Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-11-2021
Exécuté par reneb (administrateur) sur DESKTOP-RV2GB1C (HP HP Slim Desktop 290-p0xxx) (21-11-2021 09:34:21)
Exécuté depuis D:\René\Téléchargements
Profils chargés: reneb
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1348 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\IntelCpHeciSvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\ProgramData\MB3Install\MBAMIService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.46.32012.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.11411.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtAudioServ.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Users\reneb\AppData\Local\Mozilla Firefox\firefox.exe <23>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIWDE.EXE
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [707624 2018-08-08] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPLTarget\P0000000000000003] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {21b07d11-49da-11ea-b41a-80ce62f12447} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {72f48cf2-a374-11eb-b8fe-80ce62f12447} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {7e2ae4d0-776c-11ea-b4be-7440bb603ba8} - "E:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: CNMLMCT.DLL
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: CNMLMG3.DLL
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [375296 2015-03-17] (CANON INC.) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON XP-4100 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBWDE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.45\Installer\chrmstp.exe [2021-11-18] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {08C02C8B-2DFF-4846-B858-E135FCF7A4A5} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644472 2019-06-21] (HP Inc. -> HP Inc.)
Task: {0BEC47DA-25F4-4279-97F7-F8298DBEBFFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [216432 2017-09-27] (HP Inc. -> HP Inc.)
Task: {12CC00D0-6072-4D44-903F-C184918BA921} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-23] (Google LLC -> Google LLC)
Task: {15EF3F51-EE44-488B-AB81-A7A9A9C09107} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6242232 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FACB0D9-60B9-466D-A3E4-B03EC40B3271} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-27] (HP Inc. -> HP Inc.)
Task: {2349F028-D874-456B-9467-19CED1933595} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-09-27] (HP Inc. -> HP Inc.)
Task: {2685BBD8-D4FC-4C64-9444-13ED28ACEDA5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2A59B2C4-57DA-4815-A438-D672FFD32F2D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108888 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {2BC1C42D-29B4-4179-88FD-29161C7CDE90} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {3E377030-3A37-4E06-BE70-DE8416171539} - System32\Tasks\EPSON XP-4100 Series Update {70046AD4-C5B6-45D2-A49D-C6235D41EE4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {3F2947C8-12EE-4395-9166-5B397F6AD1C8} - System32\Tasks\HPCeeScheduleForreneb => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97656 2018-09-11] (HP Inc. -> HP Inc.)
Task: {4ACC1987-7B6F-45F6-AC75-FE62748A8242} - System32\Tasks\HDCleanerSkipUAC => C:\USERS\RENEB\DOWNLOADS\HDCLEANERX32\HDCleaner.exe /SKIPUAC/ (Pas de fichier)
Task: {52F263A7-2A95-4E4A-8B35-D971EA04DBF7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {5862A58E-C04E-4E68-A247-A5C574E301E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7216577D-A97B-46CA-9C65-82417A3F7D39} - System32\Tasks\CCleanerSkipUAC - reneb => C:\Program Files\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {80BA2026-6538-4B6A-AD10-76F52F7B956B} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\reneb\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {81B9F3A6-004A-441D-8144-86C952A9F443} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {858191E2-EDDB-4307-A6A2-FF76231D4C8C} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {88C7C859-4E97-4D3C-B00E-9E25CDAEB459} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-23] (Google LLC -> Google LLC)
Task: {8BBD5DF4-4777-4CE3-B985-FC85E6A03093} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [119664 2017-09-27] (HP Inc. -> HP Inc.)
Task: {8E7C41FC-D8C2-400C-83D7-92FC38F990C9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6242232 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {8FFE6046-D330-41CB-B590-C45D52D2D4F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-27] (HP Inc. -> HP Inc.)
Task: {914A1797-662F-4560-9892-DD8547DC9F77} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [461824 2017-10-06] (HP Inc. -> HP Inc.)
Task: {A6630C52-9107-4D81-8175-CDD72B663B9F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108888 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0BF8DF8-83C9-48EB-B892-6ADD28832298} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-27] (HP Inc. -> HP Inc.)
Task: {B18A4055-C26C-4528-AB63-B1F5A9D6E54D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {C5A59702-3FA0-4853-8F90-78D85AE4CBCD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-27] (HP Inc. -> HP Inc.)
Task: {D6810191-D5B7-4FFD-A301-600AD094DB91} - System32\Tasks\Mozilla\Firefox Default Browser Agent 29CA28E8F1A45F10 => C:\Users\reneb\AppData\Local\Mozilla Firefox\default-browser-agent.exe [682936 2021-11-04] (Mozilla Corporation -> Mozilla Foundation)
Task: {DF6BFA14-76F4-4A4D-BDE9-2F748384F68D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-03-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {E89DDBBD-4DBF-42C4-9AAE-32EEC75EF92B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE2D8E84-FF11-4D3D-BBCB-DABBA9E6C6DD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4846AF1-77E4-4BC3-B5BC-889C8CCD8A6C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FCDCC940-4EAD-452E-BC2A-EA3016E563FA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1057648 2017-09-27] (HP Inc. -> HP Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-4100 Series Update {70046AD4-C5B6-45D2-A49D-C6235D41EE4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE:/EXE:{70046AD4-C5B6-45D2-A49D-C6235D41EE4B} /F:UpdateWORKGROUP\DESKTOP-RV2GB1C$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForreneb.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4c4e8210-adf1-4695-93d4-37aa4a493c32}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{cf582998-20cb-4406-ae3f-c5a2a2ea208a}: [DhcpNameServer] 192.168.1.254
Edge:
=======
DownloadDir: D:\René\Téléchargements
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\reneb\AppData\Local\Microsoft\Edge\User Data\Default [2021-11-21]
FireFox:
========
FF DefaultProfile: exrnc9e5.default-1615069154269
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\tdreofey.default-release-1 [2021-11-20]
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\3upuyqrz.default-release [2021-11-20]
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269 [2021-11-21]
FF Notifications: Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269 -> hxxps://www.santediscount.com; hxxps://www.pinterest.fr
FF Extension: (uBlock Origin) - C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269\Extensions\uBlock0@raymondhill.net.xpi [2021-10-15]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default [2021-11-20]
CHR Extension: (Slides) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-02-15]
CHR Extension: (Docs) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-02-15]
CHR Extension: (Google Drive) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-02-15]
CHR Extension: (YouTube) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-02-15]
CHR Extension: (Avira Password Manager) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2021-07-12]
CHR Extension: (Sheets) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-02-15]
CHR Extension: (Protection Web Avira) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-07-12]
CHR Extension: (Google Docs hors connexion) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-24]
CHR Extension: (Avast Online Security) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-02-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-15]
CHR Extension: (Gmail) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-02-15]
CHR Extension: (Chrome Media Router) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-08]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2019-07-04] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1321608 2018-09-25] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [477184 2017-10-06] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc. -> HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 MBAMIService; C:\ProgramData\MB3Install\MBAMIService.exe [231120 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 RtkBtAudioServ; C:\WINDOWS\RtkBtAudioServ.exe [313344 2019-04-08] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13341480 2021-11-06] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1548080 2019-05-23] (WildTangent Inc -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 qcusbnet; C:\WINDOWS\System32\drivers\qcusbnet.sys [428600 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 qcusbwwan; C:\WINDOWS\System32\drivers\qcusbwwan.sys [557112 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435424 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-11-21 09:34 - 2021-11-21 09:34 - 000000000 ____D C:\FRST
2021-11-21 09:32 - 2021-11-21 09:32 - 000000943 _____ C:\Users\reneb\Desktop\FRST64.exe - Raccourci.lnk
2021-11-21 09:15 - 2021-11-21 09:15 - 000322617 _____ C:\Users\reneb\Desktop\ZHPDiag.txt
2021-11-21 09:10 - 2021-11-21 09:10 - 000000872 _____ C:\Users\reneb\Desktop\ZHPSuite.lnk
2021-11-21 09:08 - 2021-11-21 09:08 - 000000959 _____ C:\Users\reneb\Desktop\ZHPSuite.exe - Raccourci.lnk
2021-11-21 00:10 - 2021-11-21 00:10 - 000000000 ___HD C:\$WinREAgent
2021-11-14 22:46 - 2021-11-19 08:03 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForreneb.job
2021-11-14 22:46 - 2021-11-18 22:45 - 000003256 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForreneb
2021-11-14 21:54 - 2021-11-14 21:54 - 000000959 _____ C:\Users\reneb\Desktop\ZHPDiag3.exe - Raccourci.lnk
2021-11-10 21:55 - 2021-11-10 21:55 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000011363 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-11-04 19:57 - 2021-11-04 19:57 - 000000000 ____D C:\Users\reneb\AppData\Local\Mozilla Firefox
2021-10-24 16:40 - 2021-10-24 16:40 - 000001153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-10-24 16:40 - 2021-10-24 16:40 - 000000000 ____D C:\Program Files\PCHealthCheck
2021-10-14 22:01 - 2021-10-14 22:01 - 000000973 _____ C:\Users\reneb\Desktop\ZHPCleaner.exe - Raccourci.lnk
2021-10-14 21:02 - 2021-10-14 21:02 - 000000223 _____ C:\Users\reneb\Desktop\Facebook - Connexion ou inscription.URL
2021-10-12 19:47 - 2021-10-12 19:47 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-10 02:36 - 2021-10-10 02:36 - 000000255 _____ C:\Users\reneb\Desktop\Tout savoir sur les cartouches d’encre.URL
2021-10-08 16:36 - 2021-10-08 16:36 - 000000247 _____ C:\Users\reneb\Desktop\Google Maps.URL
2021-09-15 21:08 - 2021-09-15 21:08 - 000000236 _____ C:\Users\reneb\Desktop\Le top des blagues de 2021 Blague Drôle.URL
2021-09-14 19:27 - 2021-09-14 19:27 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-14 19:27 - 2021-09-14 19:27 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-13 20:26 - 2021-09-13 20:26 - 000000259 _____ C:\Users\reneb\Desktop\Carte de France avec régions et départements.URL
2021-09-07 20:13 - 2021-11-21 00:15 - 108527616 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-09-06 22:00 - 2021-09-06 22:00 - 000000281 _____ C:\Users\reneb\Desktop\Comparatif des prix du carburant à Chalon Sur Saone (Saône-et-Loire) - Carburants.URL
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-11-21 09:33 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-11-21 09:18 - 2019-03-07 11:08 - 000000000 ____D C:\ProgramData\Mozilla
2021-11-21 09:17 - 2019-03-07 11:08 - 000000000 ____D C:\Users\reneb\AppData\LocalLow\Mozilla
2021-11-21 09:15 - 2019-03-07 16:41 - 000000000 ____D C:\Users\reneb\AppData\Roaming\ZHP
2021-11-21 09:05 - 2020-08-26 16:26 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-21 08:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-11-21 08:39 - 2020-06-16 22:50 - 001839268 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-11-21 08:39 - 2019-12-07 15:49 - 000791762 _____ C:\WINDOWS\system32\perfh00C.dat
2021-11-21 08:39 - 2019-12-07 15:49 - 000149928 _____ C:\WINDOWS\system32\perfc00C.dat
2021-11-21 08:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-11-21 08:35 - 2020-09-06 21:38 - 000000000 ____D C:\Program Files\CCleaner
2021-11-21 08:33 - 2020-06-16 22:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-11-21 08:33 - 2020-06-16 22:46 - 000008192 ___SH C:\DumpStack.log.tmp
2021-11-21 08:33 - 2019-03-07 18:05 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-11-21 08:33 - 2019-03-02 01:33 - 000000000 __SHD C:\Users\reneb\IntelGraphicsProfiles
2021-11-21 00:15 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-11-21 00:13 - 2021-03-23 23:37 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-21 00:13 - 2021-03-23 23:37 - 000002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-21 00:13 - 2020-08-27 19:18 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-11-21 00:12 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-11-20 23:56 - 2020-06-16 22:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-11-20 22:25 - 2020-03-23 19:20 - 000000000 ____D C:\Users\reneb\Desktop\Captvty
2021-11-20 20:09 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-11-19 14:04 - 2019-10-07 10:39 - 000000000 ____D C:\Users\reneb\AppData\Roaming\MyPhoneExplorer
2021-11-17 19:47 - 2020-08-27 19:18 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-11-17 19:47 - 2020-08-27 19:18 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-11-17 08:24 - 2020-09-07 16:22 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-11-16 07:28 - 2019-03-02 01:33 - 000000000 ____D C:\ProgramData\Packages
2021-11-14 22:05 - 2021-06-14 21:42 - 000001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2021-11-14 22:05 - 2021-06-14 21:42 - 000001135 _____ C:\Users\Public\Desktop\paint.net.lnk
2021-11-14 22:05 - 2021-06-14 21:42 - 000000000 ____D C:\Program Files\paint.net
2021-11-14 09:05 - 2019-03-14 18:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-11-11 16:21 - 2019-03-02 01:33 - 000000000 ____D C:\Users\reneb\AppData\Local\Packages
2021-11-10 21:58 - 2020-06-16 22:46 - 000525952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-11-10 21:58 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-11-09 21:16 - 2019-03-02 01:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-11-09 21:14 - 2019-03-02 01:47 - 141529560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-11-06 06:54 - 2020-06-16 22:19 - 000000000 ____D C:\Users\reneb
2021-11-04 19:57 - 2021-03-08 19:53 - 000001280 _____ C:\Users\reneb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-11-04 19:57 - 2021-03-08 19:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-11-02 19:42 - 2019-03-02 01:20 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-30 20:22 - 2019-08-16 15:02 - 000000000 ____D C:\Users\reneb\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers ========
2019-03-02 01:33 - 2019-03-11 10:41 - 000038366 _____ () C:\Users\reneb\AppData\Local\BTServer.log
2021-06-14 19:47 - 2021-06-14 19:47 - 000001891 _____ () C:\Users\reneb\AppData\Local\recently-used.xbel
==================== SigCheckExt =========================
2019-03-07 15:52 - 2015-03-17 08:51 - 000375296 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL
2019-03-07 15:52 - 2015-03-17 08:51 - 000039424 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppui.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppui.dll
2018-06-24 04:28 - 2017-10-25 12:39 - 000050888 _____ C:\WINDOWS\system32\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:27 - 2013-04-01 22:19 - 000574464 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\system32\rtl8723de.dll
2018-06-24 04:28 - 2017-10-26 09:37 - 000055088 _____ C:\WINDOWS\system32\rtl8723d_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:28 - 2017-10-25 10:22 - 000042876 _____ C:\WINDOWS\system32\rtl8821c_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:28 - 2017-10-25 12:49 - 000047416 _____ C:\WINDOWS\system32\rtl8822b_mp_chip_bt40_fw_asic_rom_patch_new.dll
1998-12-21 14:57 - 1998-12-21 14:57 - 000090112 _____ (ECTSoft) C:\WINDOWS\easyh32.dll
1998-05-08 09:42 - 1998-05-08 09:42 - 000217088 _____ (Orphie) C:\WINDOWS\Easyhelp.dll
2018-06-24 04:28 - 2019-01-14 09:41 - 000004012 _____ C:\WINDOWS\PidVid_List.dll
2019-11-05 20:33 - 2008-08-25 18:02 - 000015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll
2019-03-07 15:52 - 2015-03-17 08:50 - 000380928 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL
2018-06-24 04:27 - 2010-12-01 08:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2001-05-22 00:00 - 2001-05-22 00:00 - 000527360 _____ (Borland Software Corporation) C:\WINDOWS\SysWOW64\stdvcl40.dll
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{f7980157-d73d-11ea-953c-806e6f6e6963}
{f7980158-d73d-11ea-953c-806e6f6e6963}
{f7980159-d73d-11ea-953c-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume3
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {09c503b5-d6f8-11ea-8c4f-a7b67ca5e753}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {f7980157-d73d-11ea-953c-806e6f6e6963}
description UEFI:CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {f7980158-d73d-11ea-953c-806e6f6e6963}
description UEFI:Removable Device
Application logicielle (101fffff)
--------------------------------
identificateur {f7980159-d73d-11ea-953c-806e6f6e6963}
description UEFI:Network Device
Chargeur de d‚marrage Windows
-----------------------------
identificateur {09c503b7-d6f8-11ea-8c4f-a7b67ca5e753}
device ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {c6061be5-b01a-11ea-b574-7440bb603ba8}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {c6061be2-b01a-11ea-b574-7440bb603ba8}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {c6061be5-b01a-11ea-b574-7440bb603ba8}
device ramdisk=[\Device\HarddiskVolume6]\Recovery\WindowsRE\Winre.wim,{c6061be6-b01a-11ea-b574-7440bb603ba8}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume6]\Recovery\WindowsRE\Winre.wim,{c6061be6-b01a-11ea-b574-7440bb603ba8}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {09c503b5-d6f8-11ea-8c4f-a7b67ca5e753}
device partition=D:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {09c503b7-d6f8-11ea-8c4f-a7b67ca5e753}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=D:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {c6061be2-b01a-11ea-b574-7440bb603ba8}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {c6061be5-b01a-11ea-b574-7440bb603ba8}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume3
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
description Windows Recovery
ramdisksdidevice partition=D:
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {c6061be6-b01a-11ea-b574-7440bb603ba8}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume6
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par reneb (administrateur) sur DESKTOP-RV2GB1C (HP HP Slim Desktop 290-p0xxx) (21-11-2021 09:34:21)
Exécuté depuis D:\René\Téléchargements
Profils chargés: reneb
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1348 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5a1ab3b0567b3cdb\IntelCpHeciSvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\ProgramData\MB3Install\MBAMIService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.46.32012.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.11411.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtAudioServ.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Users\reneb\AppData\Local\Mozilla Firefox\firefox.exe <23>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIWDE.EXE
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [707624 2018-08-08] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPLTarget\P0000000000000003] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {21b07d11-49da-11ea-b41a-80ce62f12447} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {72f48cf2-a374-11eb-b8fe-80ce62f12447} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-318582263-2614346434-4216268105-1001\...\MountPoints2: {7e2ae4d0-776c-11ea-b4be-7440bb603ba8} - "E:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: CNMLMCT.DLL
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: CNMLMG3.DLL
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [375296 2015-03-17] (CANON INC.) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON XP-4100 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBWDE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.45\Installer\chrmstp.exe [2021-11-18] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {08C02C8B-2DFF-4846-B858-E135FCF7A4A5} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644472 2019-06-21] (HP Inc. -> HP Inc.)
Task: {0BEC47DA-25F4-4279-97F7-F8298DBEBFFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [216432 2017-09-27] (HP Inc. -> HP Inc.)
Task: {12CC00D0-6072-4D44-903F-C184918BA921} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-23] (Google LLC -> Google LLC)
Task: {15EF3F51-EE44-488B-AB81-A7A9A9C09107} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6242232 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FACB0D9-60B9-466D-A3E4-B03EC40B3271} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-27] (HP Inc. -> HP Inc.)
Task: {2349F028-D874-456B-9467-19CED1933595} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-09-27] (HP Inc. -> HP Inc.)
Task: {2685BBD8-D4FC-4C64-9444-13ED28ACEDA5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2A59B2C4-57DA-4815-A438-D672FFD32F2D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108888 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {2BC1C42D-29B4-4179-88FD-29161C7CDE90} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {3E377030-3A37-4E06-BE70-DE8416171539} - System32\Tasks\EPSON XP-4100 Series Update {70046AD4-C5B6-45D2-A49D-C6235D41EE4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {3F2947C8-12EE-4395-9166-5B397F6AD1C8} - System32\Tasks\HPCeeScheduleForreneb => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97656 2018-09-11] (HP Inc. -> HP Inc.)
Task: {4ACC1987-7B6F-45F6-AC75-FE62748A8242} - System32\Tasks\HDCleanerSkipUAC => C:\USERS\RENEB\DOWNLOADS\HDCLEANERX32\HDCleaner.exe /SKIPUAC/ (Pas de fichier)
Task: {52F263A7-2A95-4E4A-8B35-D971EA04DBF7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {5862A58E-C04E-4E68-A247-A5C574E301E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7216577D-A97B-46CA-9C65-82417A3F7D39} - System32\Tasks\CCleanerSkipUAC - reneb => C:\Program Files\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {80BA2026-6538-4B6A-AD10-76F52F7B956B} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\reneb\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {81B9F3A6-004A-441D-8144-86C952A9F443} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {858191E2-EDDB-4307-A6A2-FF76231D4C8C} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {88C7C859-4E97-4D3C-B00E-9E25CDAEB459} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-23] (Google LLC -> Google LLC)
Task: {8BBD5DF4-4777-4CE3-B985-FC85E6A03093} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [119664 2017-09-27] (HP Inc. -> HP Inc.)
Task: {8E7C41FC-D8C2-400C-83D7-92FC38F990C9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6242232 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {8FFE6046-D330-41CB-B590-C45D52D2D4F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-27] (HP Inc. -> HP Inc.)
Task: {914A1797-662F-4560-9892-DD8547DC9F77} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [461824 2017-10-06] (HP Inc. -> HP Inc.)
Task: {A6630C52-9107-4D81-8175-CDD72B663B9F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108888 2021-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0BF8DF8-83C9-48EB-B892-6ADD28832298} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-27] (HP Inc. -> HP Inc.)
Task: {B18A4055-C26C-4528-AB63-B1F5A9D6E54D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {C5A59702-3FA0-4853-8F90-78D85AE4CBCD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-27] (HP Inc. -> HP Inc.)
Task: {D6810191-D5B7-4FFD-A301-600AD094DB91} - System32\Tasks\Mozilla\Firefox Default Browser Agent 29CA28E8F1A45F10 => C:\Users\reneb\AppData\Local\Mozilla Firefox\default-browser-agent.exe [682936 2021-11-04] (Mozilla Corporation -> Mozilla Foundation)
Task: {DF6BFA14-76F4-4A4D-BDE9-2F748384F68D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-03-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {E89DDBBD-4DBF-42C4-9AAE-32EEC75EF92B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE2D8E84-FF11-4D3D-BBCB-DABBA9E6C6DD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4846AF1-77E4-4BC3-B5BC-889C8CCD8A6C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FCDCC940-4EAD-452E-BC2A-EA3016E563FA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1057648 2017-09-27] (HP Inc. -> HP Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-4100 Series Update {70046AD4-C5B6-45D2-A49D-C6235D41EE4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE:/EXE:{70046AD4-C5B6-45D2-A49D-C6235D41EE4B} /F:UpdateWORKGROUP\DESKTOP-RV2GB1C$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForreneb.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4c4e8210-adf1-4695-93d4-37aa4a493c32}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{cf582998-20cb-4406-ae3f-c5a2a2ea208a}: [DhcpNameServer] 192.168.1.254
Edge:
=======
DownloadDir: D:\René\Téléchargements
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\reneb\AppData\Local\Microsoft\Edge\User Data\Default [2021-11-21]
FireFox:
========
FF DefaultProfile: exrnc9e5.default-1615069154269
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\tdreofey.default-release-1 [2021-11-20]
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\3upuyqrz.default-release [2021-11-20]
FF ProfilePath: C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269 [2021-11-21]
FF Notifications: Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269 -> hxxps://www.santediscount.com; hxxps://www.pinterest.fr
FF Extension: (uBlock Origin) - C:\Users\reneb\AppData\Roaming\Mozilla\Firefox\Profiles\exrnc9e5.default-1615069154269\Extensions\uBlock0@raymondhill.net.xpi [2021-10-15]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default [2021-11-20]
CHR Extension: (Slides) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-02-15]
CHR Extension: (Docs) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-02-15]
CHR Extension: (Google Drive) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-02-15]
CHR Extension: (YouTube) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-02-15]
CHR Extension: (Avira Password Manager) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2021-07-12]
CHR Extension: (Sheets) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-02-15]
CHR Extension: (Protection Web Avira) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-07-12]
CHR Extension: (Google Docs hors connexion) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-24]
CHR Extension: (Avast Online Security) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-02-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-15]
CHR Extension: (Gmail) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-02-15]
CHR Extension: (Chrome Media Router) - C:\Users\reneb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-08]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2019-07-04] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1321608 2018-09-25] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [477184 2017-10-06] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc. -> HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 MBAMIService; C:\ProgramData\MB3Install\MBAMIService.exe [231120 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 RtkBtAudioServ; C:\WINDOWS\RtkBtAudioServ.exe [313344 2019-04-08] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13341480 2021-11-06] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1548080 2019-05-23] (WildTangent Inc -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 qcusbnet; C:\WINDOWS\System32\drivers\qcusbnet.sys [428600 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 qcusbwwan; C:\WINDOWS\System32\drivers\qcusbwwan.sys [557112 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435424 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-11-21 09:34 - 2021-11-21 09:34 - 000000000 ____D C:\FRST
2021-11-21 09:32 - 2021-11-21 09:32 - 000000943 _____ C:\Users\reneb\Desktop\FRST64.exe - Raccourci.lnk
2021-11-21 09:15 - 2021-11-21 09:15 - 000322617 _____ C:\Users\reneb\Desktop\ZHPDiag.txt
2021-11-21 09:10 - 2021-11-21 09:10 - 000000872 _____ C:\Users\reneb\Desktop\ZHPSuite.lnk
2021-11-21 09:08 - 2021-11-21 09:08 - 000000959 _____ C:\Users\reneb\Desktop\ZHPSuite.exe - Raccourci.lnk
2021-11-21 00:10 - 2021-11-21 00:10 - 000000000 ___HD C:\$WinREAgent
2021-11-14 22:46 - 2021-11-19 08:03 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForreneb.job
2021-11-14 22:46 - 2021-11-18 22:45 - 000003256 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForreneb
2021-11-14 21:54 - 2021-11-14 21:54 - 000000959 _____ C:\Users\reneb\Desktop\ZHPDiag3.exe - Raccourci.lnk
2021-11-10 21:55 - 2021-11-10 21:55 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-11-10 21:55 - 2021-11-10 21:55 - 000011363 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-11-04 19:57 - 2021-11-04 19:57 - 000000000 ____D C:\Users\reneb\AppData\Local\Mozilla Firefox
2021-10-24 16:40 - 2021-10-24 16:40 - 000001153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-10-24 16:40 - 2021-10-24 16:40 - 000000000 ____D C:\Program Files\PCHealthCheck
2021-10-14 22:01 - 2021-10-14 22:01 - 000000973 _____ C:\Users\reneb\Desktop\ZHPCleaner.exe - Raccourci.lnk
2021-10-14 21:02 - 2021-10-14 21:02 - 000000223 _____ C:\Users\reneb\Desktop\Facebook - Connexion ou inscription.URL
2021-10-12 19:47 - 2021-10-12 19:47 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-12 19:47 - 2021-10-12 19:47 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-10 02:36 - 2021-10-10 02:36 - 000000255 _____ C:\Users\reneb\Desktop\Tout savoir sur les cartouches d’encre.URL
2021-10-08 16:36 - 2021-10-08 16:36 - 000000247 _____ C:\Users\reneb\Desktop\Google Maps.URL
2021-09-15 21:08 - 2021-09-15 21:08 - 000000236 _____ C:\Users\reneb\Desktop\Le top des blagues de 2021 Blague Drôle.URL
2021-09-14 19:27 - 2021-09-14 19:27 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-14 19:27 - 2021-09-14 19:27 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-14 19:27 - 2021-09-14 19:27 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-13 20:26 - 2021-09-13 20:26 - 000000259 _____ C:\Users\reneb\Desktop\Carte de France avec régions et départements.URL
2021-09-07 20:13 - 2021-11-21 00:15 - 108527616 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-09-06 22:00 - 2021-09-06 22:00 - 000000281 _____ C:\Users\reneb\Desktop\Comparatif des prix du carburant à Chalon Sur Saone (Saône-et-Loire) - Carburants.URL
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-11-21 09:33 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-11-21 09:18 - 2019-03-07 11:08 - 000000000 ____D C:\ProgramData\Mozilla
2021-11-21 09:17 - 2019-03-07 11:08 - 000000000 ____D C:\Users\reneb\AppData\LocalLow\Mozilla
2021-11-21 09:15 - 2019-03-07 16:41 - 000000000 ____D C:\Users\reneb\AppData\Roaming\ZHP
2021-11-21 09:05 - 2020-08-26 16:26 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-21 08:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-11-21 08:39 - 2020-06-16 22:50 - 001839268 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-11-21 08:39 - 2019-12-07 15:49 - 000791762 _____ C:\WINDOWS\system32\perfh00C.dat
2021-11-21 08:39 - 2019-12-07 15:49 - 000149928 _____ C:\WINDOWS\system32\perfc00C.dat
2021-11-21 08:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-11-21 08:35 - 2020-09-06 21:38 - 000000000 ____D C:\Program Files\CCleaner
2021-11-21 08:33 - 2020-06-16 22:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-11-21 08:33 - 2020-06-16 22:46 - 000008192 ___SH C:\DumpStack.log.tmp
2021-11-21 08:33 - 2019-03-07 18:05 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-11-21 08:33 - 2019-03-02 01:33 - 000000000 __SHD C:\Users\reneb\IntelGraphicsProfiles
2021-11-21 00:15 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-11-21 00:13 - 2021-03-23 23:37 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-21 00:13 - 2021-03-23 23:37 - 000002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-21 00:13 - 2020-08-27 19:18 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-11-21 00:12 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-11-20 23:56 - 2020-06-16 22:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-11-20 22:25 - 2020-03-23 19:20 - 000000000 ____D C:\Users\reneb\Desktop\Captvty
2021-11-20 20:09 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-11-19 14:04 - 2019-10-07 10:39 - 000000000 ____D C:\Users\reneb\AppData\Roaming\MyPhoneExplorer
2021-11-17 19:47 - 2020-08-27 19:18 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-11-17 19:47 - 2020-08-27 19:18 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-11-17 08:24 - 2020-09-07 16:22 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-11-16 07:28 - 2019-03-02 01:33 - 000000000 ____D C:\ProgramData\Packages
2021-11-14 22:05 - 2021-06-14 21:42 - 000001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2021-11-14 22:05 - 2021-06-14 21:42 - 000001135 _____ C:\Users\Public\Desktop\paint.net.lnk
2021-11-14 22:05 - 2021-06-14 21:42 - 000000000 ____D C:\Program Files\paint.net
2021-11-14 09:05 - 2019-03-14 18:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-11-11 16:21 - 2019-03-02 01:33 - 000000000 ____D C:\Users\reneb\AppData\Local\Packages
2021-11-10 21:58 - 2020-06-16 22:46 - 000525952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-11-10 21:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-11-10 21:58 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-11-09 21:16 - 2019-03-02 01:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-11-09 21:14 - 2019-03-02 01:47 - 141529560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-11-06 06:54 - 2020-06-16 22:19 - 000000000 ____D C:\Users\reneb
2021-11-04 19:57 - 2021-03-08 19:53 - 000001280 _____ C:\Users\reneb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-11-04 19:57 - 2021-03-08 19:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-11-02 19:42 - 2019-03-02 01:20 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-30 20:22 - 2019-08-16 15:02 - 000000000 ____D C:\Users\reneb\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers ========
2019-03-02 01:33 - 2019-03-11 10:41 - 000038366 _____ () C:\Users\reneb\AppData\Local\BTServer.log
2021-06-14 19:47 - 2021-06-14 19:47 - 000001891 _____ () C:\Users\reneb\AppData\Local\recently-used.xbel
==================== SigCheckExt =========================
2019-03-07 15:52 - 2015-03-17 08:51 - 000375296 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL
2019-03-07 15:52 - 2015-03-17 08:51 - 000039424 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\enppui.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppmon.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 002642944 ____S (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\ensppui.dll
2018-06-24 04:28 - 2017-10-25 12:39 - 000050888 _____ C:\WINDOWS\system32\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:27 - 2013-04-01 22:19 - 000574464 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\system32\rtl8723de.dll
2018-06-24 04:28 - 2017-10-26 09:37 - 000055088 _____ C:\WINDOWS\system32\rtl8723d_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:28 - 2017-10-25 10:22 - 000042876 _____ C:\WINDOWS\system32\rtl8821c_mp_chip_bt40_fw_asic_rom_patch_new.dll
2018-06-24 04:28 - 2017-10-25 12:49 - 000047416 _____ C:\WINDOWS\system32\rtl8822b_mp_chip_bt40_fw_asic_rom_patch_new.dll
1998-12-21 14:57 - 1998-12-21 14:57 - 000090112 _____ (ECTSoft) C:\WINDOWS\easyh32.dll
1998-05-08 09:42 - 1998-05-08 09:42 - 000217088 _____ (Orphie) C:\WINDOWS\Easyhelp.dll
2018-06-24 04:28 - 2019-01-14 09:41 - 000004012 _____ C:\WINDOWS\PidVid_List.dll
2019-11-05 20:33 - 2008-08-25 18:02 - 000015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll
2019-03-07 15:52 - 2015-03-17 08:50 - 000380928 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL
2018-06-24 04:27 - 2010-12-01 08:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2001-05-22 00:00 - 2001-05-22 00:00 - 000527360 _____ (Borland Software Corporation) C:\WINDOWS\SysWOW64\stdvcl40.dll
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{f7980157-d73d-11ea-953c-806e6f6e6963}
{f7980158-d73d-11ea-953c-806e6f6e6963}
{f7980159-d73d-11ea-953c-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume3
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {09c503b5-d6f8-11ea-8c4f-a7b67ca5e753}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {f7980157-d73d-11ea-953c-806e6f6e6963}
description UEFI:CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {f7980158-d73d-11ea-953c-806e6f6e6963}
description UEFI:Removable Device
Application logicielle (101fffff)
--------------------------------
identificateur {f7980159-d73d-11ea-953c-806e6f6e6963}
description UEFI:Network Device
Chargeur de d‚marrage Windows
-----------------------------
identificateur {09c503b7-d6f8-11ea-8c4f-a7b67ca5e753}
device ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[D:]\Recovery\WindowsRE\Winre.wim,{09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {c6061be5-b01a-11ea-b574-7440bb603ba8}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {c6061be2-b01a-11ea-b574-7440bb603ba8}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {c6061be5-b01a-11ea-b574-7440bb603ba8}
device ramdisk=[\Device\HarddiskVolume6]\Recovery\WindowsRE\Winre.wim,{c6061be6-b01a-11ea-b574-7440bb603ba8}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume6]\Recovery\WindowsRE\Winre.wim,{c6061be6-b01a-11ea-b574-7440bb603ba8}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {09c503b5-d6f8-11ea-8c4f-a7b67ca5e753}
device partition=D:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {09c503b7-d6f8-11ea-8c4f-a7b67ca5e753}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=D:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {c6061be2-b01a-11ea-b574-7440bb603ba8}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {c6061be5-b01a-11ea-b574-7440bb603ba8}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume3
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {09c503b8-d6f8-11ea-8c4f-a7b67ca5e753}
description Windows Recovery
ramdisksdidevice partition=D:
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {c6061be6-b01a-11ea-b574-7440bb603ba8}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume6
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================