Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 27-12-2021
Exécuté par JB (administrateur) sur JB-PC (eMachines eMachines E510) (29-12-2021 13:39:58)
Exécuté depuis C:\Users\JB\Desktop
Profils chargés: JB
Plate-forme: Microsoft Windows 10 Famille Version 20H2 19042.1415 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKU\S-1-5-21-950150996-368406385-1061771287-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35373696 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\...\Print\Monitors\HP D711 Status Monitor: C:\WINDOWS\system32\hpinkstsD711LM.dll [393352 2017-03-27] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-17] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0DAF60B2-FC24-4FEB-88C3-846E949B7B47} - System32\Tasks\Mozilla\Firefox Default Browser Agent EE49F1236C9C0F66 => C:\Users\JB\AppData\Local\Mozilla Firefox\default-browser-agent.exe do-task "EE49F1236C9C0F66"
Task: {20316967-5D31-445F-B55E-2EC847AE6D15} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Pas de fichier)
Task: {22DAA722-8983-4A17-AE53-F37729C6982F} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {246425A9-93BA-4FFB-A9C0-AC7C25B80E9C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Pas de fichier)
Task: {29A91021-3AAE-41AC-AA25-1959B71763DB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Pas de fichier)
Task: {29E55565-4F93-4B42-BD06-1A1A2D24988F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-21] (Google Inc -> Google LLC)
Task: {2A562893-46EC-44B7-A915-1262E18793F5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {2D937464-A6D1-4527-92C8-19CDFC93D069} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Pas de fichier)
Task: {2DC7AC5B-74F0-4E71-8D18-5CCFC3835802} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {2E51F47F-BB1F-4119-A6C9-995AA80EC2B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3D5B1FF1-EDBE-4020-83D3-41414F27A4BE} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Pas de fichier)
Task: {3E0F39F6-167D-4C48-AB08-4E56FBC53081} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {408C15B0-DD31-4B86-B9F1-2E51EED09A78} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {424E9781-BCF0-4D4B-B8B1-F0E68CCFED76} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Pas de fichier)
Task: {45F60EA4-F0F4-4C69-B340-09B1B816CE04} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {51A8F492-F43B-47E2-9ACE-AE57CADD0002} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {546E8827-033F-4031-801F-FC98E58DEDD3} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {561C5279-D1F1-4228-80AD-D7B799B7FE17} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Pas de fichier)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5DD6230F-82E6-49C8-B51F-67C4DD923DF6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Pas de fichier)
Task: {6202D3BD-F82E-4E7C-96B5-59365BB6258C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Pas de fichier)
Task: {6944D0E1-C1EC-4F6D-A07B-2FA8475B3E1D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Pas de fichier)
Task: {6C79810F-72C5-46AC-9C92-614956B40190} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {6D45299D-D997-4AF7-8634-B4A879CE2C85} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {6F1C160A-8C59-4E50-95FE-5A098722462F} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {7E8B2CD3-2F91-4773-9114-1C368A3A9A2D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Pas de fichier)
Task: {868C6BE2-DBFB-4397-BACD-9731F3A7494A} - System32\Tasks\CCleanerSkipUAC - JB => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {891E2C25-12EC-4C37-AB14-2FDE88C1C0DE} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {8B8DA06A-2F06-4FD0-942F-AC80FDE58607} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Pas de fichier)
Task: {93DF407C-49C8-478E-A92B-21653DAE4070} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Pas de fichier)
Task: {A6280116-D16E-4124-A8BC-10DEED168F1C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AA4F6607-4C0A-4040-9A3E-9693BDC28D65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Pas de fichier)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {C37C272A-43B2-4147-A023-CE7DD12203CD} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {C93ECDC5-5D7F-4F46-AFD0-5211D2ED0992} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Pas de fichier)
Task: {CE03BBC5-4542-48D4-852C-0F479CA11B2C} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Task: {CF32240D-22C3-4166-86B3-9A050F4387F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D828243C-2299-4742-ADB3-1B962927FF30} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Pas de fichier)
Task: {E32F6630-37A5-427A-ACC5-0092B6A32A2B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-21] (Google Inc -> Google LLC)
Task: {F992F7B7-A567-4886-9163-FB28E82C7605} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2B48437F-6605-4BDC-8097-0F10DFAE70DD}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B909979B-2991-422C-B5D4-5B29B8EFA673}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\JB\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-28]
Edge Profile: C:\Users\JB\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-12-28]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 2udh7m9g.default
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\wulty87r.default-release-1 [2021-12-29]
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\2udh7m9g.default [2020-01-03]
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935 [2021-12-29]
FF Homepage: Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935 -> hxxps://www.orange.fr/portail
FF Extension: (Malwarebytes Browser Guard) - C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-12-14]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-950150996-368406385-1061771287-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR Profile: C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default [2021-12-29]
CHR Extension: (Slides) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-07-21]
CHR Extension: (Docs) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-07-21]
CHR Extension: (Google Drive) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-04]
CHR Extension: (YouTube) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-21]
CHR Extension: (Sheets) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-07-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-23]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-12-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-24]
CHR Extension: (Gmail) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-04]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2021-11-20] (Malwarebytes Inc -> Malwarebytes)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-05-20] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-27] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-27] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-29 13:39 - 2021-12-29 13:41 - 000017786 _____ C:\Users\JB\Desktop\FRST.txt
2021-12-29 13:39 - 2021-12-29 13:39 - 000000000 ____D C:\Users\JB\Desktop\FRST-OlderVersion
2021-12-29 13:36 - 2021-12-29 13:36 - 000218844 _____ C:\Users\JB\Desktop\ZHPDiag.txt
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2021-12-29 13:21 - 2021-12-29 13:21 - 000000000 ____D C:\Users\JB\Desktop\archives rapports
2021-12-28 11:04 - 2021-12-28 11:05 - 000000000 ____D C:\AdwCleaner
2021-12-28 11:03 - 2021-12-28 11:03 - 008540344 _____ (Malwarebytes) C:\Users\JB\Desktop\adwcleaner_8.3.1.exe
2021-12-28 00:47 - 2021-12-28 00:47 - 000000872 _____ C:\Users\JB\Desktop\ZHPCleaner.lnk
2021-12-28 00:45 - 2021-12-28 00:45 - 003291800 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPCleaner.exe
2021-12-27 15:32 - 2021-12-27 15:32 - 000000000 ____D C:\Users\JB\Desktop\Wub
2021-12-27 15:31 - 2021-12-27 15:31 - 001004640 _____ C:\Users\JB\Desktop\Wub.zip
2021-12-27 15:15 - 2021-12-27 15:15 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2021-12-27 15:08 - 2021-12-27 15:08 - 012438920 _____ (AVAST Software) C:\Users\JB\Downloads\avastclear.exe
2021-12-27 12:44 - 2021-12-29 13:39 - 002311168 _____ (Farbar) C:\Users\JB\Desktop\FRST64.exe
2021-12-27 12:25 - 2021-12-29 13:22 - 000000721 _____ C:\Users\JB\Desktop\ZHPSuite.lnk
2021-12-27 12:20 - 2021-12-27 12:20 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPSuite.exe
2021-12-22 19:40 - 2021-12-22 19:40 - 001360621 _____ C:\Users\JB\Downloads\PHOTO JB.htm
2021-12-22 19:40 - 2021-12-22 19:40 - 000000000 ____D C:\Users\JB\Downloads\PHOTO JB_fichiers
2021-12-21 09:34 - 2021-12-21 09:34 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2021-12-18 00:25 - 2021-12-18 00:25 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-17 12:45 - 2021-12-17 12:45 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-17 12:45 - 2021-12-17 12:45 - 000011979 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-17 12:43 - 2021-12-17 12:43 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-17 12:43 - 2021-12-17 12:43 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-17 12:03 - 2021-12-17 12:03 - 000000000 ___HD C:\$WinREAgent
2021-12-17 11:59 - 2021-12-28 00:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-12-14 09:45 - 2021-12-14 09:45 - 000329000 _____ C:\Users\JB\Downloads\received_1262264290958251.jpeg
2021-12-13 09:58 - 2021-12-13 09:58 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-950150996-368406385-1061771287-1000
2021-11-12 18:49 - 2021-11-12 18:49 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-24 12:51 - 2021-10-24 12:51 - 005226476 _____ C:\Users\JB\Downloads\video rare1.mp4
2021-10-24 12:32 - 2021-10-24 12:33 - 007614840 _____ C:\Users\JB\Downloads\la grammaire.mp4
2021-10-23 19:40 - 2021-10-23 19:40 - 000002442 _____ C:\Users\JB\Desktop\Personnel - Edge.lnk
2021-10-17 10:12 - 2021-10-17 10:12 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-17 10:11 - 2021-10-17 10:11 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-17 10:11 - 2021-10-17 10:11 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-17 10:10 - 2021-10-17 10:10 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-14 17:40 - 2021-10-14 17:40 - 008977848 _____ C:\Users\JB\Downloads\VID-20210725-WA0000.mp4.crdownload
2021-10-06 09:44 - 2021-11-16 09:55 - 000000000 ____D C:\WINDOWS\Minidump
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-29 13:40 - 2020-01-02 12:37 - 000000000 ____D C:\FRST
2021-12-29 13:37 - 2019-07-21 22:08 - 000000000 ____D C:\Users\JB\AppData\LocalLow\Mozilla
2021-12-29 13:36 - 2020-01-02 11:41 - 000000000 ____D C:\Users\JB\AppData\Roaming\ZHP
2021-12-29 13:22 - 2020-08-16 00:31 - 000000000 ____D C:\Users\JB
2021-12-29 13:21 - 2020-12-21 15:27 - 000000000 ____D C:\Program Files\CCleaner
2021-12-29 13:21 - 2019-07-21 22:07 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-29 13:21 - 2019-07-21 20:13 - 000000000 ____D C:\Program Files (x86)\Google
2021-12-29 13:17 - 2020-08-16 00:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-28 16:38 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-28 11:53 - 2020-08-16 00:36 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-28 11:53 - 2019-12-07 15:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-12-28 11:53 - 2019-12-07 15:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-12-28 11:53 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-28 11:49 - 2020-08-16 00:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-28 11:49 - 2020-08-16 00:29 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-28 11:48 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-12-28 00:44 - 2019-07-21 22:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-12-27 15:32 - 2009-07-14 04:20 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-12-27 15:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-27 15:19 - 2021-01-04 15:17 - 000000000 ____D C:\ProgramData\Avast Software
2021-12-27 15:12 - 2019-07-21 21:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-12-27 15:06 - 2021-01-08 16:33 - 000000000 ____D C:\Users\JB\AppData\Local\CrashDumps
2021-12-27 15:04 - 2019-07-21 20:27 - 000803176 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-12-27 12:25 - 2020-01-02 11:41 - 000000000 ____D C:\Users\JB\AppData\Local\ZHP
2021-12-27 11:53 - 2020-12-21 15:35 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-12-27 11:53 - 2020-01-03 09:24 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-12-27 11:52 - 2020-01-03 09:22 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-12-27 11:52 - 2020-01-03 09:21 - 000000000 ____D C:\Program Files\Malwarebytes
2021-12-25 11:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-21 10:12 - 2020-09-07 18:46 - 000001264 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-12-21 10:12 - 2020-09-04 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-12-21 10:12 - 2019-07-21 22:07 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-12-21 09:34 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-19 20:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-12-19 20:12 - 2020-12-21 15:27 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-18 00:29 - 2020-08-16 00:29 - 000257912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-18 00:11 - 2020-06-25 23:12 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-18 00:11 - 2020-06-25 23:12 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-12-17 12:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-17 12:00 - 2019-08-04 10:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-17 11:51 - 2019-08-04 10:24 - 137938848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-12-13 09:58 - 2020-08-16 00:48 - 000003350 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-950150996-368406385-1061771287-1000
2021-12-13 09:58 - 2020-08-16 00:31 - 000002408 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-12-11 11:06 - 2020-08-16 00:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-11 11:06 - 2020-08-16 00:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2020-12-21 15:29 - 2020-12-21 15:29 - 010055680 _____ () C:\Program Files (x86)\GUTE2D8.tmp
2020-01-03 10:15 - 2020-01-03 10:15 - 000007598 _____ () C:\Users\JB\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2021-12-27 12:44 - 2021-12-29 13:39 - 002311168 _____ (Farbar) C:\Users\JB\Desktop\FRST64.exe
2021-12-28 00:45 - 2021-12-28 00:45 - 003291800 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPCleaner.exe
2021-12-27 12:20 - 2021-12-27 12:20 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {7a6947e8-df57-11ea-aee3-f2f415b1e482}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {3e16995c-df4f-11ea-a574-de453f8aa342}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{3e16995d-df4f-11ea-a574-de453f8aa342}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{3e16995d-df4f-11ea-a574-de453f8aa342}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {3e16995c-df4f-11ea-a574-de453f8aa342}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {7a6947e8-df57-11ea-aee3-f2f415b1e482}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {a548e0d5-abf2-11e9-8482-c423fed354b1}
device ramdisk=[C:]\Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\Winre.wim,{a548e0d6-abf2-11e9-8482-c423fed354b1}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\Winre.wim,{a548e0d6-abf2-11e9-8482-c423fed354b1}
systemroot \windows
nx OptIn
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {7a6947e8-df57-11ea-aee3-f2f415b1e482}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {3e16995c-df4f-11ea-a574-de453f8aa342}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {3e16995d-df4f-11ea-a574-de453f8aa342}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {a548e0d6-abf2-11e9-8482-c423fed354b1}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par JB (administrateur) sur JB-PC (eMachines eMachines E510) (29-12-2021 13:39:58)
Exécuté depuis C:\Users\JB\Desktop
Profils chargés: JB
Plate-forme: Microsoft Windows 10 Famille Version 20H2 19042.1415 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKU\S-1-5-21-950150996-368406385-1061771287-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35373696 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\...\Print\Monitors\HP D711 Status Monitor: C:\WINDOWS\system32\hpinkstsD711LM.dll [393352 2017-03-27] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-17] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0DAF60B2-FC24-4FEB-88C3-846E949B7B47} - System32\Tasks\Mozilla\Firefox Default Browser Agent EE49F1236C9C0F66 => C:\Users\JB\AppData\Local\Mozilla Firefox\default-browser-agent.exe do-task "EE49F1236C9C0F66"
Task: {20316967-5D31-445F-B55E-2EC847AE6D15} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Pas de fichier)
Task: {22DAA722-8983-4A17-AE53-F37729C6982F} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {246425A9-93BA-4FFB-A9C0-AC7C25B80E9C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Pas de fichier)
Task: {29A91021-3AAE-41AC-AA25-1959B71763DB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Pas de fichier)
Task: {29E55565-4F93-4B42-BD06-1A1A2D24988F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-21] (Google Inc -> Google LLC)
Task: {2A562893-46EC-44B7-A915-1262E18793F5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {2D937464-A6D1-4527-92C8-19CDFC93D069} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Pas de fichier)
Task: {2DC7AC5B-74F0-4E71-8D18-5CCFC3835802} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {2E51F47F-BB1F-4119-A6C9-995AA80EC2B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3D5B1FF1-EDBE-4020-83D3-41414F27A4BE} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Pas de fichier)
Task: {3E0F39F6-167D-4C48-AB08-4E56FBC53081} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {408C15B0-DD31-4B86-B9F1-2E51EED09A78} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {424E9781-BCF0-4D4B-B8B1-F0E68CCFED76} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Pas de fichier)
Task: {45F60EA4-F0F4-4C69-B340-09B1B816CE04} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {51A8F492-F43B-47E2-9ACE-AE57CADD0002} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {546E8827-033F-4031-801F-FC98E58DEDD3} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {561C5279-D1F1-4228-80AD-D7B799B7FE17} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Pas de fichier)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5DD6230F-82E6-49C8-B51F-67C4DD923DF6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Pas de fichier)
Task: {6202D3BD-F82E-4E7C-96B5-59365BB6258C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Pas de fichier)
Task: {6944D0E1-C1EC-4F6D-A07B-2FA8475B3E1D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Pas de fichier)
Task: {6C79810F-72C5-46AC-9C92-614956B40190} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {6D45299D-D997-4AF7-8634-B4A879CE2C85} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {6F1C160A-8C59-4E50-95FE-5A098722462F} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {7E8B2CD3-2F91-4773-9114-1C368A3A9A2D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Pas de fichier)
Task: {868C6BE2-DBFB-4397-BACD-9731F3A7494A} - System32\Tasks\CCleanerSkipUAC - JB => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {891E2C25-12EC-4C37-AB14-2FDE88C1C0DE} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {8B8DA06A-2F06-4FD0-942F-AC80FDE58607} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Pas de fichier)
Task: {93DF407C-49C8-478E-A92B-21653DAE4070} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Pas de fichier)
Task: {A6280116-D16E-4124-A8BC-10DEED168F1C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AA4F6607-4C0A-4040-9A3E-9693BDC28D65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Pas de fichier)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {C37C272A-43B2-4147-A023-CE7DD12203CD} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {C93ECDC5-5D7F-4F46-AFD0-5211D2ED0992} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Pas de fichier)
Task: {CE03BBC5-4542-48D4-852C-0F479CA11B2C} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Task: {CF32240D-22C3-4166-86B3-9A050F4387F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D828243C-2299-4742-ADB3-1B962927FF30} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Pas de fichier)
Task: {E32F6630-37A5-427A-ACC5-0092B6A32A2B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-21] (Google Inc -> Google LLC)
Task: {F992F7B7-A567-4886-9163-FB28E82C7605} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2B48437F-6605-4BDC-8097-0F10DFAE70DD}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B909979B-2991-422C-B5D4-5B29B8EFA673}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\JB\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-28]
Edge Profile: C:\Users\JB\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-12-28]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 2udh7m9g.default
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\wulty87r.default-release-1 [2021-12-29]
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\2udh7m9g.default [2020-01-03]
FF ProfilePath: C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935 [2021-12-29]
FF Homepage: Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935 -> hxxps://www.orange.fr/portail
FF Extension: (Malwarebytes Browser Guard) - C:\Users\JB\AppData\Roaming\Mozilla\Firefox\Profiles\bvwiw87q.default-release-1608562686935\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-12-14]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-950150996-368406385-1061771287-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR Profile: C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default [2021-12-29]
CHR Extension: (Slides) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-07-21]
CHR Extension: (Docs) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-07-21]
CHR Extension: (Google Drive) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-04]
CHR Extension: (YouTube) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-21]
CHR Extension: (Sheets) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-07-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-23]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-12-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-24]
CHR Extension: (Gmail) - C:\Users\JB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-04]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2021-11-20] (Malwarebytes Inc -> Malwarebytes)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-27] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-05-20] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-27] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-27] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-29 13:39 - 2021-12-29 13:41 - 000017786 _____ C:\Users\JB\Desktop\FRST.txt
2021-12-29 13:39 - 2021-12-29 13:39 - 000000000 ____D C:\Users\JB\Desktop\FRST-OlderVersion
2021-12-29 13:36 - 2021-12-29 13:36 - 000218844 _____ C:\Users\JB\Desktop\ZHPDiag.txt
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2021-12-29 13:21 - 2021-12-29 13:21 - 000000000 ____D C:\Users\JB\Desktop\archives rapports
2021-12-28 11:04 - 2021-12-28 11:05 - 000000000 ____D C:\AdwCleaner
2021-12-28 11:03 - 2021-12-28 11:03 - 008540344 _____ (Malwarebytes) C:\Users\JB\Desktop\adwcleaner_8.3.1.exe
2021-12-28 00:47 - 2021-12-28 00:47 - 000000872 _____ C:\Users\JB\Desktop\ZHPCleaner.lnk
2021-12-28 00:45 - 2021-12-28 00:45 - 003291800 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPCleaner.exe
2021-12-27 15:32 - 2021-12-27 15:32 - 000000000 ____D C:\Users\JB\Desktop\Wub
2021-12-27 15:31 - 2021-12-27 15:31 - 001004640 _____ C:\Users\JB\Desktop\Wub.zip
2021-12-27 15:15 - 2021-12-27 15:15 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2021-12-27 15:08 - 2021-12-27 15:08 - 012438920 _____ (AVAST Software) C:\Users\JB\Downloads\avastclear.exe
2021-12-27 12:44 - 2021-12-29 13:39 - 002311168 _____ (Farbar) C:\Users\JB\Desktop\FRST64.exe
2021-12-27 12:25 - 2021-12-29 13:22 - 000000721 _____ C:\Users\JB\Desktop\ZHPSuite.lnk
2021-12-27 12:20 - 2021-12-27 12:20 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPSuite.exe
2021-12-22 19:40 - 2021-12-22 19:40 - 001360621 _____ C:\Users\JB\Downloads\PHOTO JB.htm
2021-12-22 19:40 - 2021-12-22 19:40 - 000000000 ____D C:\Users\JB\Downloads\PHOTO JB_fichiers
2021-12-21 09:34 - 2021-12-21 09:34 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2021-12-18 00:25 - 2021-12-18 00:25 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-17 12:45 - 2021-12-17 12:45 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-17 12:45 - 2021-12-17 12:45 - 000011979 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-17 12:43 - 2021-12-17 12:43 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-17 12:43 - 2021-12-17 12:43 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-17 12:03 - 2021-12-17 12:03 - 000000000 ___HD C:\$WinREAgent
2021-12-17 11:59 - 2021-12-28 00:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-12-14 09:45 - 2021-12-14 09:45 - 000329000 _____ C:\Users\JB\Downloads\received_1262264290958251.jpeg
2021-12-13 09:58 - 2021-12-13 09:58 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-950150996-368406385-1061771287-1000
2021-11-12 18:49 - 2021-11-12 18:49 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-24 12:51 - 2021-10-24 12:51 - 005226476 _____ C:\Users\JB\Downloads\video rare1.mp4
2021-10-24 12:32 - 2021-10-24 12:33 - 007614840 _____ C:\Users\JB\Downloads\la grammaire.mp4
2021-10-23 19:40 - 2021-10-23 19:40 - 000002442 _____ C:\Users\JB\Desktop\Personnel - Edge.lnk
2021-10-17 10:12 - 2021-10-17 10:12 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-17 10:11 - 2021-10-17 10:11 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-17 10:11 - 2021-10-17 10:11 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-17 10:10 - 2021-10-17 10:10 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-14 17:40 - 2021-10-14 17:40 - 008977848 _____ C:\Users\JB\Downloads\VID-20210725-WA0000.mp4.crdownload
2021-10-06 09:44 - 2021-11-16 09:55 - 000000000 ____D C:\WINDOWS\Minidump
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-29 13:40 - 2020-01-02 12:37 - 000000000 ____D C:\FRST
2021-12-29 13:37 - 2019-07-21 22:08 - 000000000 ____D C:\Users\JB\AppData\LocalLow\Mozilla
2021-12-29 13:36 - 2020-01-02 11:41 - 000000000 ____D C:\Users\JB\AppData\Roaming\ZHP
2021-12-29 13:22 - 2020-08-16 00:31 - 000000000 ____D C:\Users\JB
2021-12-29 13:21 - 2020-12-21 15:27 - 000000000 ____D C:\Program Files\CCleaner
2021-12-29 13:21 - 2019-07-21 22:07 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-29 13:21 - 2019-07-21 20:13 - 000000000 ____D C:\Program Files (x86)\Google
2021-12-29 13:17 - 2020-08-16 00:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-28 16:38 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-28 11:53 - 2020-08-16 00:36 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-28 11:53 - 2019-12-07 15:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-12-28 11:53 - 2019-12-07 15:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-12-28 11:53 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-28 11:49 - 2020-08-16 00:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-28 11:49 - 2020-08-16 00:29 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-28 11:48 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-12-28 00:44 - 2019-07-21 22:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-12-27 15:32 - 2009-07-14 04:20 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-12-27 15:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-27 15:19 - 2021-01-04 15:17 - 000000000 ____D C:\ProgramData\Avast Software
2021-12-27 15:12 - 2019-07-21 21:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-12-27 15:06 - 2021-01-08 16:33 - 000000000 ____D C:\Users\JB\AppData\Local\CrashDumps
2021-12-27 15:04 - 2019-07-21 20:27 - 000803176 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-12-27 12:25 - 2020-01-02 11:41 - 000000000 ____D C:\Users\JB\AppData\Local\ZHP
2021-12-27 11:53 - 2020-12-21 15:35 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-12-27 11:53 - 2020-01-03 09:24 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-12-27 11:52 - 2020-01-03 09:22 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-12-27 11:52 - 2020-01-03 09:21 - 000000000 ____D C:\Program Files\Malwarebytes
2021-12-25 11:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-21 10:12 - 2020-09-07 18:46 - 000001264 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-12-21 10:12 - 2020-09-04 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-12-21 10:12 - 2019-07-21 22:07 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-12-21 09:34 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-19 20:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-12-19 20:12 - 2020-12-21 15:27 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-18 00:29 - 2020-08-16 00:29 - 000257912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-12-18 00:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-18 00:11 - 2020-06-25 23:12 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-18 00:11 - 2020-06-25 23:12 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-12-17 12:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-17 12:00 - 2019-08-04 10:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-17 11:51 - 2019-08-04 10:24 - 137938848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-12-13 09:58 - 2020-08-16 00:48 - 000003350 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-950150996-368406385-1061771287-1000
2021-12-13 09:58 - 2020-08-16 00:31 - 000002408 _____ C:\Users\JB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-12-11 11:06 - 2020-08-16 00:48 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-11 11:06 - 2020-08-16 00:48 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2020-12-21 15:29 - 2020-12-21 15:29 - 010055680 _____ () C:\Program Files (x86)\GUTE2D8.tmp
2020-01-03 10:15 - 2020-01-03 10:15 - 000007598 _____ () C:\Users\JB\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2021-12-29 13:22 - 2021-12-29 13:22 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\ZHPSuite.exe
2021-12-27 12:44 - 2021-12-29 13:39 - 002311168 _____ (Farbar) C:\Users\JB\Desktop\FRST64.exe
2021-12-28 00:45 - 2021-12-28 00:45 - 003291800 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPCleaner.exe
2021-12-27 12:20 - 2021-12-27 12:20 - 003478168 _____ (Nicolas Coolman) C:\Users\JB\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {7a6947e8-df57-11ea-aee3-f2f415b1e482}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {3e16995c-df4f-11ea-a574-de453f8aa342}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{3e16995d-df4f-11ea-a574-de453f8aa342}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{3e16995d-df4f-11ea-a574-de453f8aa342}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {3e16995c-df4f-11ea-a574-de453f8aa342}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {7a6947e8-df57-11ea-aee3-f2f415b1e482}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {a548e0d5-abf2-11e9-8482-c423fed354b1}
device ramdisk=[C:]\Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\Winre.wim,{a548e0d6-abf2-11e9-8482-c423fed354b1}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\Winre.wim,{a548e0d6-abf2-11e9-8482-c423fed354b1}
systemroot \windows
nx OptIn
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {7a6947e8-df57-11ea-aee3-f2f415b1e482}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {3e16995c-df4f-11ea-a574-de453f8aa342}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {3e16995d-df4f-11ea-a574-de453f8aa342}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {a548e0d6-abf2-11e9-8482-c423fed354b1}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\a548e0d5-abf2-11e9-8482-c423fed354b1\boot.sdi
==================== Fin de FRST.txt ========================