Publicité
Publicité
Commentaire : ci joint mon rapport frst
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 24-03-2022
Exécuté par Philippe (administrateur) sur LAPTOP-CB3Q1DI7 (HUAWEI NBLK-WAX9X) (24-03-2022 12:56:55)
Exécuté depuis C:\Users\Philippe\Downloads
Profils chargés: Philippe
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1526 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\HwMdcCenter.exe
(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe
(C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MessageCenterUI.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atieclxx.exe
(explorer.exe ->) (Huawei Technologies Co., Ltd.) C:\Program Files\WindowsApps\HuaweiPC.HuaweiKeyboardHotkeys_9.0.19.0_x64__amfdc1pkdnmaa\HotKey\OSD_Daemon.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(explorer.exe ->) (Spotify AB -> Spotify Ltd) C:\Users\Philippe\AppData\Roaming\Spotify\Spotify.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe
(services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\BasicService\BasicService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\Hiview\HiviewService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MateBookService.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) C:\Windows\System32\RPC\OSD\osdservice.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe [1257032 2021-04-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\RunOnce: [HWBIOSPatch] => C:\Program Files\Huawei\Driver\Silent\HWBIOSPowerPatch\ProductPatchIN.exe [159744 2022-02-24] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\...\Run: [Spotify] => C:\Users\Philippe\AppData\Roaming\Spotify\Spotify.exe [20025272 2022-03-20] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\...\Run: [MicrosoftEdgeAutoLaunch_CC10FC89A1BDE06553EB9F19706DED20] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [809472 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0E3AED61-7DBA-4536-AAB4-F3B6E0702925} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3747E764-6E10-40D0-AED5-33FF79013313} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5680CCFA-BCC1-4D5F-BC32-67D63EEC1E4B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {5EFE648D-2731-4A6C-9500-7CC65EEB7D84} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6D5D87B4-0441-4A26-9087-BBA030454FC4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {74F8ABEA-3DBC-4AFB-AA90-45FC13864DC2} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [59232 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {990A9DEB-D522-4BB9-A8DC-8B7282C22510} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {B46E314D-9B48-49EC-834B-EBAFB58D3955} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {E4CD73F1-F6AA-4F3A-BE4A-7E2F00991B0B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{11f824ab-938c-46aa-8cfe-d7b0d233d94a}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{192ae951-79c4-44fe-ae39-46a7a2f7c584}: [DhcpNameServer] 40.41.1.11
Edge:
=======
DownloadDir: C:\Users\Philippe\Downloads
Edge Notifications: HKU\S-1-5-21-86245420-1262750385-3695769157-1001 -> hxxps://tipstop.co
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-24]
Edge DownloadDir: Default -> C:\Users\Philippe\Downloads
Edge Notifications: Default -> hxxps://www.youtube.com
Edge HomePage: Default -> hxxp://oem17win10.msn.com/?pc=NMTE
Edge Extension: (uBlock Origin) - C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2022-03-02]
Edge Profile: C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2021-07-05]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11649952 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [1641416 2019-05-07] (Dolby Laboratories, Inc. -> )
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [360320 2019-09-05] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HiviewService; C:\Program Files\Huawei\Hiview\HiviewService.exe [3915976 2022-02-08] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [299680 2021-08-22] (HP Inc. -> HP Inc.)
R2 Huawei_OSDServer; C:\Windows\system32\RPC\OSD\osdservice.exe [217072 2019-08-16] (Huawei Technologies Co., Ltd. -> )
R2 HwPCCoreService; C:\Program Files\Huawei\BasicService\BasicService.exe [610504 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 LCD_Service; C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe [38600 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 MBAMainService; C:\Program Files\Huawei\PCManager\MateBookService.exe [572616 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2021-12-30] (Malwarebytes Inc -> Malwarebytes)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe [3046608 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe [132504 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [210352 2022-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-12-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-12-30] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43640 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 virtbus; C:\WINDOWS\System32\drivers\virtbus.sys [35480 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [439544 2022-03-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-03-16] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-03-24 12:56 - 2022-03-24 12:57 - 000015960 _____ C:\Users\Philippe\Downloads\FRST.txt
2022-03-24 12:56 - 2022-03-24 12:57 - 000000000 ____D C:\FRST
2022-03-24 12:55 - 2022-03-24 12:56 - 002365440 _____ (Farbar) C:\Users\Philippe\Downloads\FRST64.exe
2022-03-24 12:52 - 2022-03-24 12:54 - 002070016 _____ (Farbar) C:\Users\Philippe\Downloads\FRST.exe
2022-03-19 13:14 - 2022-03-19 13:14 - 000000991 _____ C:\Users\Public\Desktop\Huawei PC Manager.lnk
2022-03-19 13:14 - 2022-03-19 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HUAWEI
2022-03-16 21:48 - 2022-03-16 21:48 - 002148352 _____ C:\Users\Philippe\Desktop\Catalogue LOGICEA 2022.xls
2022-03-16 21:33 - 2022-03-16 21:33 - 002148352 _____ C:\Users\Philippe\Downloads\Catalogue LOGICEA 2022.xls
2022-03-15 13:18 - 2022-03-15 13:18 - 000540319 _____ C:\Users\Philippe\Downloads\Facture '2020561'.zip
2022-03-10 20:34 - 2022-03-10 20:35 - 000000000 ___HD C:\$WinREAgent
2022-02-28 20:47 - 2022-02-28 20:47 - 000011491 _____ C:\Users\Philippe\Desktop\GPA_OPFI (1) justificatif epargne salariale.pdf
2022-02-28 20:42 - 2022-02-28 20:42 - 000070944 _____ C:\Users\Philippe\Desktop\iban caisse d epargne.pdf
2022-02-28 20:41 - 2022-02-28 20:41 - 000188857 _____ C:\Users\Philippe\Desktop\justificatif domicile.pdf
2022-02-28 20:41 - 2022-02-28 20:41 - 000094338 _____ C:\Users\Philippe\Downloads\RIB.zip
2022-02-28 20:41 - 2022-02-28 20:41 - 000070944 _____ C:\Users\Philippe\Downloads\RICE (24).pdf
2022-02-28 20:40 - 2022-02-28 20:40 - 000326206 _____ C:\Users\Philippe\Desktop\carte identite NELIAT PHILIPPE.pdf
2022-02-28 20:40 - 2022-02-28 20:40 - 000188857 _____ C:\Users\Philippe\Downloads\AMN_20220228133907.PDFAMN.pdf
2022-02-28 20:39 - 2022-02-28 20:39 - 000326206 _____ C:\Users\Philippe\Downloads\carte identite NELIAT PHILIPPE.pdf
2022-02-27 21:10 - 2022-02-27 21:10 - 000011532 _____ C:\Users\Philippe\Desktop\GPA_OPFI.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000143796 _____ C:\Users\Philippe\Desktop\RETOUR-004173FE.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000048646 _____ C:\Users\Philippe\Downloads\TRANSPORT-004173FE.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000048646 _____ C:\Users\Philippe\Desktop\TRANSPORT-004173FE.pdf
2022-02-27 20:53 - 2022-02-27 20:53 - 000143796 _____ C:\Users\Philippe\Downloads\RETOUR-004173FE.pdf
2022-02-27 20:23 - 2022-02-27 20:23 - 000210352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-02-23 20:57 - 2022-02-23 20:58 - 000011786 _____ C:\Users\Philippe\Downloads\ReleveMensuelDecembre2021.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-03-24 12:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-03-24 12:29 - 2021-04-27 23:42 - 000000000 ____D C:\Users\Philippe\AppData\Local\Spotify
2022-03-24 12:28 - 2021-07-07 17:53 - 000000000 ____D C:\Users\Philippe\AppData\Roaming\PCManager
2022-03-24 12:28 - 2021-04-27 23:40 - 000000000 ____D C:\Users\Philippe\AppData\Roaming\Spotify
2022-03-24 12:28 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-24 08:52 - 2021-03-13 19:18 - 000004180 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{8AD0129B-C416-4903-B6D1-4BDE49FE5882}
2022-03-23 21:55 - 2021-03-13 19:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-03-23 20:12 - 2021-12-12 17:55 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-86245420-1262750385-3695769157-1001
2022-03-23 20:12 - 2021-03-13 19:18 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-86245420-1262750385-3695769157-1001
2022-03-23 20:12 - 2021-03-13 11:36 - 000002433 _____ C:\Users\Philippe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-22 22:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-22 22:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-22 20:10 - 2020-11-19 13:46 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-03-22 20:10 - 2020-11-19 13:46 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-03-22 20:10 - 2019-12-11 01:55 - 000000000 ____D C:\Program Files\Microsoft Office
2022-03-19 13:15 - 2021-03-13 19:20 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-19 13:15 - 2019-12-07 15:49 - 000756416 _____ C:\WINDOWS\system32\perfh00C.dat
2022-03-19 13:15 - 2019-12-07 15:49 - 000142186 _____ C:\WINDOWS\system32\perfc00C.dat
2022-03-19 13:14 - 2021-05-10 17:45 - 000000000 ____D C:\ProgramData\Huawei
2022-03-19 13:14 - 2019-12-11 01:47 - 000000000 ____D C:\ProgramData\Comms
2022-03-19 13:14 - 2019-12-11 01:47 - 000000000 ____D C:\Program Files\Huawei
2022-03-16 21:43 - 2019-12-11 01:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-03-16 21:35 - 2020-06-10 05:07 - 000000000 ____D C:\Users\Philippe\AppData\Local\Packages
2022-03-15 09:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-03-11 22:08 - 2021-04-26 10:02 - 000003538 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d71835a35ecb9
2022-03-11 22:08 - 2021-03-13 19:18 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-03-11 22:08 - 2020-11-14 21:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-11 22:08 - 2020-11-14 19:23 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-11 22:07 - 2020-11-14 21:13 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-10 20:49 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-27 20:22 - 2021-03-13 19:18 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-27 20:22 - 2021-03-13 19:11 - 000008192 ___SH C:\DumpStack.log.tmp
2022-02-27 20:22 - 2020-06-10 05:22 - 000000000 ____D C:\ProgramData\Goodix
2022-02-27 20:22 - 2020-06-10 04:25 - 000000134 _____ C:\WINDOWS\system32\regtest.txt
2022-02-27 20:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-27 20:22 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-02-27 20:20 - 2021-03-13 19:11 - 000435504 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-27 12:29 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-02-24 15:19 - 2020-11-13 17:04 - 000000000 ____D C:\Program Files\UNP
2022-02-24 14:35 - 2021-06-11 14:05 - 000035480 _____ (Huawei Device Co., Ltd.) C:\WINDOWS\system32\Drivers\virtbus.sys
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Philippe (administrateur) sur LAPTOP-CB3Q1DI7 (HUAWEI NBLK-WAX9X) (24-03-2022 12:56:55)
Exécuté depuis C:\Users\Philippe\Downloads
Profils chargés: Philippe
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1526 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\HwMdcCenter.exe
(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe
(C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MessageCenterUI.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atieclxx.exe
(explorer.exe ->) (Huawei Technologies Co., Ltd.) C:\Program Files\WindowsApps\HuaweiPC.HuaweiKeyboardHotkeys_9.0.19.0_x64__amfdc1pkdnmaa\HotKey\OSD_Daemon.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(explorer.exe ->) (Spotify AB -> Spotify Ltd) C:\Users\Philippe\AppData\Roaming\Spotify\Spotify.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe
(services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\BasicService\BasicService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\Hiview\HiviewService.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe
(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MateBookService.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) C:\Windows\System32\RPC\OSD\osdservice.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe [1257032 2021-04-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\RunOnce: [HWBIOSPatch] => C:\Program Files\Huawei\Driver\Silent\HWBIOSPowerPatch\ProductPatchIN.exe [159744 2022-02-24] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\...\Run: [Spotify] => C:\Users\Philippe\AppData\Roaming\Spotify\Spotify.exe [20025272 2022-03-20] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\...\Run: [MicrosoftEdgeAutoLaunch_CC10FC89A1BDE06553EB9F19706DED20] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
HKU\S-1-5-21-86245420-1262750385-3695769157-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [809472 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0E3AED61-7DBA-4536-AAB4-F3B6E0702925} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3747E764-6E10-40D0-AED5-33FF79013313} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5680CCFA-BCC1-4D5F-BC32-67D63EEC1E4B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {5EFE648D-2731-4A6C-9500-7CC65EEB7D84} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6D5D87B4-0441-4A26-9087-BBA030454FC4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {74F8ABEA-3DBC-4AFB-AA90-45FC13864DC2} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [59232 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {990A9DEB-D522-4BB9-A8DC-8B7282C22510} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {B46E314D-9B48-49EC-834B-EBAFB58D3955} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {E4CD73F1-F6AA-4F3A-BE4A-7E2F00991B0B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-22] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{11f824ab-938c-46aa-8cfe-d7b0d233d94a}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{192ae951-79c4-44fe-ae39-46a7a2f7c584}: [DhcpNameServer] 40.41.1.11
Edge:
=======
DownloadDir: C:\Users\Philippe\Downloads
Edge Notifications: HKU\S-1-5-21-86245420-1262750385-3695769157-1001 -> hxxps://tipstop.co
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-24]
Edge DownloadDir: Default -> C:\Users\Philippe\Downloads
Edge Notifications: Default -> hxxps://www.youtube.com
Edge HomePage: Default -> hxxp://oem17win10.msn.com/?pc=NMTE
Edge Extension: (uBlock Origin) - C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2022-03-02]
Edge Profile: C:\Users\Philippe\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2021-07-05]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11649952 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [1641416 2019-05-07] (Dolby Laboratories, Inc. -> )
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [360320 2019-09-05] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HiviewService; C:\Program Files\Huawei\Hiview\HiviewService.exe [3915976 2022-02-08] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [299680 2021-08-22] (HP Inc. -> HP Inc.)
R2 Huawei_OSDServer; C:\Windows\system32\RPC\OSD\osdservice.exe [217072 2019-08-16] (Huawei Technologies Co., Ltd. -> )
R2 HwPCCoreService; C:\Program Files\Huawei\BasicService\BasicService.exe [610504 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 LCD_Service; C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe [38600 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 MBAMainService; C:\Program Files\Huawei\PCManager\MateBookService.exe [572616 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2021-12-30] (Malwarebytes Inc -> Malwarebytes)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe [3046608 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe [132504 2022-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [210352 2022-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-12-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-12-30] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43640 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 virtbus; C:\WINDOWS\System32\drivers\virtbus.sys [35480 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [439544 2022-03-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-03-16] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-03-24 12:56 - 2022-03-24 12:57 - 000015960 _____ C:\Users\Philippe\Downloads\FRST.txt
2022-03-24 12:56 - 2022-03-24 12:57 - 000000000 ____D C:\FRST
2022-03-24 12:55 - 2022-03-24 12:56 - 002365440 _____ (Farbar) C:\Users\Philippe\Downloads\FRST64.exe
2022-03-24 12:52 - 2022-03-24 12:54 - 002070016 _____ (Farbar) C:\Users\Philippe\Downloads\FRST.exe
2022-03-19 13:14 - 2022-03-19 13:14 - 000000991 _____ C:\Users\Public\Desktop\Huawei PC Manager.lnk
2022-03-19 13:14 - 2022-03-19 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HUAWEI
2022-03-16 21:48 - 2022-03-16 21:48 - 002148352 _____ C:\Users\Philippe\Desktop\Catalogue LOGICEA 2022.xls
2022-03-16 21:33 - 2022-03-16 21:33 - 002148352 _____ C:\Users\Philippe\Downloads\Catalogue LOGICEA 2022.xls
2022-03-15 13:18 - 2022-03-15 13:18 - 000540319 _____ C:\Users\Philippe\Downloads\Facture '2020561'.zip
2022-03-10 20:34 - 2022-03-10 20:35 - 000000000 ___HD C:\$WinREAgent
2022-02-28 20:47 - 2022-02-28 20:47 - 000011491 _____ C:\Users\Philippe\Desktop\GPA_OPFI (1) justificatif epargne salariale.pdf
2022-02-28 20:42 - 2022-02-28 20:42 - 000070944 _____ C:\Users\Philippe\Desktop\iban caisse d epargne.pdf
2022-02-28 20:41 - 2022-02-28 20:41 - 000188857 _____ C:\Users\Philippe\Desktop\justificatif domicile.pdf
2022-02-28 20:41 - 2022-02-28 20:41 - 000094338 _____ C:\Users\Philippe\Downloads\RIB.zip
2022-02-28 20:41 - 2022-02-28 20:41 - 000070944 _____ C:\Users\Philippe\Downloads\RICE (24).pdf
2022-02-28 20:40 - 2022-02-28 20:40 - 000326206 _____ C:\Users\Philippe\Desktop\carte identite NELIAT PHILIPPE.pdf
2022-02-28 20:40 - 2022-02-28 20:40 - 000188857 _____ C:\Users\Philippe\Downloads\AMN_20220228133907.PDFAMN.pdf
2022-02-28 20:39 - 2022-02-28 20:39 - 000326206 _____ C:\Users\Philippe\Downloads\carte identite NELIAT PHILIPPE.pdf
2022-02-27 21:10 - 2022-02-27 21:10 - 000011532 _____ C:\Users\Philippe\Desktop\GPA_OPFI.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000143796 _____ C:\Users\Philippe\Desktop\RETOUR-004173FE.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000048646 _____ C:\Users\Philippe\Downloads\TRANSPORT-004173FE.pdf
2022-02-27 20:54 - 2022-02-27 20:54 - 000048646 _____ C:\Users\Philippe\Desktop\TRANSPORT-004173FE.pdf
2022-02-27 20:53 - 2022-02-27 20:53 - 000143796 _____ C:\Users\Philippe\Downloads\RETOUR-004173FE.pdf
2022-02-27 20:23 - 2022-02-27 20:23 - 000210352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-02-23 20:57 - 2022-02-23 20:58 - 000011786 _____ C:\Users\Philippe\Downloads\ReleveMensuelDecembre2021.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-03-24 12:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-03-24 12:29 - 2021-04-27 23:42 - 000000000 ____D C:\Users\Philippe\AppData\Local\Spotify
2022-03-24 12:28 - 2021-07-07 17:53 - 000000000 ____D C:\Users\Philippe\AppData\Roaming\PCManager
2022-03-24 12:28 - 2021-04-27 23:40 - 000000000 ____D C:\Users\Philippe\AppData\Roaming\Spotify
2022-03-24 12:28 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-24 08:52 - 2021-03-13 19:18 - 000004180 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{8AD0129B-C416-4903-B6D1-4BDE49FE5882}
2022-03-23 21:55 - 2021-03-13 19:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-03-23 20:12 - 2021-12-12 17:55 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-86245420-1262750385-3695769157-1001
2022-03-23 20:12 - 2021-03-13 19:18 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-86245420-1262750385-3695769157-1001
2022-03-23 20:12 - 2021-03-13 11:36 - 000002433 _____ C:\Users\Philippe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-22 22:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-22 22:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-22 20:10 - 2020-11-19 13:46 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-03-22 20:10 - 2020-11-19 13:46 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-03-22 20:10 - 2019-12-11 01:55 - 000000000 ____D C:\Program Files\Microsoft Office
2022-03-19 13:15 - 2021-03-13 19:20 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-19 13:15 - 2019-12-07 15:49 - 000756416 _____ C:\WINDOWS\system32\perfh00C.dat
2022-03-19 13:15 - 2019-12-07 15:49 - 000142186 _____ C:\WINDOWS\system32\perfc00C.dat
2022-03-19 13:14 - 2021-05-10 17:45 - 000000000 ____D C:\ProgramData\Huawei
2022-03-19 13:14 - 2019-12-11 01:47 - 000000000 ____D C:\ProgramData\Comms
2022-03-19 13:14 - 2019-12-11 01:47 - 000000000 ____D C:\Program Files\Huawei
2022-03-16 21:43 - 2019-12-11 01:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-03-16 21:35 - 2020-06-10 05:07 - 000000000 ____D C:\Users\Philippe\AppData\Local\Packages
2022-03-15 09:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-03-11 22:08 - 2021-04-26 10:02 - 000003538 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d71835a35ecb9
2022-03-11 22:08 - 2021-03-13 19:18 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-03-11 22:08 - 2020-11-14 21:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-11 22:08 - 2020-11-14 19:23 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-11 22:07 - 2020-11-14 21:13 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-10 20:49 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-27 20:22 - 2021-03-13 19:18 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-27 20:22 - 2021-03-13 19:11 - 000008192 ___SH C:\DumpStack.log.tmp
2022-02-27 20:22 - 2020-06-10 05:22 - 000000000 ____D C:\ProgramData\Goodix
2022-02-27 20:22 - 2020-06-10 04:25 - 000000134 _____ C:\WINDOWS\system32\regtest.txt
2022-02-27 20:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-27 20:22 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-02-27 20:20 - 2021-03-13 19:11 - 000435504 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-27 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-27 12:29 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-02-24 15:19 - 2020-11-13 17:04 - 000000000 ____D C:\Program Files\UNP
2022-02-24 14:35 - 2021-06-11 14:05 - 000035480 _____ (Huawei Device Co., Ltd.) C:\WINDOWS\system32\Drivers\virtbus.sys
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================