Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 12-10-2021
Exécuté par bertrand (administrateur) sur PCBMJR (Hewlett-Packard HP 15 Notebook PC) (14-10-2021 23:25:29)
Exécuté depuis C:\Users\bertrand\Desktop
Profils chargés: bertrand
Platform: Microsoft Windows 10 Famille Version 20H2 19042.1237 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <8>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\bertrand\AppData\Roaming\ZHP\ZHPSuite.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKU\S-1-5-21-25515482-1930536684-1965771000-1002\...\MountPoints2: {fe8f3ad4-24ae-11e5-827e-38b1dbfdbd48} - "F:\LaunchU3.exe"
HKLM\...\Windows x64\Print Processors\Canon MG5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAD.DLL [28672 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5100 series: C:\WINDOWS\system32\CNMLMAD.DLL [361472 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [423936 2014-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\94.0.4606.81\Installer\chrmstp.exe [2021-10-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {006DECF3-3624-4CED-A033-15216ED3E669} - System32\Tasks\Norton Internet Security\Norton Internet Security Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {0C6E1DED-2971-41F6-93FB-13E798011340} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {1476B587-D5BD-4660-B1CD-1489EA60A6F7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
Task: {175C216F-8739-4A7B-9324-AA2E522F23F0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {17770176-FEC7-4E2B-BB8A-BF9482CD5EF8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
Task: {22F38649-3F6C-4895-97C1-057136073D58} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {25E3BD42-B98C-4512-AC63-D6CD1F299E31} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {2B89891B-E0A9-4268-B07B-A6EED6FF21D1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION
Task: {3249EF1B-BC5D-4E9D-9DA4-09DF5B0417CE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {35BE651A-D28A-4FD1-AD80-00C0EA6A4F89} - \Optimize Start Menu Cache Files-S-1-5-21-25515482-1930536684-1965771000-1002 -> Pas de fichier <==== ATTENTION
Task: {376FE21E-9C88-4CCA-921C-F075739729B2} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {3BFCC2B4-9CF9-45ED-8C43-9F30B8F5D455} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-10-11] (Mozilla Corporation -> Mozilla Foundation)
Task: {40464758-5B49-4C70-BE3F-6D5E6FC1BD53} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {416440CF-4FE4-42A3-9A49-78AD7E746B92} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {542B58CD-FA5F-41AF-A281-D5FE44FE51CB} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {5ACDD2A5-F6A2-4A47-B895-DF9F552FB4B3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {5B274AE5-F30B-49FB-95B1-479ADB3A64CB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {63083DE5-B939-40CD-815D-1A71AD967F80} - System32\Tasks\Start SimplePass => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [4822264 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {64982498-7F43-4440-905D-59983C54FD0B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {66D4ABE8-D95C-4032-A614-98F0BCE6E52B} - System32\Tasks\Start OPBHOBrokerDesktop => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {6D95A582-217C-499C-928E-BCE864DF5549} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1341008 2020-09-06] (Adobe Inc. -> Adobe Inc.)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {70BAED80-2F35-4F5A-8A3E-0BCB131807A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {7181BD2C-66DC-41AD-B7B4-1DCCB81B844E} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40880 2021-08-24] (Garmin International, Inc. -> )
Task: {730173EB-2CC5-4953-9F6A-0007295C51FB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {7394A1A4-1406-4380-BAB4-ADB2970292DC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-05] (Google Inc -> Google Inc.)
Task: {77073D53-1748-4D03-B54D-C2538A3275B3} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {79691D71-38BB-4525-9D6B-0D5B6306D541} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {7AF23CAE-FE2E-4382-851A-E435D63DC7AC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {7C5F87F5-2428-4916-AD93-6DC00DE547CB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {7DF2DE8B-5C17-4BA2-ACCA-3E1AB4110563} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {88F7873D-B761-4E87-8889-B98E5629764A} - System32\Tasks\Start OPBHOBroker => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {90E6679C-1AA5-4099-91D1-B72D5A2D6DB3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {920AB5D8-DCA3-4927-A4AD-33E0C1A764FA} - System32\Tasks\Norton Internet Security\Norton Internet Security Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {98D2979D-F0BB-45D6-BD75-52DB00934E28} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {994596D2-339C-4358-9CE5-E1BB5A8EDA10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A3E3C51D-4B2D-4EA9-AB03-0DC4EB955657} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {A5F3EB62-D51D-428C-AA9E-BA6360536B5A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {ABA91C62-3AC8-4713-BCD4-D4F1DEB1EAAC} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: {B41EE924-73E3-4530-B596-F5C0AF385B12} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4C4AE9E-5DDE-47C2-A3E0-F71E7A624A53} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {B931F871-450B-45A0-8698-D208DE42F84F} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {C13544DA-4E8E-460A-8D40-4059DF43388A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {CE5ACE81-BF01-442F-9654-1F42BEF6E81D} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {D2CF6227-9A36-4AE0-AF0E-64591AF0AD7A} - System32\Tasks\Norton Internet Security\Norton Internet Security Autofix => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {D5D23D1E-948C-434A-B882-0C7FF56ED511} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {DFE080E6-A535-4B29-B606-A654E7FA8F9B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe
Task: {E01FD670-5CD4-4929-9C77-6D563362A191} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {E0EB0DD2-6D50-43C0-8551-7958693C455C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16494464 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E20B021E-B615-42DB-BF09-1E5659C1F4F4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {E4A48798-9226-4CAE-BCEC-9DED3E55EF46} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E8E7D5C5-2050-4E3E-A45C-6864FB3A0F8A} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {E9A24034-2DFD-4B75-AC94-0F11017B4CDF} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {EDE04F98-0123-4783-9707-5196F510CBEB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe
Task: {F735DB83-1A2C-4BD8-85B5-6AD18A4F8FF0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-05] (Google Inc -> Google Inc.)
Task: {F7D313E5-D6DE-4D23-93AF-7C44245C75DE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION
Task: {FDC872FE-C0E5-443D-A5F7-207945D22CD5} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation) [Fichier non signé]
Task: {FFF455FD-6224-4A50-A603-AEE5590D4BBA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{48323d2a-3ae3-4b82-bcf9-2194a817136b}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{f0df3fb7-4385-448a-a8cc-7ffbc19dec6e}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{fb01a2cb-c21f-4762-bfe0-cdbc1716e481}: [DhcpNameServer] 193.252.165.234
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
FireFox:
========
FF DefaultProfile: hced7dft.default-1551014704168
FF ProfilePath: C:\Users\bertrand\AppData\Roaming\Oxylane\ONconnect\Profiles\k56nn0ho.default [2017-11-10]
FF ProfilePath: C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168 [2021-10-14]
FF Extension: (Norton Safe Search) - C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168\Extensions\nortonsafesearch_ul_2@symantec.com.xpi [2021-09-05] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/ds_modified/updates.json]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-09-05]
FF HKLM-x32\...\Firefox\Extensions: [firefox@bho.com] - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt
FF Extension: (HPSimplePass) - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt [2017-02-25] []
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-11-28] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-11-28] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-09-11] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fidikogfgleiaefnjbmnjaplmgknppkg]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2015-08-06] () [Fichier non signé]
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-06] (Advanced Micro Devices, Inc.) [Fichier non signé]
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S4 dgdersvc; C:\WINDOWS\system32\dgdersvc.exe [117584 2009-12-22] (SAMSUNG ELECTRONICS CO.,LTD. -> Devguru Co., Ltd.)
S4 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
S4 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
S4 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [125440 2015-12-24] (Softex Inc.) [Fichier non signé]
S4 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [620544 2008-11-11] (Nokia.) [Fichier non signé]
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S4 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel(R) iCDG WINS WSS CCF -> Intel Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 HPSupportSolutionsFrameworkService; "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" [X]
S2 HPTouchpointAnalyticsService; "C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe" [X]
S2 MBAMService; "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [20568 2009-12-22] (DEVGURU CO LTD -> Devguru Co., Ltd)
S3 pccsmcfd; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [25600 2008-08-28] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [302808 2017-02-25] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 usbscan; C:\Windows\SysWOW64\DRIVERS\usbscan.sys [8944 1999-05-05] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-12] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-12] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-14 23:22 - 2021-10-14 23:22 - 000443995 _____ C:\Users\bertrand\Desktop\ZHPDiag.html
2021-10-14 22:54 - 2021-10-14 22:54 - 003476632 _____ (Nicolas Coolman) C:\Users\bertrand\Downloads\ZHPSuite.exe
2021-10-14 07:44 - 2021-10-14 07:44 - 000001525 _____ C:\Users\bertrand\Desktop\malwarebyte.txt
2021-10-12 23:34 - 2021-10-12 23:34 - 002101944 _____ (Malwarebytes) C:\Users\bertrand\Downloads\MBSetup.exe
2021-10-12 23:32 - 2021-10-12 23:32 - 000001972 _____ C:\Users\bertrand\Desktop\AdwCleaner[C02].txt
2021-10-12 23:27 - 2021-10-12 23:27 - 000001819 _____ C:\Users\bertrand\Desktop\AdwCleaner[S02].txt
2021-10-12 23:21 - 2021-10-12 23:21 - 008553680 _____ (Malwarebytes) C:\Users\bertrand\Downloads\adwcleaner_8.3.0.exe
2021-10-12 23:03 - 2021-10-12 23:03 - 000140159 _____ C:\Users\bertrand\Desktop\ZHPCleaner (R).html
2021-10-12 23:03 - 2021-10-12 23:03 - 000097314 _____ C:\Users\bertrand\Desktop\ZHPCleaner (R).txt
2021-10-12 22:47 - 2021-10-12 22:47 - 000139468 _____ C:\Users\bertrand\Desktop\ZHPCleaner (S).html
2021-10-12 22:47 - 2021-10-12 22:47 - 000096834 _____ C:\Users\bertrand\Desktop\ZHPCleaner (S).txt
2021-10-12 20:40 - 2021-10-12 20:40 - 000000000 ____D C:\Users\bertrand\Downloads\Wub
2021-10-12 20:38 - 2021-10-12 20:38 - 001004586 _____ C:\Users\bertrand\Downloads\Wub.zip
2021-10-12 19:52 - 2021-10-12 19:52 - 000000000 ___HD C:\$WinREAgent
2021-10-12 19:09 - 2021-10-12 19:09 - 000001835 _____ C:\Users\bertrand\Desktop\CrystalDiskInfo.lnk
2021-10-12 19:09 - 2021-10-12 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2021-10-12 19:09 - 2021-10-12 19:09 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2021-10-12 19:04 - 2021-10-12 19:06 - 004707136 _____ (Crystal Dew World ) C:\Users\bertrand\Downloads\CrystalDiskInfo8_11_2.exe
2021-10-12 18:58 - 2021-10-12 22:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-10-12 18:28 - 2021-10-12 18:42 - 000044000 _____ C:\Users\bertrand\Desktop\Addition.txt
2021-10-12 18:26 - 2021-10-14 23:22 - 000365231 _____ C:\Users\bertrand\Desktop\ZHPDiag.txt
2021-10-12 18:02 - 2021-10-14 23:29 - 000024391 _____ C:\Users\bertrand\Desktop\FRST.txt
2021-10-12 17:45 - 2021-10-12 17:53 - 002310656 _____ (Farbar) C:\Users\bertrand\Desktop\FRST64.exe
2021-10-12 17:42 - 2021-10-12 17:43 - 000000875 _____ C:\Users\bertrand\Desktop\ZHPDiag.lnk
2021-10-12 17:22 - 2021-10-12 17:22 - 003281560 _____ (Nicolas Coolman) C:\Users\bertrand\Downloads\ZHPDiag3.exe
2021-10-11 23:38 - 2021-10-11 23:38 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-11 23:36 - 2021-10-11 23:36 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-10-11 23:36 - 2021-10-11 23:36 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-11 23:36 - 2021-10-11 23:36 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-11 23:36 - 2021-10-11 23:36 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-10-11 23:36 - 2021-10-11 23:36 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-11 23:35 - 2021-10-11 23:35 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-11 23:35 - 2021-10-11 23:35 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-11 23:35 - 2021-10-11 23:35 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-11 23:35 - 2021-10-11 23:35 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-11 23:35 - 2021-10-11 23:35 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-10-11 23:35 - 2021-10-11 23:35 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-10-11 23:34 - 2021-10-11 23:34 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-11 23:34 - 2021-10-11 23:34 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-11 23:33 - 2021-10-11 23:33 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-11 23:33 - 2021-10-11 23:33 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-11 23:33 - 2021-10-11 23:33 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-11 23:33 - 2021-10-11 23:33 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-11 23:32 - 2021-10-11 23:32 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-11 23:32 - 2021-10-11 23:32 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-10-11 19:41 - 2021-10-12 21:58 - 000000885 _____ C:\Users\bertrand\Desktop\ZHPCleaner.lnk
2021-10-11 18:48 - 2021-10-14 23:27 - 000000000 ____D C:\FRST
2021-10-11 18:37 - 2021-10-14 23:22 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\ZHP
2021-10-11 18:37 - 2021-10-14 22:57 - 000000875 _____ C:\Users\bertrand\Desktop\ZHPSuite.lnk
2021-10-11 18:37 - 2021-10-12 17:24 - 000000000 ____D C:\Users\bertrand\AppData\Local\ZHP
2021-10-11 18:30 - 2021-10-11 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-10-11 18:02 - 2021-10-12 08:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-10-09 20:01 - 2021-10-09 20:02 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\HP
2021-10-09 19:49 - 2021-10-09 19:51 - 000000000 ____D C:\Users\bertrand\Downloads\HP Downloads
2021-10-09 16:47 - 2021-10-09 16:47 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2021-10-07 17:10 - 2021-10-07 17:10 - 000352223 _____ C:\Users\bertrand\Downloads\BRM_des_CH'TIS.gpx
2021-10-07 13:34 - 2021-10-07 13:34 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-10-07 13:32 - 2021-10-07 13:32 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-10-07 13:31 - 2021-10-07 13:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-10-07 13:31 - 2021-10-07 13:31 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-07 13:31 - 2021-10-07 13:31 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-10-07 13:30 - 2021-10-07 13:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-10-07 13:24 - 2021-10-07 13:24 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-07 13:19 - 2021-10-07 13:19 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-14 23:35 - 2016-07-05 10:31 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-14 23:23 - 2020-10-05 12:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-14 22:53 - 2015-07-29 18:06 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-10-14 20:29 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-14 20:07 - 2020-10-05 13:44 - 000004162 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{11D7436B-81C5-498F-A623-7DE415430AB8}
2021-10-14 07:55 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-14 07:54 - 2020-06-02 12:16 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-14 07:54 - 2020-06-02 12:16 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-14 07:54 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-12 23:34 - 2019-02-07 18:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-12 23:33 - 2017-01-12 09:37 - 000000000 ____D C:\Users\bertrand\AppData\LocalLow\Mozilla
2021-10-12 23:32 - 2014-10-27 22:46 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-10-12 23:32 - 2014-10-27 22:32 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-10-12 23:15 - 2018-11-11 14:14 - 000000000 ____D C:\Users\bertrand\AppData\Local\D3DSCache
2021-10-12 23:14 - 2015-08-22 15:37 - 000000000 ____D C:\Users\bertrand\AppData\Local\CrashDumps
2021-10-12 23:09 - 2020-10-05 13:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-12 23:09 - 2020-10-05 12:25 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-12 23:09 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-12 23:09 - 2015-08-20 19:01 - 000000000 ____D C:\ProgramData\Norton
2021-10-12 23:06 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-12 23:06 - 2017-11-05 22:45 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-10-12 22:18 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-10-12 22:18 - 2018-06-29 13:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-12 22:08 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-10-12 22:08 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-12 21:51 - 2015-08-20 19:05 - 000000000 ____D C:\ProgramData\NortonInstaller
2021-10-12 21:48 - 2018-11-11 16:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-10-12 21:47 - 2020-11-08 22:06 - 000000000 ____D C:\ProgramData\GlarySoft
2021-10-12 21:47 - 2015-07-29 18:07 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\GlarySoft
2021-10-12 21:16 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-10-12 20:23 - 2020-10-05 12:34 - 000000000 ____D C:\Users\bertrand
2021-10-12 20:03 - 2020-10-05 12:53 - 001818336 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-12 20:03 - 2019-12-07 16:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-10-12 20:03 - 2019-12-07 16:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-10-12 20:03 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-12 19:12 - 2017-12-03 21:35 - 000000000 ____D C:\Users\bertrand\Documents\Myrna
2021-10-12 17:13 - 2015-01-05 20:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2021-10-12 17:13 - 2014-10-27 22:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2021-10-12 08:16 - 2020-10-05 12:26 - 000488328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-12 08:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-10-11 23:56 - 2020-10-02 11:00 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-11 23:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-11 21:56 - 2015-09-08 10:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-10-11 21:40 - 2015-09-08 10:13 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-10-11 18:30 - 2018-11-11 16:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-10-11 18:18 - 2017-11-18 18:39 - 000000000 ____D C:\Program Files\HP
2021-10-11 18:18 - 2017-11-18 18:38 - 000000000 ____D C:\ProgramData\HP
2021-10-11 18:17 - 2015-07-29 17:44 - 000000000 ____D C:\Users\bertrand\AppData\Local\Hewlett-Packard
2021-10-11 18:17 - 2015-07-29 17:12 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\Hewlett-Packard
2021-10-11 18:17 - 2014-10-27 22:49 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Hewlett-Packard
2021-10-10 19:00 - 2017-12-15 15:32 - 000000000 ____D C:\Users\bertrand\AppData\Local\Packages
2021-10-10 13:32 - 2020-10-05 13:44 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-10 13:32 - 2020-10-05 13:44 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-10 13:28 - 2020-10-05 13:44 - 000002064 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-10-09 20:12 - 2015-12-12 22:29 - 000000000 ____D C:\Program Files\Common Files\AV
2021-10-09 20:02 - 2017-02-25 22:45 - 000000000 ____D C:\Program Files (x86)\HP
2021-10-09 20:02 - 2015-07-29 17:44 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\hpqlog
2021-10-09 20:00 - 2020-10-05 13:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-10-09 19:52 - 2014-04-05 01:55 - 000000000 ____D C:\SWSetup
2021-10-09 19:38 - 2018-02-26 13:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64
2021-10-09 19:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-09 19:07 - 2020-10-05 13:44 - 000002762 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2021-10-09 17:03 - 2020-10-05 13:44 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-25515482-1930536684-1965771000-1002
2021-10-09 17:03 - 2020-10-05 12:34 - 000002433 _____ C:\Users\bertrand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-09 16:14 - 2021-09-05 09:11 - 000000000 ____D C:\Users\bertrand\AppData\LocalLow\Norton
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-10-07 13:57 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-10-07 13:39 - 2020-10-05 13:44 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-07 13:39 - 2020-10-05 13:44 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par bertrand (administrateur) sur PCBMJR (Hewlett-Packard HP 15 Notebook PC) (14-10-2021 23:25:29)
Exécuté depuis C:\Users\bertrand\Desktop
Profils chargés: bertrand
Platform: Microsoft Windows 10 Famille Version 20H2 19042.1237 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <8>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\bertrand\AppData\Roaming\ZHP\ZHPSuite.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKU\S-1-5-21-25515482-1930536684-1965771000-1002\...\MountPoints2: {fe8f3ad4-24ae-11e5-827e-38b1dbfdbd48} - "F:\LaunchU3.exe"
HKLM\...\Windows x64\Print Processors\Canon MG5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAD.DLL [28672 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5100 series: C:\WINDOWS\system32\CNMLMAD.DLL [361472 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [423936 2014-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\94.0.4606.81\Installer\chrmstp.exe [2021-10-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [Fichier non signé]
HKLM\Software\...\Authentication\Credential Provider Filters: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {006DECF3-3624-4CED-A033-15216ED3E669} - System32\Tasks\Norton Internet Security\Norton Internet Security Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {0C6E1DED-2971-41F6-93FB-13E798011340} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {1476B587-D5BD-4660-B1CD-1489EA60A6F7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
Task: {175C216F-8739-4A7B-9324-AA2E522F23F0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {17770176-FEC7-4E2B-BB8A-BF9482CD5EF8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
Task: {22F38649-3F6C-4895-97C1-057136073D58} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {25E3BD42-B98C-4512-AC63-D6CD1F299E31} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {2B89891B-E0A9-4268-B07B-A6EED6FF21D1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION
Task: {3249EF1B-BC5D-4E9D-9DA4-09DF5B0417CE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {35BE651A-D28A-4FD1-AD80-00C0EA6A4F89} - \Optimize Start Menu Cache Files-S-1-5-21-25515482-1930536684-1965771000-1002 -> Pas de fichier <==== ATTENTION
Task: {376FE21E-9C88-4CCA-921C-F075739729B2} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {3BFCC2B4-9CF9-45ED-8C43-9F30B8F5D455} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-10-11] (Mozilla Corporation -> Mozilla Foundation)
Task: {40464758-5B49-4C70-BE3F-6D5E6FC1BD53} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {416440CF-4FE4-42A3-9A49-78AD7E746B92} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {542B58CD-FA5F-41AF-A281-D5FE44FE51CB} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {5ACDD2A5-F6A2-4A47-B895-DF9F552FB4B3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {5B274AE5-F30B-49FB-95B1-479ADB3A64CB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {63083DE5-B939-40CD-815D-1A71AD967F80} - System32\Tasks\Start SimplePass => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [4822264 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {64982498-7F43-4440-905D-59983C54FD0B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {66D4ABE8-D95C-4032-A614-98F0BCE6E52B} - System32\Tasks\Start OPBHOBrokerDesktop => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {6D95A582-217C-499C-928E-BCE864DF5549} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1341008 2020-09-06] (Adobe Inc. -> Adobe Inc.)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {70BAED80-2F35-4F5A-8A3E-0BCB131807A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {7181BD2C-66DC-41AD-B7B4-1DCCB81B844E} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40880 2021-08-24] (Garmin International, Inc. -> )
Task: {730173EB-2CC5-4953-9F6A-0007295C51FB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {7394A1A4-1406-4380-BAB4-ADB2970292DC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-05] (Google Inc -> Google Inc.)
Task: {77073D53-1748-4D03-B54D-C2538A3275B3} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {79691D71-38BB-4525-9D6B-0D5B6306D541} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {7AF23CAE-FE2E-4382-851A-E435D63DC7AC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {7C5F87F5-2428-4916-AD93-6DC00DE547CB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {7DF2DE8B-5C17-4BA2-ACCA-3E1AB4110563} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {88F7873D-B761-4E87-8889-B98E5629764A} - System32\Tasks\Start OPBHOBroker => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {90E6679C-1AA5-4099-91D1-B72D5A2D6DB3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {920AB5D8-DCA3-4927-A4AD-33E0C1A764FA} - System32\Tasks\Norton Internet Security\Norton Internet Security Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {98D2979D-F0BB-45D6-BD75-52DB00934E28} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {994596D2-339C-4358-9CE5-E1BB5A8EDA10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A3E3C51D-4B2D-4EA9-AB03-0DC4EB955657} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {A5F3EB62-D51D-428C-AA9E-BA6360536B5A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {ABA91C62-3AC8-4713-BCD4-D4F1DEB1EAAC} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: {B41EE924-73E3-4530-B596-F5C0AF385B12} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4C4AE9E-5DDE-47C2-A3E0-F71E7A624A53} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {B931F871-450B-45A0-8698-D208DE42F84F} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {C13544DA-4E8E-460A-8D40-4059DF43388A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {CE5ACE81-BF01-442F-9654-1F42BEF6E81D} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {D2CF6227-9A36-4AE0-AF0E-64591AF0AD7A} - System32\Tasks\Norton Internet Security\Norton Internet Security Autofix => C:\Program Files (x86)\Norton Internet Security\Engine\22.20.2.57\SymErr.exe
Task: {D5D23D1E-948C-434A-B882-0C7FF56ED511} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {DFE080E6-A535-4B29-B606-A654E7FA8F9B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe
Task: {E01FD670-5CD4-4929-9C77-6D563362A191} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {E0EB0DD2-6D50-43C0-8551-7958693C455C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16494464 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E20B021E-B615-42DB-BF09-1E5659C1F4F4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {E4A48798-9226-4CAE-BCEC-9DED3E55EF46} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E8E7D5C5-2050-4E3E-A45C-6864FB3A0F8A} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {E9A24034-2DFD-4B75-AC94-0F11017B4CDF} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [104719784 2021-07-01] (HP Inc. -> HP Inc.)
Task: {EDE04F98-0123-4783-9707-5196F510CBEB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe
Task: {F735DB83-1A2C-4BD8-85B5-6AD18A4F8FF0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-05] (Google Inc -> Google Inc.)
Task: {F7D313E5-D6DE-4D23-93AF-7C44245C75DE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION
Task: {FDC872FE-C0E5-443D-A5F7-207945D22CD5} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation) [Fichier non signé]
Task: {FFF455FD-6224-4A50-A603-AEE5590D4BBA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{48323d2a-3ae3-4b82-bcf9-2194a817136b}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{f0df3fb7-4385-448a-a8cc-7ffbc19dec6e}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{fb01a2cb-c21f-4762-bfe0-cdbc1716e481}: [DhcpNameServer] 193.252.165.234
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
FireFox:
========
FF DefaultProfile: hced7dft.default-1551014704168
FF ProfilePath: C:\Users\bertrand\AppData\Roaming\Oxylane\ONconnect\Profiles\k56nn0ho.default [2017-11-10]
FF ProfilePath: C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168 [2021-10-14]
FF Extension: (Norton Safe Search) - C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168\Extensions\nortonsafesearch_ul_2@symantec.com.xpi [2021-09-05] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/ds_modified/updates.json]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\bertrand\AppData\Roaming\Mozilla\Firefox\Profiles\hced7dft.default-1551014704168\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-09-05]
FF HKLM-x32\...\Firefox\Extensions: [firefox@bho.com] - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt
FF Extension: (HPSimplePass) - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt [2017-02-25] []
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-11-28] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-11-28] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-09-11] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fidikogfgleiaefnjbmnjaplmgknppkg]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2015-08-06] () [Fichier non signé]
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-06] (Advanced Micro Devices, Inc.) [Fichier non signé]
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S4 dgdersvc; C:\WINDOWS\system32\dgdersvc.exe [117584 2009-12-22] (SAMSUNG ELECTRONICS CO.,LTD. -> Devguru Co., Ltd.)
S4 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
S4 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
S4 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [125440 2015-12-24] (Softex Inc.) [Fichier non signé]
S4 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [620544 2008-11-11] (Nokia.) [Fichier non signé]
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S4 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel(R) iCDG WINS WSS CCF -> Intel Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 HPSupportSolutionsFrameworkService; "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" [X]
S2 HPTouchpointAnalyticsService; "C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe" [X]
S2 MBAMService; "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [20568 2009-12-22] (DEVGURU CO LTD -> Devguru Co., Ltd)
S3 pccsmcfd; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [25600 2008-08-28] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [302808 2017-02-25] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 usbscan; C:\Windows\SysWOW64\DRIVERS\usbscan.sys [8944 1999-05-05] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-12] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-12] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-14 23:22 - 2021-10-14 23:22 - 000443995 _____ C:\Users\bertrand\Desktop\ZHPDiag.html
2021-10-14 22:54 - 2021-10-14 22:54 - 003476632 _____ (Nicolas Coolman) C:\Users\bertrand\Downloads\ZHPSuite.exe
2021-10-14 07:44 - 2021-10-14 07:44 - 000001525 _____ C:\Users\bertrand\Desktop\malwarebyte.txt
2021-10-12 23:34 - 2021-10-12 23:34 - 002101944 _____ (Malwarebytes) C:\Users\bertrand\Downloads\MBSetup.exe
2021-10-12 23:32 - 2021-10-12 23:32 - 000001972 _____ C:\Users\bertrand\Desktop\AdwCleaner[C02].txt
2021-10-12 23:27 - 2021-10-12 23:27 - 000001819 _____ C:\Users\bertrand\Desktop\AdwCleaner[S02].txt
2021-10-12 23:21 - 2021-10-12 23:21 - 008553680 _____ (Malwarebytes) C:\Users\bertrand\Downloads\adwcleaner_8.3.0.exe
2021-10-12 23:03 - 2021-10-12 23:03 - 000140159 _____ C:\Users\bertrand\Desktop\ZHPCleaner (R).html
2021-10-12 23:03 - 2021-10-12 23:03 - 000097314 _____ C:\Users\bertrand\Desktop\ZHPCleaner (R).txt
2021-10-12 22:47 - 2021-10-12 22:47 - 000139468 _____ C:\Users\bertrand\Desktop\ZHPCleaner (S).html
2021-10-12 22:47 - 2021-10-12 22:47 - 000096834 _____ C:\Users\bertrand\Desktop\ZHPCleaner (S).txt
2021-10-12 20:40 - 2021-10-12 20:40 - 000000000 ____D C:\Users\bertrand\Downloads\Wub
2021-10-12 20:38 - 2021-10-12 20:38 - 001004586 _____ C:\Users\bertrand\Downloads\Wub.zip
2021-10-12 19:52 - 2021-10-12 19:52 - 000000000 ___HD C:\$WinREAgent
2021-10-12 19:09 - 2021-10-12 19:09 - 000001835 _____ C:\Users\bertrand\Desktop\CrystalDiskInfo.lnk
2021-10-12 19:09 - 2021-10-12 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2021-10-12 19:09 - 2021-10-12 19:09 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2021-10-12 19:04 - 2021-10-12 19:06 - 004707136 _____ (Crystal Dew World ) C:\Users\bertrand\Downloads\CrystalDiskInfo8_11_2.exe
2021-10-12 18:58 - 2021-10-12 22:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-10-12 18:28 - 2021-10-12 18:42 - 000044000 _____ C:\Users\bertrand\Desktop\Addition.txt
2021-10-12 18:26 - 2021-10-14 23:22 - 000365231 _____ C:\Users\bertrand\Desktop\ZHPDiag.txt
2021-10-12 18:02 - 2021-10-14 23:29 - 000024391 _____ C:\Users\bertrand\Desktop\FRST.txt
2021-10-12 17:45 - 2021-10-12 17:53 - 002310656 _____ (Farbar) C:\Users\bertrand\Desktop\FRST64.exe
2021-10-12 17:42 - 2021-10-12 17:43 - 000000875 _____ C:\Users\bertrand\Desktop\ZHPDiag.lnk
2021-10-12 17:22 - 2021-10-12 17:22 - 003281560 _____ (Nicolas Coolman) C:\Users\bertrand\Downloads\ZHPDiag3.exe
2021-10-11 23:38 - 2021-10-11 23:38 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-11 23:36 - 2021-10-11 23:36 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-10-11 23:36 - 2021-10-11 23:36 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-11 23:36 - 2021-10-11 23:36 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-11 23:36 - 2021-10-11 23:36 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-10-11 23:36 - 2021-10-11 23:36 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-11 23:35 - 2021-10-11 23:35 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-11 23:35 - 2021-10-11 23:35 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-11 23:35 - 2021-10-11 23:35 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-11 23:35 - 2021-10-11 23:35 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-11 23:35 - 2021-10-11 23:35 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-10-11 23:35 - 2021-10-11 23:35 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-10-11 23:34 - 2021-10-11 23:34 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-11 23:34 - 2021-10-11 23:34 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-11 23:33 - 2021-10-11 23:33 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-11 23:33 - 2021-10-11 23:33 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-11 23:33 - 2021-10-11 23:33 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-11 23:33 - 2021-10-11 23:33 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-11 23:32 - 2021-10-11 23:32 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-11 23:32 - 2021-10-11 23:32 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-10-11 19:41 - 2021-10-12 21:58 - 000000885 _____ C:\Users\bertrand\Desktop\ZHPCleaner.lnk
2021-10-11 18:48 - 2021-10-14 23:27 - 000000000 ____D C:\FRST
2021-10-11 18:37 - 2021-10-14 23:22 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\ZHP
2021-10-11 18:37 - 2021-10-14 22:57 - 000000875 _____ C:\Users\bertrand\Desktop\ZHPSuite.lnk
2021-10-11 18:37 - 2021-10-12 17:24 - 000000000 ____D C:\Users\bertrand\AppData\Local\ZHP
2021-10-11 18:30 - 2021-10-11 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-10-11 18:02 - 2021-10-12 08:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-10-09 20:01 - 2021-10-09 20:02 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\HP
2021-10-09 19:49 - 2021-10-09 19:51 - 000000000 ____D C:\Users\bertrand\Downloads\HP Downloads
2021-10-09 16:47 - 2021-10-09 16:47 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2021-10-07 17:10 - 2021-10-07 17:10 - 000352223 _____ C:\Users\bertrand\Downloads\BRM_des_CH'TIS.gpx
2021-10-07 13:34 - 2021-10-07 13:34 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-10-07 13:34 - 2021-10-07 13:34 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-10-07 13:32 - 2021-10-07 13:32 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-10-07 13:31 - 2021-10-07 13:31 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-10-07 13:31 - 2021-10-07 13:31 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-07 13:31 - 2021-10-07 13:31 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-10-07 13:30 - 2021-10-07 13:30 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-10-07 13:24 - 2021-10-07 13:24 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-07 13:19 - 2021-10-07 13:19 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-14 23:35 - 2016-07-05 10:31 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-14 23:23 - 2020-10-05 12:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-14 22:53 - 2015-07-29 18:06 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-10-14 20:29 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-14 20:07 - 2020-10-05 13:44 - 000004162 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{11D7436B-81C5-498F-A623-7DE415430AB8}
2021-10-14 07:55 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-14 07:54 - 2020-06-02 12:16 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-14 07:54 - 2020-06-02 12:16 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-14 07:54 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-12 23:34 - 2019-02-07 18:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-12 23:33 - 2017-01-12 09:37 - 000000000 ____D C:\Users\bertrand\AppData\LocalLow\Mozilla
2021-10-12 23:32 - 2014-10-27 22:46 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-10-12 23:32 - 2014-10-27 22:32 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-10-12 23:15 - 2018-11-11 14:14 - 000000000 ____D C:\Users\bertrand\AppData\Local\D3DSCache
2021-10-12 23:14 - 2015-08-22 15:37 - 000000000 ____D C:\Users\bertrand\AppData\Local\CrashDumps
2021-10-12 23:09 - 2020-10-05 13:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-12 23:09 - 2020-10-05 12:25 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-12 23:09 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-12 23:09 - 2015-08-20 19:01 - 000000000 ____D C:\ProgramData\Norton
2021-10-12 23:06 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-12 23:06 - 2017-11-05 22:45 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-10-12 22:18 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-10-12 22:18 - 2018-06-29 13:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-12 22:08 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-10-12 22:08 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-12 21:51 - 2015-08-20 19:05 - 000000000 ____D C:\ProgramData\NortonInstaller
2021-10-12 21:48 - 2018-11-11 16:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-10-12 21:47 - 2020-11-08 22:06 - 000000000 ____D C:\ProgramData\GlarySoft
2021-10-12 21:47 - 2015-07-29 18:07 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\GlarySoft
2021-10-12 21:16 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-10-12 20:23 - 2020-10-05 12:34 - 000000000 ____D C:\Users\bertrand
2021-10-12 20:03 - 2020-10-05 12:53 - 001818336 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-12 20:03 - 2019-12-07 16:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-10-12 20:03 - 2019-12-07 16:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-10-12 20:03 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-12 19:12 - 2017-12-03 21:35 - 000000000 ____D C:\Users\bertrand\Documents\Myrna
2021-10-12 17:13 - 2015-01-05 20:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2021-10-12 17:13 - 2014-10-27 22:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2021-10-12 08:16 - 2020-10-05 12:26 - 000488328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-10-12 08:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-12 08:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-10-11 23:56 - 2020-10-02 11:00 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-11 23:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-11 21:56 - 2015-09-08 10:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-10-11 21:40 - 2015-09-08 10:13 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-10-11 18:30 - 2018-11-11 16:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-10-11 18:18 - 2017-11-18 18:39 - 000000000 ____D C:\Program Files\HP
2021-10-11 18:18 - 2017-11-18 18:38 - 000000000 ____D C:\ProgramData\HP
2021-10-11 18:17 - 2015-07-29 17:44 - 000000000 ____D C:\Users\bertrand\AppData\Local\Hewlett-Packard
2021-10-11 18:17 - 2015-07-29 17:12 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\Hewlett-Packard
2021-10-11 18:17 - 2014-10-27 22:49 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Hewlett-Packard
2021-10-10 19:00 - 2017-12-15 15:32 - 000000000 ____D C:\Users\bertrand\AppData\Local\Packages
2021-10-10 13:32 - 2020-10-05 13:44 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-10 13:32 - 2020-10-05 13:44 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-10 13:28 - 2020-10-05 13:44 - 000002064 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-10-09 20:12 - 2015-12-12 22:29 - 000000000 ____D C:\Program Files\Common Files\AV
2021-10-09 20:02 - 2017-02-25 22:45 - 000000000 ____D C:\Program Files (x86)\HP
2021-10-09 20:02 - 2015-07-29 17:44 - 000000000 ____D C:\Users\bertrand\AppData\Roaming\hpqlog
2021-10-09 20:00 - 2020-10-05 13:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-10-09 19:52 - 2014-04-05 01:55 - 000000000 ____D C:\SWSetup
2021-10-09 19:38 - 2018-02-26 13:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64
2021-10-09 19:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-09 19:07 - 2020-10-05 13:44 - 000002762 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2021-10-09 17:03 - 2020-10-05 13:44 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-25515482-1930536684-1965771000-1002
2021-10-09 17:03 - 2020-10-05 12:34 - 000002433 _____ C:\Users\bertrand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-09 16:14 - 2021-09-05 09:11 - 000000000 ____D C:\Users\bertrand\AppData\LocalLow\Norton
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-10-07 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-10-07 13:57 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-10-07 13:39 - 2020-10-05 13:44 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-07 13:39 - 2020-10-05 13:44 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================