Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-04-2022
Exécuté par thierry (administrateur) sur PC-SALON (Acer Aspire 7736) (30-04-2022 21:07:50)
Exécuté depuis C:\Users\thierry\Desktop
Profils chargés: thierry
Plate-forme: Microsoft Windows 10 Professionnel Version 21H1 19043.1645 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\MicrosoftEdge_X64_101.0.1210.32_100.0.1185.50.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\EDGEMITMP_2B339.tmp\setup.exe
(C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\MicrosoftEdge_X64_101.0.1210.32_100.0.1185.50.exe
(C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\LAClient\laclient.exe
(C:\Program Files\Logitech\SetPointP\SetPoint.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (TomTom International B.V. -> TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912 2019-06-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2020-11-21] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-2411996927-4274465554-2042332476-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2229720 2021-09-23] (TomTom International B.V. -> TomTom)
HKLM\...\Print\Monitors\HP C511 Status Monitor: C:\WINDOWS\system32\hpinkstsC511LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 4500 series): C:\WINDOWS\system32\HPDiscoPMC511.dll [763040 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {077874EF-5EF4-4D52-B2AA-C5C307BDE881} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {11AD5B13-0C87-4F98-9955-378C6770AF54} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1BAD8F04-EB0F-40B3-ADAB-D752690640E8} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {23C35CB9-0D4B-47BA-9383-0DFC2405D6F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {246F4FB7-11C2-4B1E-BDF7-4AE065B2D0CD} - System32\Tasks\HPPSDrTelemetryWatch => C:\Program Files (x86)\HP\Diagnostics\TelemetryWatch\PSDrTelemetryWatch.exe [32808 2020-01-14] (HP Inc. -> )
Task: {31CB43A7-4F45-45C0-8189-FD119011B038} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32BA0F84-1039-42F7-BBAD-3F6BE1A837B2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe join (Pas de fichier)
Task: {37BBB8D6-D417-46F3-B411-43616BF57B34} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37F71712-3D98-40E8-AA5E-42DC9D0CBCED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4FBFE5C2-EEAC-4942-907E-72E2A78DBD9A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [134768 2021-04-01] (HP Inc. -> HP Inc.)
Task: {5618CD52-8A0B-4E7D-8A65-34A182A2F89E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5DF38A85-5D96-4EA7-8353-07DA0968BF84} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {638194D0-355B-434C-9BFF-3D565F81D08D} - System32\Tasks\Opera scheduled assistant Autoupdate 1595700655 => C:\Users\thierry\AppData\Local\Programs\Opera\launcher.exe [1868032 2022-04-20] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\thierry\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {67C9D274-1458-46DF-807B-CAF7548CE7FB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6E6F233E-A00D-4632-BBA4-A9B6B7C88B8E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {7BCD95E4-5D12-4E12-9ADC-8FF993FFDC6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-07] (Google Inc -> Google Inc.)
Task: {8C2AF79A-A997-4973-BBA1-A1EFE85BEE16} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91313BD8-FADF-4569-8932-3AD5B2526745} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {9E26C17E-EF57-40E4-AA60-8F2E6E74F308} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {A39E0CB1-6CE0-437D-B5AA-4E477AA88DE0} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A48E632C-BCC5-4E05-92A2-11FC6EE63D85} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.exe /NOUACCHECK
Task: {A5C77B50-4C59-4BA3-B185-C47FE917654B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Pas de fichier)
Task: {AA84FCF0-6CA8-40B9-BBEA-0E19C61DF398} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Pas de fichier)
Task: {ADD56E41-6CDE-4A23-8EB5-CB8D956B4350} - System32\Tasks\Opera scheduled Autoupdate 1595700641 => C:\Users\thierry\AppData\Local\Programs\Opera\launcher.exe [1868032 2022-04-20] (Opera Software AS -> Opera Software)
Task: {C42D97BE-79CF-4605-99C6-13F2871E0C41} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2021-04-01] (HP Inc. -> HP Inc.)
Task: {C6BF85C5-E076-4F46-859D-D702DE763B32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C8ABC884-48D0-4BE9-B714-D40750F5E239} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {CAEA14E9-A9CE-4BF6-9BDF-F839B58F6484} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D5ECE746-5708-404E-9DFC-ADCF8AE51FB1} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {DD02E168-7AF2-4A69-A181-E291B7ECE340} - System32\Tasks\GoogleUpdateTaskMachineCore1d0900a66a8146e => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-07] (Google Inc -> Google Inc.)
Task: {EB04E21E-BDDC-4401-A6C6-EA9C846FF23B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -source HPSA (Pas de fichier)
Task: {EC720CFF-DE58-40D5-B991-D0905FD4310D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe /SetTaskbarTask (Pas de fichier)
Task: {F159DC1A-CAD3-4099-80A3-7C6D0C974D2E} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe [5744800 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
Task: {FD31E051-2801-4078-88D8-8FE8348B438D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2019-12-09] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b5555983-1849-41d9-be2f-6b6792d709d1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d2116a77-25f3-4786-b7d7-824309e4d72e}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\thierry\Desktop
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-02-04]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\thierry\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-30]
Edge DownloadDir: Default -> C:\Users\thierry\Desktop
Edge Notifications: Default -> hxxps://iss.shopimind.com
Edge StartupUrls: Default -> "hxxp://www.yahoo.fr/"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: a65duae1.default-1492106844085-1574946133991
FF ProfilePath: C:\Users\thierry\AppData\Roaming\TomTom\HOME\Profiles\5w1273pt.default [2018-02-24]
FF Extension: (Pas de nom) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [non trouvé(e)]
FF ProfilePath: C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458 [2022-04-25]
FF Homepage: Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458 -> www.msn.fr
FF Extension: (Malwarebytes Browser Guard) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-04-25]
FF Extension: (California Sunset) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458\Extensions\{89b89782-ebd4-4b39-8b77-8c1f41697b60}.xpi [2021-11-06]
FF ProfilePath: C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991 [2022-03-31]
FF DownloadDir: C:\Users\thierry\Downloads
FF Homepage: Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991 -> hxxps://www.msn.com/fr-fr
FF Extension: (Google Translator for Firefox) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\translator@zoli.bod.xpi [2019-11-28]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-10-26]
FF Extension: (California Sunset) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\{89b89782-ebd4-4b39-8b77-8c1f41697b60}.xpi [2019-11-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2022-04-16] [non signé]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google Inc -> Google)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [Pas de fichier]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Profile: C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable [2022-04-24]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-03-06]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-11-06]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [218272 2022-03-25] (HP Inc. -> HP Inc.)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [403576 2021-04-01] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8347832 2022-04-27] (Malwarebytes Inc -> Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254352 2022-04-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2022-04-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-04-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239560 2022-04-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 MpKslcf8fc6d9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8032E9CD-E81A-45D8-8617-64A9EF521F42}\MpKslDrv.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-04-30 21:07 - 2022-04-30 21:12 - 000023789 _____ C:\Users\thierry\Desktop\FRST.txt
2022-04-30 21:06 - 2022-04-30 21:10 - 000000000 ____D C:\FRST
2022-04-30 21:02 - 2022-04-30 21:04 - 002366976 _____ (Farbar) C:\Users\thierry\Desktop\FRST64.exe
2022-04-27 23:47 - 2022-04-27 23:47 - 000223176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-04-27 23:47 - 2022-04-27 23:45 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-04-25 21:31 - 2022-04-25 21:31 - 000005670 _____ C:\Users\thierry\Downloads\script_cordo (1).txt
2022-04-25 21:13 - 2022-04-25 21:13 - 000005670 _____ C:\Users\thierry\Downloads\script_cordo.txt
2022-04-25 21:02 - 2022-04-25 21:02 - 000092434 _____ C:\Users\thierry\Downloads\Avis opération part inférieure.pdf
2022-04-25 20:55 - 2022-04-25 20:55 - 000121572 _____ C:\Users\thierry\Downloads\Attestation fiscale.pdf
2022-04-25 20:55 - 2022-04-25 20:55 - 000121572 _____ C:\Users\thierry\Downloads\Attestation fiscale(1).pdf
2022-04-24 21:40 - 2022-04-24 21:40 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-04-24 21:40 - 2022-04-24 21:40 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-04-24 20:38 - 2022-04-24 21:21 - 000000000 ___HD C:\$WINDOWS.~BT
2022-04-24 20:16 - 2022-04-24 21:32 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant
2022-04-24 20:16 - 2022-04-24 20:28 - 000000000 ___HD C:\$GetCurrent
2022-04-24 19:35 - 2022-04-24 19:36 - 003482312 _____ (Nicolas Coolman) C:\Users\thierry\Downloads\ZHPSuite (1).exe
2022-04-24 19:29 - 2022-04-24 19:29 - 000004442 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1595700655
2022-04-18 21:16 - 2022-04-18 21:16 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2022-04-18 21:16 - 2022-04-18 21:16 - 000002241 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2022-04-18 21:16 - 2022-04-18 21:16 - 000000000 ____D C:\Program Files\Google
2022-04-17 10:28 - 2022-04-17 10:28 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-04-16 23:03 - 2022-04-16 23:03 - 000000000 ___HD C:\$WinREAgent
2022-04-16 22:51 - 2022-04-16 22:51 - 000000000 ____D C:\Users\thierry\AppData\Local\Logishrd
2022-04-16 22:47 - 2022-04-16 22:47 - 000000000 ____D C:\Program Files\Logitech
2022-04-16 22:38 - 2022-04-16 22:38 - 004854616 _____ (Logitech Inc.) C:\Users\thierry\Downloads\SetPoint6.70.55_smart.exe
2022-04-16 22:26 - 2022-04-16 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2022-04-16 22:26 - 2022-04-16 22:26 - 000000000 ____D C:\Program Files\Cybelsoft
2022-04-16 22:20 - 2022-04-16 22:20 - 000000000 ____D C:\Users\thierry\AppData\Roaming\Cybelsoft
2022-04-16 22:17 - 2022-04-16 22:17 - 000411136 _____ C:\Users\thierry\Downloads\DriversCloud_Win(2).exe
2022-04-16 22:17 - 2022-04-16 22:17 - 000411136 _____ C:\Users\thierry\Downloads\DriversCloud_Win(1).exe
2022-04-16 22:15 - 2022-04-17 11:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-04-07 20:06 - 2022-04-07 20:06 - 000025089 _____ C:\Users\thierry\Downloads\2022_03_BP_mars.pdf
2022-04-07 20:05 - 2022-04-07 20:05 - 000025192 _____ C:\Users\thierry\Downloads\2022_02_BP_fevrier.pdf
2022-04-05 07:16 - 2022-04-27 23:47 - 000239560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-04-02 12:05 - 2022-04-02 12:05 - 035869232 _____ C:\Users\thierry\Downloads\Basic_Webpack_x64-116-Basic_Webpack_x64 (1).exe
2022-04-02 11:59 - 2022-04-02 12:00 - 000000000 ____D C:\Users\thierry\AppData\Local\TeamViewer
2022-04-02 11:59 - 2022-04-02 11:59 - 000000000 ____D C:\Users\thierry\AppData\Roaming\TeamViewer
2022-04-02 11:58 - 2022-04-02 11:59 - 023887520 _____ (TeamViewer) C:\Users\thierry\Downloads\TeamViewerQS.exe
2022-04-02 11:38 - 2022-04-05 07:12 - 000002045 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2022-03-31 19:59 - 2022-03-31 19:59 - 009986016 _____ C:\Users\thierry\Downloads\HPPSdr.exe
2022-03-31 19:40 - 2022-03-31 19:40 - 006434896 _____ (Oleg N. Scherbakov) C:\Users\thierry\Downloads\HPSupportSolutionsFramework-12.19.53.13.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-04-30 21:14 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-30 21:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-30 21:13 - 2020-06-21 13:19 - 000002402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-04-30 21:13 - 2020-06-21 13:19 - 000002240 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-04-30 21:06 - 2015-02-07 23:53 - 000000000 ____D C:\Program Files (x86)\Google
2022-04-30 21:01 - 2017-08-03 00:13 - 000000000 ____D C:\ProgramData\NVIDIA
2022-04-30 21:01 - 2016-11-19 22:31 - 000000000 ____D C:\Users\thierry\AppData\LocalLow\Mozilla
2022-04-28 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-27 23:47 - 2020-09-27 15:17 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-04-27 23:47 - 2020-09-14 21:38 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-04-27 23:45 - 2020-09-27 15:11 - 000103888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-04-27 23:45 - 2017-11-11 09:26 - 000000000 ____D C:\Program Files\Malwarebytes
2022-04-27 23:45 - 2015-02-08 00:09 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-04-25 21:38 - 2020-08-22 00:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-04-25 21:38 - 2020-08-21 23:14 - 000008192 ___SH C:\DumpStack.log.tmp
2022-04-25 21:37 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-04-25 21:36 - 2016-08-02 18:00 - 000000000 ____D C:\Users\thierry\AppData\Roaming\ZHP
2022-04-25 21:32 - 2021-02-21 20:11 - 000000905 _____ C:\Users\thierry\Desktop\ZHPSuite.lnk
2022-04-25 20:54 - 2022-02-16 12:04 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-04-24 23:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-04-24 21:50 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-04-24 21:37 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-04-24 21:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Registration
2022-04-24 20:48 - 2020-08-21 13:51 - 000000000 ___DC C:\WINDOWS\Panther
2022-04-24 20:38 - 2020-08-21 23:56 - 000001890 _____ C:\WINDOWS\diagwrn.xml
2022-04-24 20:38 - 2020-08-21 23:56 - 000001890 _____ C:\WINDOWS\diagerr.xml
2022-04-24 20:38 - 2016-08-03 20:12 - 000000036 _____ C:\WINDOWS\progress.ini
2022-04-24 19:50 - 2020-09-17 20:07 - 000004210 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1595700641
2022-04-24 19:50 - 2020-09-17 20:06 - 000001437 _____ C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-04-24 19:45 - 2021-12-12 23:58 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2411996927-4274465554-2042332476-1001
2022-04-24 19:45 - 2021-12-12 23:58 - 000002465 _____ C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-04-24 19:45 - 2020-08-22 00:01 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2411996927-4274465554-2042332476-1001
2022-04-24 19:28 - 2020-08-22 00:01 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-04-24 19:28 - 2020-08-22 00:01 - 000003496 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore1d0900a66a8146e
2022-04-18 21:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-04-18 21:14 - 2020-08-21 23:38 - 002552576 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-18 21:14 - 2020-08-21 23:18 - 000733658 _____ C:\WINDOWS\system32\perfh010.dat
2022-04-18 21:14 - 2020-08-21 23:18 - 000137934 _____ C:\WINDOWS\system32\perfc010.dat
2022-04-18 21:14 - 2019-12-07 16:50 - 000756458 _____ C:\WINDOWS\system32\perfh00C.dat
2022-04-18 21:14 - 2019-12-07 16:50 - 000142228 _____ C:\WINDOWS\system32\perfc00C.dat
2022-04-17 11:02 - 2020-08-21 23:14 - 000314816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-04-17 11:01 - 2017-01-31 10:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-04-17 10:58 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-04-17 10:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-04-17 10:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-04-17 09:52 - 2021-04-11 15:30 - 000000905 _____ C:\Users\thierry\Desktop\ZHPDiag.lnk
2022-04-16 23:09 - 2018-05-06 16:55 - 000000000 ____D C:\Users\thierry\AppData\Local\PlaceholderTileLogoFolder
2022-04-16 23:03 - 2015-02-07 21:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-04-16 22:56 - 2015-02-07 21:32 - 143823848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-04-16 22:52 - 2019-06-23 20:58 - 000000000 ____D C:\Users\thierry\AppData\Roaming\Logishrd
2022-04-16 22:51 - 2019-06-23 21:03 - 000000000 ____D C:\Users\Public\Documents\Logishrd
2022-04-16 22:50 - 2019-06-23 21:01 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2022-04-16 22:50 - 2019-06-23 20:59 - 000000000 ____D C:\Program Files\Common Files\LogiShrd
2022-04-16 22:48 - 2019-06-23 21:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2022-04-16 22:47 - 2019-06-23 21:00 - 000000000 ____D C:\ProgramData\Logishrd
2022-04-16 22:32 - 2021-10-13 21:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-04-16 22:32 - 2017-01-31 10:50 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-04-16 22:26 - 2019-05-18 21:25 - 000001186 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk
2022-04-16 22:26 - 2019-05-18 21:25 - 000000000 ____D C:\ProgramData\DriversCloud.com
2022-04-11 07:16 - 2016-08-20 14:34 - 000000000 ____D C:\Users\thierry\AppData\Local\CrashDumps
2022-04-11 07:07 - 2018-02-15 15:23 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-04-10 22:57 - 2021-02-21 17:45 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-04-10 22:53 - 2020-08-22 00:01 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-10 22:53 - 2020-08-22 00:01 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-04-02 11:44 - 2021-12-01 21:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-03-31 19:43 - 2015-10-31 20:19 - 000000000 ____D C:\Users\thierry\AppData\Local\HP
2022-03-31 19:41 - 2018-12-14 13:51 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
==================== Fichiers à la racine de certains dossiers ========
2017-04-18 18:26 - 2020-06-21 11:24 - 003307904 _____ (Nicolas Coolman) C:\Users\thierry\ZHPCleaner.exe
2017-09-28 22:13 - 2022-03-25 23:18 - 003285656 _____ (Nicolas Coolman) C:\Users\thierry\ZHPDiag3.exe
2021-03-17 20:56 - 2021-03-17 20:56 - 003466904 _____ (Nicolas Coolman) C:\Users\thierry\ZHPSuite.exe
2015-10-31 14:24 - 2015-10-31 14:24 - 000007602 _____ () C:\Users\thierry\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par thierry (administrateur) sur PC-SALON (Acer Aspire 7736) (30-04-2022 21:07:50)
Exécuté depuis C:\Users\thierry\Desktop
Profils chargés: thierry
Plate-forme: Microsoft Windows 10 Professionnel Version 21H1 19043.1645 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\MicrosoftEdge_X64_101.0.1210.32_100.0.1185.50.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\EDGEMITMP_2B339.tmp\setup.exe
(C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C71C8CA-4906-4C05-AA6E-5D88815EA4D8}\MicrosoftEdge_X64_101.0.1210.32_100.0.1185.50.exe
(C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\LAClient\laclient.exe
(C:\Program Files\Logitech\SetPointP\SetPoint.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (TomTom International B.V. -> TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912 2019-06-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2020-11-21] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-2411996927-4274465554-2042332476-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2229720 2021-09-23] (TomTom International B.V. -> TomTom)
HKLM\...\Print\Monitors\HP C511 Status Monitor: C:\WINDOWS\system32\hpinkstsC511LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 4500 series): C:\WINDOWS\system32\HPDiscoPMC511.dll [763040 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {077874EF-5EF4-4D52-B2AA-C5C307BDE881} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {11AD5B13-0C87-4F98-9955-378C6770AF54} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1BAD8F04-EB0F-40B3-ADAB-D752690640E8} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {23C35CB9-0D4B-47BA-9383-0DFC2405D6F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {246F4FB7-11C2-4B1E-BDF7-4AE065B2D0CD} - System32\Tasks\HPPSDrTelemetryWatch => C:\Program Files (x86)\HP\Diagnostics\TelemetryWatch\PSDrTelemetryWatch.exe [32808 2020-01-14] (HP Inc. -> )
Task: {31CB43A7-4F45-45C0-8189-FD119011B038} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32BA0F84-1039-42F7-BBAD-3F6BE1A837B2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe join (Pas de fichier)
Task: {37BBB8D6-D417-46F3-B411-43616BF57B34} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37F71712-3D98-40E8-AA5E-42DC9D0CBCED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4FBFE5C2-EEAC-4942-907E-72E2A78DBD9A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [134768 2021-04-01] (HP Inc. -> HP Inc.)
Task: {5618CD52-8A0B-4E7D-8A65-34A182A2F89E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5DF38A85-5D96-4EA7-8353-07DA0968BF84} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {638194D0-355B-434C-9BFF-3D565F81D08D} - System32\Tasks\Opera scheduled assistant Autoupdate 1595700655 => C:\Users\thierry\AppData\Local\Programs\Opera\launcher.exe [1868032 2022-04-20] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\thierry\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {67C9D274-1458-46DF-807B-CAF7548CE7FB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6E6F233E-A00D-4632-BBA4-A9B6B7C88B8E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {7BCD95E4-5D12-4E12-9ADC-8FF993FFDC6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-07] (Google Inc -> Google Inc.)
Task: {8C2AF79A-A997-4973-BBA1-A1EFE85BEE16} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91313BD8-FADF-4569-8932-3AD5B2526745} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {9E26C17E-EF57-40E4-AA60-8F2E6E74F308} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {A39E0CB1-6CE0-437D-B5AA-4E477AA88DE0} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A48E632C-BCC5-4E05-92A2-11FC6EE63D85} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.exe /NOUACCHECK
Task: {A5C77B50-4C59-4BA3-B185-C47FE917654B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Pas de fichier)
Task: {AA84FCF0-6CA8-40B9-BBEA-0E19C61DF398} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Pas de fichier)
Task: {ADD56E41-6CDE-4A23-8EB5-CB8D956B4350} - System32\Tasks\Opera scheduled Autoupdate 1595700641 => C:\Users\thierry\AppData\Local\Programs\Opera\launcher.exe [1868032 2022-04-20] (Opera Software AS -> Opera Software)
Task: {C42D97BE-79CF-4605-99C6-13F2871E0C41} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2021-04-01] (HP Inc. -> HP Inc.)
Task: {C6BF85C5-E076-4F46-859D-D702DE763B32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C8ABC884-48D0-4BE9-B714-D40750F5E239} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {CAEA14E9-A9CE-4BF6-9BDF-F839B58F6484} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {D5ECE746-5708-404E-9DFC-ADCF8AE51FB1} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {DD02E168-7AF2-4A69-A181-E291B7ECE340} - System32\Tasks\GoogleUpdateTaskMachineCore1d0900a66a8146e => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-07] (Google Inc -> Google Inc.)
Task: {EB04E21E-BDDC-4401-A6C6-EA9C846FF23B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -source HPSA (Pas de fichier)
Task: {EC720CFF-DE58-40D5-B991-D0905FD4310D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe /SetTaskbarTask (Pas de fichier)
Task: {F159DC1A-CAD3-4099-80A3-7C6D0C974D2E} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe [5744800 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
Task: {FD31E051-2801-4078-88D8-8FE8348B438D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2019-12-09] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b5555983-1849-41d9-be2f-6b6792d709d1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d2116a77-25f3-4786-b7d7-824309e4d72e}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\thierry\Desktop
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Translator pour Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-02-04]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\thierry\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-30]
Edge DownloadDir: Default -> C:\Users\thierry\Desktop
Edge Notifications: Default -> hxxps://iss.shopimind.com
Edge StartupUrls: Default -> "hxxp://www.yahoo.fr/"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: a65duae1.default-1492106844085-1574946133991
FF ProfilePath: C:\Users\thierry\AppData\Roaming\TomTom\HOME\Profiles\5w1273pt.default [2018-02-24]
FF Extension: (Pas de nom) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [non trouvé(e)]
FF ProfilePath: C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458 [2022-04-25]
FF Homepage: Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458 -> www.msn.fr
FF Extension: (Malwarebytes Browser Guard) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-04-25]
FF Extension: (California Sunset) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\tqrvpjxr.default-release-1636233557458\Extensions\{89b89782-ebd4-4b39-8b77-8c1f41697b60}.xpi [2021-11-06]
FF ProfilePath: C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991 [2022-03-31]
FF DownloadDir: C:\Users\thierry\Downloads
FF Homepage: Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991 -> hxxps://www.msn.com/fr-fr
FF Extension: (Google Translator for Firefox) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\translator@zoli.bod.xpi [2019-11-28]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-10-26]
FF Extension: (California Sunset) - C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\a65duae1.default-1492106844085-1574946133991\Extensions\{89b89782-ebd4-4b39-8b77-8c1f41697b60}.xpi [2019-11-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2022-04-16] [non signé]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google Inc -> Google)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [Pas de fichier]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Profile: C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable [2022-04-24]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-03-06]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\thierry\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-11-06]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [218272 2022-03-25] (HP Inc. -> HP Inc.)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [403576 2021-04-01] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8347832 2022-04-27] (Malwarebytes Inc -> Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254352 2022-04-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2022-04-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-04-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239560 2022-04-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 MpKslcf8fc6d9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8032E9CD-E81A-45D8-8617-64A9EF521F42}\MpKslDrv.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-04-30 21:07 - 2022-04-30 21:12 - 000023789 _____ C:\Users\thierry\Desktop\FRST.txt
2022-04-30 21:06 - 2022-04-30 21:10 - 000000000 ____D C:\FRST
2022-04-30 21:02 - 2022-04-30 21:04 - 002366976 _____ (Farbar) C:\Users\thierry\Desktop\FRST64.exe
2022-04-27 23:47 - 2022-04-27 23:47 - 000223176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-04-27 23:47 - 2022-04-27 23:45 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-04-25 21:31 - 2022-04-25 21:31 - 000005670 _____ C:\Users\thierry\Downloads\script_cordo (1).txt
2022-04-25 21:13 - 2022-04-25 21:13 - 000005670 _____ C:\Users\thierry\Downloads\script_cordo.txt
2022-04-25 21:02 - 2022-04-25 21:02 - 000092434 _____ C:\Users\thierry\Downloads\Avis opération part inférieure.pdf
2022-04-25 20:55 - 2022-04-25 20:55 - 000121572 _____ C:\Users\thierry\Downloads\Attestation fiscale.pdf
2022-04-25 20:55 - 2022-04-25 20:55 - 000121572 _____ C:\Users\thierry\Downloads\Attestation fiscale(1).pdf
2022-04-24 21:40 - 2022-04-24 21:40 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-04-24 21:40 - 2022-04-24 21:40 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-04-24 20:38 - 2022-04-24 21:21 - 000000000 ___HD C:\$WINDOWS.~BT
2022-04-24 20:16 - 2022-04-24 21:32 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant
2022-04-24 20:16 - 2022-04-24 20:28 - 000000000 ___HD C:\$GetCurrent
2022-04-24 19:35 - 2022-04-24 19:36 - 003482312 _____ (Nicolas Coolman) C:\Users\thierry\Downloads\ZHPSuite (1).exe
2022-04-24 19:29 - 2022-04-24 19:29 - 000004442 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1595700655
2022-04-18 21:16 - 2022-04-18 21:16 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2022-04-18 21:16 - 2022-04-18 21:16 - 000002241 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2022-04-18 21:16 - 2022-04-18 21:16 - 000000000 ____D C:\Program Files\Google
2022-04-17 10:28 - 2022-04-17 10:28 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-04-16 23:03 - 2022-04-16 23:03 - 000000000 ___HD C:\$WinREAgent
2022-04-16 22:51 - 2022-04-16 22:51 - 000000000 ____D C:\Users\thierry\AppData\Local\Logishrd
2022-04-16 22:47 - 2022-04-16 22:47 - 000000000 ____D C:\Program Files\Logitech
2022-04-16 22:38 - 2022-04-16 22:38 - 004854616 _____ (Logitech Inc.) C:\Users\thierry\Downloads\SetPoint6.70.55_smart.exe
2022-04-16 22:26 - 2022-04-16 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2022-04-16 22:26 - 2022-04-16 22:26 - 000000000 ____D C:\Program Files\Cybelsoft
2022-04-16 22:20 - 2022-04-16 22:20 - 000000000 ____D C:\Users\thierry\AppData\Roaming\Cybelsoft
2022-04-16 22:17 - 2022-04-16 22:17 - 000411136 _____ C:\Users\thierry\Downloads\DriversCloud_Win(2).exe
2022-04-16 22:17 - 2022-04-16 22:17 - 000411136 _____ C:\Users\thierry\Downloads\DriversCloud_Win(1).exe
2022-04-16 22:15 - 2022-04-17 11:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-04-07 20:06 - 2022-04-07 20:06 - 000025089 _____ C:\Users\thierry\Downloads\2022_03_BP_mars.pdf
2022-04-07 20:05 - 2022-04-07 20:05 - 000025192 _____ C:\Users\thierry\Downloads\2022_02_BP_fevrier.pdf
2022-04-05 07:16 - 2022-04-27 23:47 - 000239560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-04-02 12:05 - 2022-04-02 12:05 - 035869232 _____ C:\Users\thierry\Downloads\Basic_Webpack_x64-116-Basic_Webpack_x64 (1).exe
2022-04-02 11:59 - 2022-04-02 12:00 - 000000000 ____D C:\Users\thierry\AppData\Local\TeamViewer
2022-04-02 11:59 - 2022-04-02 11:59 - 000000000 ____D C:\Users\thierry\AppData\Roaming\TeamViewer
2022-04-02 11:58 - 2022-04-02 11:59 - 023887520 _____ (TeamViewer) C:\Users\thierry\Downloads\TeamViewerQS.exe
2022-04-02 11:38 - 2022-04-05 07:12 - 000002045 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2022-03-31 19:59 - 2022-03-31 19:59 - 009986016 _____ C:\Users\thierry\Downloads\HPPSdr.exe
2022-03-31 19:40 - 2022-03-31 19:40 - 006434896 _____ (Oleg N. Scherbakov) C:\Users\thierry\Downloads\HPSupportSolutionsFramework-12.19.53.13.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-04-30 21:14 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-30 21:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-30 21:13 - 2020-06-21 13:19 - 000002402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-04-30 21:13 - 2020-06-21 13:19 - 000002240 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-04-30 21:06 - 2015-02-07 23:53 - 000000000 ____D C:\Program Files (x86)\Google
2022-04-30 21:01 - 2017-08-03 00:13 - 000000000 ____D C:\ProgramData\NVIDIA
2022-04-30 21:01 - 2016-11-19 22:31 - 000000000 ____D C:\Users\thierry\AppData\LocalLow\Mozilla
2022-04-28 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-27 23:47 - 2020-09-27 15:17 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-04-27 23:47 - 2020-09-14 21:38 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-04-27 23:45 - 2020-09-27 15:11 - 000103888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-04-27 23:45 - 2017-11-11 09:26 - 000000000 ____D C:\Program Files\Malwarebytes
2022-04-27 23:45 - 2015-02-08 00:09 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-04-25 21:38 - 2020-08-22 00:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-04-25 21:38 - 2020-08-21 23:14 - 000008192 ___SH C:\DumpStack.log.tmp
2022-04-25 21:37 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-04-25 21:36 - 2016-08-02 18:00 - 000000000 ____D C:\Users\thierry\AppData\Roaming\ZHP
2022-04-25 21:32 - 2021-02-21 20:11 - 000000905 _____ C:\Users\thierry\Desktop\ZHPSuite.lnk
2022-04-25 20:54 - 2022-02-16 12:04 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-04-24 23:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-04-24 21:50 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-04-24 21:37 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-04-24 21:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Registration
2022-04-24 20:48 - 2020-08-21 13:51 - 000000000 ___DC C:\WINDOWS\Panther
2022-04-24 20:38 - 2020-08-21 23:56 - 000001890 _____ C:\WINDOWS\diagwrn.xml
2022-04-24 20:38 - 2020-08-21 23:56 - 000001890 _____ C:\WINDOWS\diagerr.xml
2022-04-24 20:38 - 2016-08-03 20:12 - 000000036 _____ C:\WINDOWS\progress.ini
2022-04-24 19:50 - 2020-09-17 20:07 - 000004210 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1595700641
2022-04-24 19:50 - 2020-09-17 20:06 - 000001437 _____ C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-04-24 19:45 - 2021-12-12 23:58 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2411996927-4274465554-2042332476-1001
2022-04-24 19:45 - 2021-12-12 23:58 - 000002465 _____ C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-04-24 19:45 - 2020-08-22 00:01 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2411996927-4274465554-2042332476-1001
2022-04-24 19:28 - 2020-08-22 00:01 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-04-24 19:28 - 2020-08-22 00:01 - 000003496 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore1d0900a66a8146e
2022-04-18 21:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-04-18 21:14 - 2020-08-21 23:38 - 002552576 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-18 21:14 - 2020-08-21 23:18 - 000733658 _____ C:\WINDOWS\system32\perfh010.dat
2022-04-18 21:14 - 2020-08-21 23:18 - 000137934 _____ C:\WINDOWS\system32\perfc010.dat
2022-04-18 21:14 - 2019-12-07 16:50 - 000756458 _____ C:\WINDOWS\system32\perfh00C.dat
2022-04-18 21:14 - 2019-12-07 16:50 - 000142228 _____ C:\WINDOWS\system32\perfc00C.dat
2022-04-17 11:02 - 2020-08-21 23:14 - 000314816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-04-17 11:01 - 2017-01-31 10:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-04-17 10:58 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-04-17 10:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-04-17 10:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-04-17 09:52 - 2021-04-11 15:30 - 000000905 _____ C:\Users\thierry\Desktop\ZHPDiag.lnk
2022-04-16 23:09 - 2018-05-06 16:55 - 000000000 ____D C:\Users\thierry\AppData\Local\PlaceholderTileLogoFolder
2022-04-16 23:03 - 2015-02-07 21:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-04-16 22:56 - 2015-02-07 21:32 - 143823848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-04-16 22:52 - 2019-06-23 20:58 - 000000000 ____D C:\Users\thierry\AppData\Roaming\Logishrd
2022-04-16 22:51 - 2019-06-23 21:03 - 000000000 ____D C:\Users\Public\Documents\Logishrd
2022-04-16 22:50 - 2019-06-23 21:01 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2022-04-16 22:50 - 2019-06-23 20:59 - 000000000 ____D C:\Program Files\Common Files\LogiShrd
2022-04-16 22:48 - 2019-06-23 21:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2022-04-16 22:47 - 2019-06-23 21:00 - 000000000 ____D C:\ProgramData\Logishrd
2022-04-16 22:32 - 2021-10-13 21:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-04-16 22:32 - 2017-01-31 10:50 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-04-16 22:26 - 2019-05-18 21:25 - 000001186 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk
2022-04-16 22:26 - 2019-05-18 21:25 - 000000000 ____D C:\ProgramData\DriversCloud.com
2022-04-11 07:16 - 2016-08-20 14:34 - 000000000 ____D C:\Users\thierry\AppData\Local\CrashDumps
2022-04-11 07:07 - 2018-02-15 15:23 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-04-10 22:57 - 2021-02-21 17:45 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-04-10 22:53 - 2020-08-22 00:01 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-10 22:53 - 2020-08-22 00:01 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-04-02 11:44 - 2021-12-01 21:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-03-31 19:43 - 2015-10-31 20:19 - 000000000 ____D C:\Users\thierry\AppData\Local\HP
2022-03-31 19:41 - 2018-12-14 13:51 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
==================== Fichiers à la racine de certains dossiers ========
2017-04-18 18:26 - 2020-06-21 11:24 - 003307904 _____ (Nicolas Coolman) C:\Users\thierry\ZHPCleaner.exe
2017-09-28 22:13 - 2022-03-25 23:18 - 003285656 _____ (Nicolas Coolman) C:\Users\thierry\ZHPDiag3.exe
2021-03-17 20:56 - 2021-03-17 20:56 - 003466904 _____ (Nicolas Coolman) C:\Users\thierry\ZHPSuite.exe
2015-10-31 14:24 - 2015-10-31 14:24 - 000007602 _____ () C:\Users\thierry\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================