16:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-10-15 08:20 - 2016-09-19 16:24 - 139806512 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-10-15 08:04 - 2020-09-20 23:33 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-13 08:06 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\HP_Inc
2021-10-11 20:29 - 2016-04-12 03:47 - 000000000 ____D C:\Program Files\HP
2021-10-11 18:46 - 2020-09-27 11:20 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-11 18:46 - 2020-09-27 11:20 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-07 20:48 - 2016-06-09 19:50 - 000000000 ____D C:\ProgramData\HP
2021-10-07 20:33 - 2017-11-09 22:07 - 000000000 ____D C:\Users\emeli\AppData\Local\Packages
2021-10-07 20:33 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\HP
2021-10-07 20:33 - 2016-09-17 13:45 - 000000000 ____D C:\Users\emeli\AppData\Local\Hewlett-Packard
2021-10-07 20:33 - 2016-04-12 03:47 - 000000000 ____D C:\Program Files (x86)\HP
2021-10-07 20:29 - 2016-06-09 19:34 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-10-07 20:29 - 2016-06-09 19:30 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-10-07 20:29 - 2016-04-12 03:48 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2021-10-07 20:25 - 2016-04-12 13:09 - 000000000 ____D C:\SWSetup
2021-10-07 20:09 - 2018-09-25 12:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-06 16:01 - 2020-09-27 11:20 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-06 16:01 - 2020-09-27 11:20 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2016-09-17 13:42 - 2021-10-29 19:51 - 001118208 _____ () C:\Users\emeli\AppData\Local\BTServer.log
2018-04-27 18:21 - 2018-04-27 18:21 - 000003584 _____ () C:\Users\emeli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-03-16 20:02 - 2017-04-01 13:28 - 000000600 _____ () C:\Users\emeli\AppData\Local\PUTTY.RND
==================== SigCheckExt =========================
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2016-09-19 14:01 - 2016-07-01 05:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2016-07-16 13:41 - 2016-07-16 13:41 - 000206848 _____ (CANON INC.) C:\WINDOWS\system32\CNHLCL1.DLL
2016-07-16 13:41 - 2016-07-16 13:41 - 000019968 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCAN.DLL
2016-07-16 13:41 - 2016-07-16 13:41 - 000107520 _____ (CANON INC.) C:\WINDOWS\system32\CNHWCL1.DLL
2015-10-30 09:19 - 2015-10-30 09:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-06-08 21:04 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2016-04-12 03:48 - 2016-02-04 03:17 - 000135168 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPMUIDir.exe
2016-02-19 17:49 - 2016-02-19 17:49 - 000189440 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4377.dll
2017-04-01 12:23 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2016-06-09 19:46 - 2015-10-07 15:04 - 000050588 _____ C:\WINDOWS\system32\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2015-10-30 09:19 - 2015-10-30 09:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2017-04-01 12:23 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-07-16 13:44 - 2016-07-17 00:45 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2016-06-09 19:44 - 2010-12-01 09:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2015-05-22 01:00 - 2015-05-22 01:00 - 000002560 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\IusEventLog.dll
2015-10-30 09:19 - 2016-09-19 17:28 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-10-30 09:19 - 2016-09-19 17:28 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2021-10-29 21:28 - 2021-10-29 21:28 - 002310656 _____ (Farbar) C:\Users\emeli\Desktop\FRST64.exe
2021-10-29 21:01 - 2021-10-29 21:01 - 003476632 _____ (Nicolas Coolman) C:\Users\emeli\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{a737ba7c-1129-11ea-b955-806e6f6e6963}
{58b0fed9-7a8f-11e7-b92b-806e6f6e6963}
{4b02079d-2eb8-11e6-9065-b9676fc516ce}
{4b02079e-2eb8-11e6-9065-b9676fc516ce}
{a737ba7a-1129-11ea-b955-806e6f6e6963}
{a737ba7b-1129-11ea-b955-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {4b02079d-2eb8-11e6-9065-b9676fc516ce}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {4b02079e-2eb8-11e6-9065-b9676fc516ce}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {58b0fed9-7a8f-11e7-b92b-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7a-1129-11ea-b955-806e6f6e6963}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7b-1129-11ea-b955-806e6f6e6963}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {a737ba7c-1129-11ea-b955-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {4d6fbaf9-00a6-11eb-9de7-fc0927459ac5}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {38a38aa2-009e-11eb-b964-b83e7fdf2bd6}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {38a38aa3-009e-11eb-b964-b83e7fdf2bd6}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================