Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 24-06-2022 01
Exécuté par Serge (administrateur) sur BOURBAKI (Micro-Star International Co., Ltd. GX780R/GT780R/GT780DXR) (29-06-2022 09:29:38)
Exécuté depuis C:\Users\Serge\Desktop
Profils chargés: Serge & Marie-Laure & Administrateur & Invité
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1766 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Estmob Inc. -> Estmob Inc.) C:\Program Files (x86)\Send Anywhere\Send Anywhere.exe <3>
(explorer.exe ->) (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation] C:\Program Files\Windows Sidebar\sidebar.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD -> MSI) [Fichier non signé] C:\Program Files (x86)\SCM\SCM.exe
(explorer.exe ->) (Pierre TORRIS) [Fichier non signé] C:\Program Files (x86)\IcoSauve\IcoSauve.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (Sentelic Corporation -> Sentelic Corporation) C:\Program Files\FSP\FspUip.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(MICRO-STAR INTERNATIONAL CO., LTD -> Micro-Star International Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\MSI\LockIndicator\LockIndicator.exe
(Micro-Star International CO., LTD. -> Application) [Fichier non signé] C:\Program Files (x86)\MSI\KLM\KLM.exe
(MSI) [Fichier non signé] C:\Program Files (x86)\MSI\NVIDIA Overclock Tool\NVIDIAOCAP.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PdfPro8Hook.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(services.exe ->) (Abstradrome -> ) C:\Program Files (x86)\HDD Regenerator\hrsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\103.0.5060.46\remoting_host.exe <2>
(services.exe ->) (MAGIX AG) [Fichier non signé] C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Micro-Star International Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\S-Bar\MSIService.exe
(services.exe ->) (Nitro PDF Software -> Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Sentelic Corporation -> ) C:\Windows\System32\FspService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (voidtools -> voidtools) C:\Program Files (x86)\Everything\Everything.exe <2>
(svchost.exe ->) (Korton Group B.V. -> Inno Setup®) [Fichier non signé] C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10222080 2010-12-14] (Intel Corporation) [Fichier non signé]
HKLM\...\Run: [THXCfg64] => C:\windows\system32\THXCfg64.dll [17920 2009-10-15] (Creative Technology Ltd.) [Fichier non signé]
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1710568 2015-08-27] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [396968 2013-08-19] (MICRO-STAR INTERNATIONAL CO., LTD -> MSI) [Fichier non signé]
HKLM\...\Run: [fspuip] => C:\Program Files\FSP\fspuip.exe [6319440 2015-05-29] (Sentelic Corporation -> Sentelic Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [754416 2018-09-20] (Acronis International GmbH -> )
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [Cinema ProII AP] => C:\Program Files (x86)\MSI\Cinema ProII\CinemaProII.exe [200192 2011-01-25] (Micro-Star Int'l Co., Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [Cinema ProII Controler] => C:\Program Files (x86)\MSI\Cinema ProII\Cinema ProII Controler.exe [1689600 2010-06-25] (msi) [Fichier non signé]
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1351680 2010-11-19] (Creative Technology Ltd) [Fichier non signé]
HKLM-x32\...\Run: [UpdReg] => C:\windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [NVIDIAOCAP] => C:\Program Files (x86)\MSI\NVIDIA Overclock Tool\NVIDIAOCAP.exe [84480 2011-03-28] (MSI) [Fichier non signé]
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [LockIndicator] => C:\Program Files (x86)\MSI\LockIndicator\LockIndicator.exe [1699016 2011-06-24] (MICRO-STAR INTERNATIONAL CO., LTD -> Micro-Star International Co., Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [KLM] => C:\Program Files (x86)\MSI\KLM\KLM.exe [2151224 2015-11-10] (Micro-Star International CO., LTD. -> Application) [Fichier non signé]
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Professional 8\RegistryController.exe [178576 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 8\pdfpro8hook.exe [2013072 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance PDF Converter Professional 8-reminder] => C:\Program Files (x86)\Nuance\PDF Professional 8\Ereg\Ereg.exe [333712 2012-10-11] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2018-09-20] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4575880 2018-09-20] (Acronis International GmbH -> )
HKLM-x32\...\Run: [HDD Regenerator] => C:\Program Files (x86)\HDD Regenerator\Shell.exe [90336 2013-05-08] (Abstradrome -> )
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1774696 2021-05-12] (voidtools -> voidtools)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707768 2022-03-10] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1371648 2012-05-19] (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
HKU\S-1-5-20\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1371648 2012-05-19] (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2229720 2021-09-23] (TomTom International B.V. -> TomTom)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [SendAnywhere] => C:\Program Files (x86)\Send Anywhere\Send Anywhere.exe [49786656 2018-07-19] (Estmob Inc. -> Estmob Inc.)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [Opera Browser Assistant] => C:\Users\Serge\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [2480728 2019-02-26] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [Lifesize App Service] => C:\Users\Serge\AppData\Local\lifesize_app\Lifesize.exe [579720 2021-09-15] (Lifesize, Inc -> Lifesize)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [MicrosoftEdgeAutoLaunch_660BC00B9DE12718807758626F4698E3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601824 2022-06-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [39936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Uninstall 21.073.0411.0002\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\21.073.0411.0002\amd64" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Uninstall 21.073.0411.0002] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\21.073.0411.0002" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Uninstall 19.043.0304.0013] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\19.043.0304.0013" (Pas de fichier)
HKLM\...\Windows x64\Print Processors\hpfpp02t: C:\Windows\System32\spool\prtprocs\x64\hpfpp02t.dll [253440 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\hpzpp5k2: C:\Windows\System32\spool\prtprocs\x64\hpzpp5k2.dll [224768 2007-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP C511 Status Monitor: C:\windows\system32\hpinkstsC511LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710n-z): C:\windows\system32\HPDiscoPM5412.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\windows\system32\nitrolocalmon2.dll [29712 2013-07-26] (Nitro PDF Software -> Nitro PDF Software)
HKLM\...\Print\Monitors\PCL hpf3l02t: C:\windows\system32\hpf3l02t.dll [138752 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PCL hpz3l5k2: C:\windows\system32\hpz3l5k2.dll [130048 2007-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\pdfcmon: C:\windows\system32\pdfcmon.dll [120200 2015-11-17] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb] -> IIS Express Application Compatibility Database for x64
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb] -> IIS Express Application Compatibility Database for x86
HKLM\Software\...\AppCompatFlags\InstalledSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb [2012-05-29]
HKLM\Software\...\AppCompatFlags\InstalledSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb [2012-05-29]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.66\Installer\chrmstp.exe [2022-06-29] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\Software\...\Authentication\Credential Providers: [{EB9607AB-6BEF-47ac-974B-3B8E66597327}] -> C:\windows\system32\EasyFaceCredentialProvider.dll [2011-01-29] () [Fichier non signé]
Startup: C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar270.lnk [2021-05-11]
ShortcutTarget: Sidebar270.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Efficient Sticky Notes.lnk [2020-11-15]
ShortcutTarget: Efficient Sticky Notes.lnk -> C:\Program Files (x86)\Efficient Sticky Notes\EfficientStickyNotes.exe (Chongqing Yifei Technology Co., Ltd. -> Efficient Software)
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IcoSauve.lnk [2017-11-24]
ShortcutTarget: IcoSauve.lnk -> C:\Program Files (x86)\IcoSauve\IcoSauve.exe (Pierre TORRIS) [Fichier non signé]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\La Chaîne Météo.lnk [2021-01-22]
ShortcutTarget: La Chaîne Météo.lnk -> C:\Program Files (x86)\La Chaîne Météo\La Chaîne Météo.exe () [Fichier non signé]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar398.lnk [2022-06-28]
ShortcutTarget: Sidebar398.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
BootExecute: autocheck autochk /p \??\Volumeautocheck autochk *
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02E21FD8-A7EB-42A7-8EDF-D01C6BA7B72B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {16D31958-B637-4548-B1BF-A00758481998} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {651177DC-EAB6-4D0E-B573-F7A1E4907112} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {90565A2D-2025-4CF3-8D4D-76CE81447E86} - System32\Tasks\Re-attempt Adobe® Flash Player Install => C:\ProgramData\Adobe Flash Player\Temp\install_flash_player_23_plugin.exe [32128 2019-01-21] (Adobe Systems Incorporated -> Adobe Systems Incorporated) [Fichier non signé] <==== ATTENTION
Task: {A511798C-E9E5-42EB-8E5B-A1C68B1928DF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B05312B8-3E72-44F1-BA0A-58DDD7037384} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BAFE1801-7B12-4146-98EF-DA667A355ECC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C5A6549F-EA52-4D3A-9487-26FE081AFBE3} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FB92B564-B6AB-40A3-AD5B-9CC2314A6DD6} - System32\Tasks\Inno Setup® Software Update Scheduler => C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe [1011512 2019-01-21] (Korton Group B.V. -> Inno Setup®) [Fichier non signé] <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
ProxyEnable: [HKLM] => Proxy est activé.
ProxyEnable: [HKLM-x32] => Proxy est activé.
ProxyServer: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyServer: [HKLM-x32] => http=127.0.0.1:6061;https=127.0.0.1:6061
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0BEE3A40-B762-43FB-A576-466182BA4595}: [DhcpNameServer] 208.67.222.222 208.67.220.220 192.168.0.254
Tcpip\..\Interfaces\{8c4966ff-1dbb-4905-9ecb-49e363fe98ad}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{D2D6FF15-FC2C-4603-8303-F40BB30B2EEF}: [DhcpNameServer] 10.1.68.1
ManualProxies: 1http=127.0.0.1:6061;https=127.0.0.1:6061
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
DownloadDir: C:\Users\Serge\Téléchargements
Edge Notifications: HKU\S-1-5-21-1032755939-1607129392-196762547-1001 -> hxxps://www.youtube.com
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-29]
Edge DownloadDir: Default -> C:\Users\Serge\Téléchargements
Edge StartupUrls: Default -> "hxxps://calendar.google.com/calendar/u/0/r/customday?hl=fr","hxxps://web.skype.com/","hxxp://listes.prepas.org/wws","hxxps://subscribe.free.fr/accesgratuit/console/console.pl?id=11283542&idt=WX5OnKFYY5sqfgOaq6akPSwknyaunWqpMTtRIPDPUQGVxrW75mrCuGVlIBOYoHqjrI8xQYwXGDHYjtMLLCdY2z","hxxp://sql.free.fr/phpMyAdmin/index.php?token=67715eeda491ebf6ebee4c7931d832ab&old_usr=joyeux.marcheurs","hxxps://freecellgamesolutions.com/1m/","hxxps://www.carmin.tv/en/search","hxxps://www.ffbridge.fr/","hxxp://phptester.net/","hxxps://www.php.net/manual/fr/","hxxps://www.youtube.com/channel/UCaNlbnghtwlsGF-KzAFThqA","hxxps://www.tangente-mag.com/article.php?id=5702","hxxps://www.meszepices.com/compte.html","hxxps://www.amazon.fr/s?k=nitrate+de+potassium&hvadid=80126942456176&hvbmt=be&hvdev=c&hvqmt=e&tag=hydfrmsn-21&ref=pd_sl_3yts7za3cc_e","hxxps://www.bing.com/videos/search?q=%2bDessoucheuse+Video&FORM=RCVR","hxxps://www.amazon.fr/PGST-s%C3%A9curit%C3%A9-domestique-distance-intelligente/dp/B0915JCH23?th=1","hxxps://fr.aliexpress.com/item/1005001700651666.html?ug_edm_item_id=1005001700651666&creative_img_ind=9&edm_click_module=alg_product&tracelog=rowan&rowan_id1=product_2_picture_square_1_fr_FR_2021-11-10&rowan_msg_id=publCOWS_131_$b8f3bb02e8e340e6a36ee98ce7849dc8&ck=in_edm_other","hxxps://forum.hardware.fr/hfr/electroniquedomotiquediy/domotique_maisonconnectee/unique-alarme-433mhz-sujet_581_1.htm","hxxp://joyeux.marcheurs.free.fr/diaporamaPHP/index.php","edge://newtab/","hxxp://phpmyadmin.free.fr/phpMyAdmin/index.php"
Edge Extension: (Gestionnaire d'extensions pour Microsoft Edge) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cdhikdbhlachlhfclfiihpeeennkmdhb [2022-02-23]
Edge Extension: (Session Buddy) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2021-06-22]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-06-16]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-06-29]
Edge Extension: (Chrome Remote Desktop) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2021-03-18]
Edge Extension: (All Video Downloader professional) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mbpnbnogejaolbhfpfgagldkeahefbhd [2022-06-23]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: p2b4hhls.Serge-1515362336258
FF ProfilePath: C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 [2022-06-29]
FF Session Restore: Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 -> hxxps://www.lesimprimantes3d.fr
FF Extension: (Pinned Google Calendar) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\intgcal@egarracingteam.com.ar.xpi [2021-01-27]
FF Extension: (Pas de nom) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\simple-tab-groups@drive4ik.xpi [2020-09-26]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-05-23]
FF Extension: (Video DownloadHelper) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-30]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2015-11-17] [] [non signé]
FF HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Firefox\Extensions: [{b9aa91db-385d-4c69-8a2f-96790aa9405b}] - c:\program files (x86)\copernic\desktopsearch\firefoxconnector => non trouvé(e)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.331.2 -> C:\Program Files (x86)\Java\jre1.8.0_331\bin\dtplugin\npDeployJava1.dll [2022-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.331.2 -> C:\Program Files (x86)\Java\jre1.8.0_331\bin\plugin2\npjp2.dll [2022-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-12-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF Software -> Nitro PDF)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 8\bin\nppdf.dll [2012-07-31] (Zeon Corporation -> Zeon Corporation) [Fichier non signé]
Chrome:
=======
CHR Profile: C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default [2022-06-29]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> file:///G:/Mes%20documents/www/ie_local/index.htm
CHR StartupUrls: Default -> "file:///G:/Mes%20documents/www/ie_local/index.htm"
CHR Extension: (EditThisCookie) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2021-04-16]
CHR Extension: (Google Docs hors connexion) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-20]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-06-29]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2021-04-16]
CHR Extension: (Skype) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2022-06-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-16]
CHR Extension: (Update Manager) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extension\dqmebrirbrqrlieflbqqdjdkcdiqopdm\8.7.5._0 [2022-06-29]
CHR HKU\S-1-5-21-1032755939-1607129392-196762547-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnnbdaahphjgdgfhliignpepgnbnfomp] - c:\program files (x86)\copernic\desktopsearch\ChromeConnector\ChromeConnector.crx
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
Opera:
=======
OPR Profile: C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable [2022-06-22]
OPR Notifications: Opera Stable -> hxxps://www.facebook.com; hxxps://www.lesimprimantes3d.fr
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-06-17]
OPR Extension: (Opera Crypto Wallet) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-05-26]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-02-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [3956952 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1157592 2018-09-20] (Acronis International GmbH -> )
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6285616 2020-09-04] (Acronis International GmbH -> )
S2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122728 2017-09-04] (CHENGDU AOMEI Tech Co., Ltd. -> AOMEI Tech Co., Ltd.)
S2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2010-12-14] (Intel Corporation) [Fichier non signé]
S3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-12-14] (Intel Corporation) [Fichier non signé]
S2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [974912 2010-12-14] (Intel Corporation) [Fichier non signé]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\103.0.5060.46\remoting_host.exe [73104 2022-06-09] (Google LLC -> Google LLC)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1774696 2021-05-12] (voidtools -> voidtools)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Fichier non signé]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Fichier non signé]
R2 FspSvc; C:\Windows\System32\FspService.exe [2178896 2015-05-29] (Sentelic Corporation -> )
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [Fichier non signé]
R2 hddrsrv; C:\Program Files (x86)\HDD Regenerator\hrsrv.exe [82144 2013-05-08] (Abstradrome -> )
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-23] (Hewlett-Packard Co.) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8348856 2022-03-31] (Malwarebytes Inc -> Malwarebytes)
R2 Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [160768 2012-11-09] (Micro-Star International Co., Ltd.) [Fichier non signé]
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1762456 2018-09-20] (Acronis International GmbH -> )
S2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [12800 2010-07-17] (MSI) [Fichier non signé]
S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [69964448 2015-04-03] (Microsoft Corporation -> Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Fichier non signé]
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software -> Nitro PDF Software)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
R2 PDFProFiltSrv; C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe [135056 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Fichier non signé]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-01-31] (SolidWorks) [Fichier non signé]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441512 2015-04-03] (Microsoft Corporation -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7003048 2018-09-20] (Acronis International GmbH -> )
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Fichier non signé]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13274600 2022-04-05] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746728 2022-03-23] (Oracle Corporation -> Oracle Corporation)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-06-16] (Disc Soft Ltd -> Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [60968 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé]
R1 EUDSKACS; C:\windows\system32\drivers\eudskacs.sys [18472 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R0 EUDSKCP; C:\Windows\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R1 EUEUMDK; C:\Windows\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R1 EUFDDISK; C:\windows\system32\drivers\EuFdDisk.sys [192552 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [660456 2020-09-04] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [390592 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\Windows\System32\DRIVERS\fltsrv.sys [182832 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 fspad_win764; C:\Windows\system32\DRIVERS\fspad_win764.sys [209232 2015-05-29] (Sentelic Corporation -> Sentelic Corporation)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [223688 2022-04-25] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2022-03-31] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [158856 2022-04-25] (Malwarebytes Inc -> Malwarebytes)
R3 MpKsld2f88262; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B2D7676-13CA-40C4-B7D8-D9F15383E910}\MpKslDrv.sys [141568 2022-06-28] (Microsoft Windows -> Microsoft Corporation)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1310552 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [213336 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\Windows\system32\DRIVERS\tnd.sys [690520 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [240704 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [250608 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1046392 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331976 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 WinDivert1.1; C:\Users\Serge\Téléchargements\Activation Windows et Office\wdvdriver\x64WDV\WinDivert.sys [35376 2021-12-07] (Nemea Mjukvaruutveckling AB -> Basil Projects)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo LTD -> Jungo Connectivity)
U3 idsvc; pas de ImagePath
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-29 09:29 - 2022-06-29 09:31 - 000044801 _____ C:\Users\Serge\Desktop\FRST.txt
2022-06-29 09:08 - 2022-06-29 09:25 - 000140346 _____ C:\Users\Serge\Desktop\Addition_0.txt
2022-06-29 08:58 - 2022-06-29 09:27 - 000033224 _____ C:\Users\Serge\Desktop\FRST_0.txt
2022-06-29 08:56 - 2022-06-29 09:30 - 000000000 ____D C:\FRST
2022-06-29 08:55 - 2022-06-29 08:50 - 002369024 _____ (Farbar) C:\Users\Serge\Desktop\FRST64.exe
2022-06-29 08:48 - 2022-06-29 08:48 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-06-29 08:41 - 2022-06-29 08:35 - 000001020 _____ C:\Users\Serge\Desktop\Diagnostic FRST.txt
2022-06-28 23:40 - 2022-06-28 23:40 - 000002406 _____ C:\Users\Serge\Desktop\Bureau Schwartz.lnk
2022-06-27 18:01 - 2022-06-27 18:01 - 000000000 ____D C:\Users\Serge\.ms-ad
2022-06-24 11:47 - 2022-06-24 11:47 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2022-06-20 20:22 - 2022-06-20 20:22 - 000104448 _____ C:\Windows\system32\nettraceex.dll
2022-06-20 20:21 - 2022-06-20 20:21 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2022-06-20 20:21 - 2022-06-20 20:21 - 000011787 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-06-20 20:20 - 2022-06-20 20:20 - 002260480 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2022-06-20 20:20 - 2022-06-20 20:20 - 000232288 _____ C:\Windows\system32\containerdevicemanagement.dll
2022-06-20 19:14 - 2022-06-20 19:14 - 000000000 ___HD C:\$WinREAgent
2022-06-18 23:01 - 2022-06-18 23:01 - 000000000 ____D C:\Users\Marie-Laure\AppData\Roaming\Everything
2022-06-18 23:01 - 2022-06-18 23:01 - 000000000 ____D C:\Users\Marie-Laure\AppData\Local\Everything
2022-06-18 22:57 - 2022-06-18 22:57 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1032755939-1607129392-196762547-1008
2022-06-18 22:57 - 2022-06-18 22:57 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1032755939-1607129392-196762547-1008
2022-06-13 13:19 - 2022-06-16 10:56 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-13 13:19 - 2022-06-16 10:56 - 000003594 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d73fa8efc88af
2022-06-08 13:31 - 2022-06-08 13:35 - 000003788 _____ C:\Windows\system32\Tasks\Re-attempt Adobe® Flash Player Install
2022-06-08 13:31 - 2022-06-08 13:35 - 000003394 _____ C:\Windows\system32\Tasks\Inno Setup® Software Update Scheduler
2022-06-03 23:41 - 2022-06-03 23:41 - 000000000 ____D C:\ProgramData\Piriform
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-29 09:33 - 2018-08-22 18:16 - 000000000 ____D C:\ProgramData\TEMP
2022-06-29 09:11 - 2018-03-25 09:22 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-29 08:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-29 08:56 - 2017-12-05 21:58 - 000000000 ____D C:\Users\Serge\AppData\LocalLow\Mozilla
2022-06-29 08:50 - 2022-03-12 12:11 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-29 08:49 - 2015-01-24 19:30 - 000000000 ___RD C:\Users\Serge\Téléchargements
2022-06-29 08:48 - 2017-12-09 17:17 - 000000980 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-29 08:48 - 2017-12-09 17:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-29 08:48 - 2017-12-09 17:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-29 08:45 - 2022-02-08 13:22 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Everything
2022-06-29 08:41 - 2021-05-03 00:42 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-06-28 20:03 - 2018-05-04 09:14 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Send Anywhere
2022-06-28 19:58 - 2015-01-31 17:59 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-06-28 19:57 - 2021-05-03 01:33 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-06-28 19:57 - 2011-05-25 08:22 - 000000000 ____D C:\ProgramData\NVIDIA
2022-06-28 19:56 - 2022-01-27 10:36 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-28 19:55 - 2019-12-07 11:03 - 001310720 _____ C:\Windows\system32\config\BBI
2022-06-28 19:54 - 2022-02-09 18:31 - 000000000 ____D C:\Users\Serge\AppData\Local\Everything
2022-06-27 18:01 - 2021-05-02 22:19 - 000000000 ____D C:\Users\Serge
2022-06-27 17:55 - 2020-09-27 09:55 - 000000000 ____D C:\ProgramData\Packages
2022-06-27 17:55 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2022-06-27 17:53 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-27 15:42 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2022-06-25 13:04 - 2020-09-27 09:54 - 000002746 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-24 11:46 - 2022-01-12 22:44 - 000002097 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-06-24 11:46 - 2022-01-08 16:13 - 000002109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-06-23 20:05 - 2019-05-05 19:24 - 000000000 ____D C:\Users\Serge\Desktop\Boules-bridge logiciel
2022-06-23 19:28 - 2020-09-27 09:51 - 000000000 ____D C:\Windows\system32\Drivers\wd
2022-06-23 09:08 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2022-06-23 08:38 - 2015-01-27 08:51 - 000000000 ____D C:\Users\Serge\AppData\Local\CrashDumps
2022-06-22 15:09 - 2018-09-22 12:54 - 000001024 ____H C:\AMTAG.BIN
2022-06-22 14:44 - 2021-05-03 01:28 - 000025587 _____ C:\Windows\diagerr.xml
2022-06-22 14:44 - 2021-05-03 01:28 - 000024750 _____ C:\Windows\diagwrn.xml
2022-06-20 21:17 - 2021-05-03 01:11 - 002021514 _____ C:\Windows\system32\PerfStringBackup.INI
2022-06-20 21:17 - 2019-12-07 16:49 - 000833050 _____ C:\Windows\system32\perfh00C.dat
2022-06-20 21:17 - 2019-12-07 16:49 - 000167780 _____ C:\Windows\system32\perfc00C.dat
2022-06-20 21:09 - 2021-05-03 00:40 - 000576552 _____ C:\Windows\system32\FNTCACHE.DAT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2022-06-20 21:04 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2022-06-20 20:21 - 2011-02-14 23:42 - 000415524 __RSH C:\bootmgr
2022-06-20 20:19 - 2021-05-03 00:48 - 002877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2022-06-20 18:46 - 2015-01-30 23:46 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2022-06-20 18:40 - 2015-01-25 11:13 - 000000000 ____D C:\Windows\system32\MRT
2022-06-20 18:19 - 2015-01-25 11:13 - 145918784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-06-20 04:01 - 2021-05-02 21:24 - 000000000 ____D C:\Windows\system32\msmq
2022-06-18 23:01 - 2020-08-28 10:33 - 000000000 ____D C:\Users\Marie-Laure\AppData\Local\Packages
2022-06-18 22:57 - 2021-05-02 22:19 - 000002467 _____ C:\Users\Marie-Laure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-18 22:55 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2022-06-18 22:51 - 2020-08-28 10:33 - 000000000 ____D C:\Users\Marie-Laure\AppData\Roaming\Adobe
2022-06-17 20:05 - 2018-03-28 01:05 - 000000000 ____D C:\Users\Serge\AppData\Local\Packages
2022-06-17 14:20 - 2020-09-04 19:19 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Acronis
2022-06-17 09:40 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2022-06-08 14:50 - 2019-05-18 17:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2022-06-08 14:50 - 2019-05-18 17:20 - 000000000 ____D C:\Program Files\KMSpico
2022-06-08 13:31 - 2022-01-28 22:05 - 000000000 ____D C:\Windows\system32\Tasks\HardDiskSentinel
2022-06-08 13:31 - 2021-05-03 09:30 - 000000000 ____D C:\Windows\system32\Tasks\Agent Activation Runtime
2022-06-06 18:53 - 2019-02-22 20:26 - 000001445 _____ C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-06-06 14:24 - 2019-03-07 12:43 - 000000502 _____ C:\Users\Serge\printrunconf.ini~bak
2022-06-06 14:24 - 2019-03-07 12:43 - 000000502 _____ C:\Users\Serge\printrunconf.ini
2022-06-04 18:04 - 2022-01-28 19:44 - 000000000 ____D C:\Program Files (x86)\Hard Disk Sentinel
2022-06-03 23:58 - 2021-12-08 14:55 - 000000000 ____D C:\Program Files\Recuva
2022-06-02 19:54 - 2021-05-02 22:19 - 000002457 _____ C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-01 18:39 - 2015-11-14 11:52 - 000000000 ____D C:\Users\Serge\AppData\Roaming\FileZilla
==================== Fichiers à la racine de certains dossiers ========
2018-09-22 10:14 - 2018-09-22 10:18 - 503043688 _____ () C:\Users\Serge\AppData\Local\AcronisTrueImage2016_6595.exe
2015-01-29 00:10 - 2015-01-29 00:10 - 000000017 _____ () C:\Users\Serge\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Serge (administrateur) sur BOURBAKI (Micro-Star International Co., Ltd. GX780R/GT780R/GT780DXR) (29-06-2022 09:29:38)
Exécuté depuis C:\Users\Serge\Desktop
Profils chargés: Serge & Marie-Laure & Administrateur & Invité
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1766 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Estmob Inc. -> Estmob Inc.) C:\Program Files (x86)\Send Anywhere\Send Anywhere.exe <3>
(explorer.exe ->) (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation] C:\Program Files\Windows Sidebar\sidebar.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD -> MSI) [Fichier non signé] C:\Program Files (x86)\SCM\SCM.exe
(explorer.exe ->) (Pierre TORRIS) [Fichier non signé] C:\Program Files (x86)\IcoSauve\IcoSauve.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (Sentelic Corporation -> Sentelic Corporation) C:\Program Files\FSP\FspUip.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(MICRO-STAR INTERNATIONAL CO., LTD -> Micro-Star International Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\MSI\LockIndicator\LockIndicator.exe
(Micro-Star International CO., LTD. -> Application) [Fichier non signé] C:\Program Files (x86)\MSI\KLM\KLM.exe
(MSI) [Fichier non signé] C:\Program Files (x86)\MSI\NVIDIA Overclock Tool\NVIDIAOCAP.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PdfPro8Hook.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(services.exe ->) (Abstradrome -> ) C:\Program Files (x86)\HDD Regenerator\hrsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\103.0.5060.46\remoting_host.exe <2>
(services.exe ->) (MAGIX AG) [Fichier non signé] C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Micro-Star International Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\S-Bar\MSIService.exe
(services.exe ->) (Nitro PDF Software -> Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Sentelic Corporation -> ) C:\Windows\System32\FspService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (voidtools -> voidtools) C:\Program Files (x86)\Everything\Everything.exe <2>
(svchost.exe ->) (Korton Group B.V. -> Inno Setup®) [Fichier non signé] C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10222080 2010-12-14] (Intel Corporation) [Fichier non signé]
HKLM\...\Run: [THXCfg64] => C:\windows\system32\THXCfg64.dll [17920 2009-10-15] (Creative Technology Ltd.) [Fichier non signé]
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1710568 2015-08-27] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [396968 2013-08-19] (MICRO-STAR INTERNATIONAL CO., LTD -> MSI) [Fichier non signé]
HKLM\...\Run: [fspuip] => C:\Program Files\FSP\fspuip.exe [6319440 2015-05-29] (Sentelic Corporation -> Sentelic Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [754416 2018-09-20] (Acronis International GmbH -> )
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [Cinema ProII AP] => C:\Program Files (x86)\MSI\Cinema ProII\CinemaProII.exe [200192 2011-01-25] (Micro-Star Int'l Co., Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [Cinema ProII Controler] => C:\Program Files (x86)\MSI\Cinema ProII\Cinema ProII Controler.exe [1689600 2010-06-25] (msi) [Fichier non signé]
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1351680 2010-11-19] (Creative Technology Ltd) [Fichier non signé]
HKLM-x32\...\Run: [UpdReg] => C:\windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [NVIDIAOCAP] => C:\Program Files (x86)\MSI\NVIDIA Overclock Tool\NVIDIAOCAP.exe [84480 2011-03-28] (MSI) [Fichier non signé]
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [LockIndicator] => C:\Program Files (x86)\MSI\LockIndicator\LockIndicator.exe [1699016 2011-06-24] (MICRO-STAR INTERNATIONAL CO., LTD -> Micro-Star International Co., Ltd.) [Fichier non signé]
HKLM-x32\...\Run: [KLM] => C:\Program Files (x86)\MSI\KLM\KLM.exe [2151224 2015-11-10] (Micro-Star International CO., LTD. -> Application) [Fichier non signé]
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [PDF8 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Professional 8\RegistryController.exe [178576 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 8\pdfpro8hook.exe [2013072 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [Nuance PDF Converter Professional 8-reminder] => C:\Program Files (x86)\Nuance\PDF Professional 8\Ereg\Ereg.exe [333712 2012-10-11] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2018-09-20] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4575880 2018-09-20] (Acronis International GmbH -> )
HKLM-x32\...\Run: [HDD Regenerator] => C:\Program Files (x86)\HDD Regenerator\Shell.exe [90336 2013-05-08] (Abstradrome -> )
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1774696 2021-05-12] (voidtools -> voidtools)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707768 2022-03-10] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1371648 2012-05-19] (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
HKU\S-1-5-20\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1371648 2012-05-19] (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2229720 2021-09-23] (TomTom International B.V. -> TomTom)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [SendAnywhere] => C:\Program Files (x86)\Send Anywhere\Send Anywhere.exe [49786656 2018-07-19] (Estmob Inc. -> Estmob Inc.)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [Opera Browser Assistant] => C:\Users\Serge\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [2480728 2019-02-26] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [Lifesize App Service] => C:\Users\Serge\AppData\Local\lifesize_app\Lifesize.exe [579720 2021-09-15] (Lifesize, Inc -> Lifesize)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Run: [MicrosoftEdgeAutoLaunch_660BC00B9DE12718807758626F4698E3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601824 2022-06-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1032755939-1607129392-196762547-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [39936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Uninstall 21.073.0411.0002\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\21.073.0411.0002\amd64" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-1008\...\RunOnce: [Uninstall 21.073.0411.0002] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marie-Laure\AppData\Local\Microsoft\OneDrive\21.073.0411.0002" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1032755939-1607129392-196762547-500\...\RunOnce: [Uninstall 19.043.0304.0013] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Administrateur\AppData\Local\Microsoft\OneDrive\19.043.0304.0013" (Pas de fichier)
HKLM\...\Windows x64\Print Processors\hpfpp02t: C:\Windows\System32\spool\prtprocs\x64\hpfpp02t.dll [253440 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\hpzpp5k2: C:\Windows\System32\spool\prtprocs\x64\hpzpp5k2.dll [224768 2007-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP C511 Status Monitor: C:\windows\system32\hpinkstsC511LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 6500 E710n-z): C:\windows\system32\HPDiscoPM5412.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\windows\system32\nitrolocalmon2.dll [29712 2013-07-26] (Nitro PDF Software -> Nitro PDF Software)
HKLM\...\Print\Monitors\PCL hpf3l02t: C:\windows\system32\hpf3l02t.dll [138752 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PCL hpz3l5k2: C:\windows\system32\hpz3l5k2.dll [130048 2007-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\pdfcmon: C:\windows\system32\pdfcmon.dll [120200 2015-11-17] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb] -> IIS Express Application Compatibility Database for x64
HKLM\Software\...\AppCompatFlags\Custom\iisexpress.exe: [{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb] -> IIS Express Application Compatibility Database for x86
HKLM\Software\...\AppCompatFlags\InstalledSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb [2012-05-29]
HKLM\Software\...\AppCompatFlags\InstalledSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb [2012-05-29]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.66\Installer\chrmstp.exe [2022-06-29] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\Software\...\Authentication\Credential Providers: [{EB9607AB-6BEF-47ac-974B-3B8E66597327}] -> C:\windows\system32\EasyFaceCredentialProvider.dll [2011-01-29] () [Fichier non signé]
Startup: C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar270.lnk [2021-05-11]
ShortcutTarget: Sidebar270.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Efficient Sticky Notes.lnk [2020-11-15]
ShortcutTarget: Efficient Sticky Notes.lnk -> C:\Program Files (x86)\Efficient Sticky Notes\EfficientStickyNotes.exe (Chongqing Yifei Technology Co., Ltd. -> Efficient Software)
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IcoSauve.lnk [2017-11-24]
ShortcutTarget: IcoSauve.lnk -> C:\Program Files (x86)\IcoSauve\IcoSauve.exe (Pierre TORRIS) [Fichier non signé]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\La Chaîne Météo.lnk [2021-01-22]
ShortcutTarget: La Chaîne Météo.lnk -> C:\Program Files (x86)\La Chaîne Météo\La Chaîne Météo.exe () [Fichier non signé]
Startup: C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar398.lnk [2022-06-28]
ShortcutTarget: Sidebar398.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
BootExecute: autocheck autochk /p \??\Volumeautocheck autochk *
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02E21FD8-A7EB-42A7-8EDF-D01C6BA7B72B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {16D31958-B637-4548-B1BF-A00758481998} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {651177DC-EAB6-4D0E-B573-F7A1E4907112} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {90565A2D-2025-4CF3-8D4D-76CE81447E86} - System32\Tasks\Re-attempt Adobe® Flash Player Install => C:\ProgramData\Adobe Flash Player\Temp\install_flash_player_23_plugin.exe [32128 2019-01-21] (Adobe Systems Incorporated -> Adobe Systems Incorporated) [Fichier non signé] <==== ATTENTION
Task: {A511798C-E9E5-42EB-8E5B-A1C68B1928DF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B05312B8-3E72-44F1-BA0A-58DDD7037384} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BAFE1801-7B12-4146-98EF-DA667A355ECC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C5A6549F-EA52-4D3A-9487-26FE081AFBE3} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FB92B564-B6AB-40A3-AD5B-9CC2314A6DD6} - System32\Tasks\Inno Setup® Software Update Scheduler => C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe [1011512 2019-01-21] (Korton Group B.V. -> Inno Setup®) [Fichier non signé] <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
ProxyEnable: [HKLM] => Proxy est activé.
ProxyEnable: [HKLM-x32] => Proxy est activé.
ProxyServer: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyServer: [HKLM-x32] => http=127.0.0.1:6061;https=127.0.0.1:6061
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0BEE3A40-B762-43FB-A576-466182BA4595}: [DhcpNameServer] 208.67.222.222 208.67.220.220 192.168.0.254
Tcpip\..\Interfaces\{8c4966ff-1dbb-4905-9ecb-49e363fe98ad}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{D2D6FF15-FC2C-4603-8303-F40BB30B2EEF}: [DhcpNameServer] 10.1.68.1
ManualProxies: 1http=127.0.0.1:6061;https=127.0.0.1:6061
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
DownloadDir: C:\Users\Serge\Téléchargements
Edge Notifications: HKU\S-1-5-21-1032755939-1607129392-196762547-1001 -> hxxps://www.youtube.com
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-29]
Edge DownloadDir: Default -> C:\Users\Serge\Téléchargements
Edge StartupUrls: Default -> "hxxps://calendar.google.com/calendar/u/0/r/customday?hl=fr","hxxps://web.skype.com/","hxxp://listes.prepas.org/wws","hxxps://subscribe.free.fr/accesgratuit/console/console.pl?id=11283542&idt=WX5OnKFYY5sqfgOaq6akPSwknyaunWqpMTtRIPDPUQGVxrW75mrCuGVlIBOYoHqjrI8xQYwXGDHYjtMLLCdY2z","hxxp://sql.free.fr/phpMyAdmin/index.php?token=67715eeda491ebf6ebee4c7931d832ab&old_usr=joyeux.marcheurs","hxxps://freecellgamesolutions.com/1m/","hxxps://www.carmin.tv/en/search","hxxps://www.ffbridge.fr/","hxxp://phptester.net/","hxxps://www.php.net/manual/fr/","hxxps://www.youtube.com/channel/UCaNlbnghtwlsGF-KzAFThqA","hxxps://www.tangente-mag.com/article.php?id=5702","hxxps://www.meszepices.com/compte.html","hxxps://www.amazon.fr/s?k=nitrate+de+potassium&hvadid=80126942456176&hvbmt=be&hvdev=c&hvqmt=e&tag=hydfrmsn-21&ref=pd_sl_3yts7za3cc_e","hxxps://www.bing.com/videos/search?q=%2bDessoucheuse+Video&FORM=RCVR","hxxps://www.amazon.fr/PGST-s%C3%A9curit%C3%A9-domestique-distance-intelligente/dp/B0915JCH23?th=1","hxxps://fr.aliexpress.com/item/1005001700651666.html?ug_edm_item_id=1005001700651666&creative_img_ind=9&edm_click_module=alg_product&tracelog=rowan&rowan_id1=product_2_picture_square_1_fr_FR_2021-11-10&rowan_msg_id=publCOWS_131_$b8f3bb02e8e340e6a36ee98ce7849dc8&ck=in_edm_other","hxxps://forum.hardware.fr/hfr/electroniquedomotiquediy/domotique_maisonconnectee/unique-alarme-433mhz-sujet_581_1.htm","hxxp://joyeux.marcheurs.free.fr/diaporamaPHP/index.php","edge://newtab/","hxxp://phpmyadmin.free.fr/phpMyAdmin/index.php"
Edge Extension: (Gestionnaire d'extensions pour Microsoft Edge) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cdhikdbhlachlhfclfiihpeeennkmdhb [2022-02-23]
Edge Extension: (Session Buddy) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2021-06-22]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-06-16]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-06-29]
Edge Extension: (Chrome Remote Desktop) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2021-03-18]
Edge Extension: (All Video Downloader professional) - C:\Users\Serge\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mbpnbnogejaolbhfpfgagldkeahefbhd [2022-06-23]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: p2b4hhls.Serge-1515362336258
FF ProfilePath: C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 [2022-06-29]
FF Session Restore: Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258 -> hxxps://www.lesimprimantes3d.fr
FF Extension: (Pinned Google Calendar) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\intgcal@egarracingteam.com.ar.xpi [2021-01-27]
FF Extension: (Pas de nom) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\simple-tab-groups@drive4ik.xpi [2020-09-26]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-05-23]
FF Extension: (Video DownloadHelper) - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\p2b4hhls.Serge-1515362336258\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-30]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2015-11-17] [] [non signé]
FF HKU\S-1-5-21-1032755939-1607129392-196762547-1001\...\Firefox\Extensions: [{b9aa91db-385d-4c69-8a2f-96790aa9405b}] - c:\program files (x86)\copernic\desktopsearch\firefoxconnector => non trouvé(e)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.331.2 -> C:\Program Files (x86)\Java\jre1.8.0_331\bin\dtplugin\npDeployJava1.dll [2022-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.331.2 -> C:\Program Files (x86)\Java\jre1.8.0_331\bin\plugin2\npjp2.dll [2022-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-12-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF Software -> Nitro PDF)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 8\bin\nppdf.dll [2012-07-31] (Zeon Corporation -> Zeon Corporation) [Fichier non signé]
Chrome:
=======
CHR Profile: C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default [2022-06-29]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> file:///G:/Mes%20documents/www/ie_local/index.htm
CHR StartupUrls: Default -> "file:///G:/Mes%20documents/www/ie_local/index.htm"
CHR Extension: (EditThisCookie) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2021-04-16]
CHR Extension: (Google Docs hors connexion) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-20]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-06-29]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2021-04-16]
CHR Extension: (Skype) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2022-06-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-16]
CHR Extension: (Update Manager) - C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Extension\dqmebrirbrqrlieflbqqdjdkcdiqopdm\8.7.5._0 [2022-06-29]
CHR HKU\S-1-5-21-1032755939-1607129392-196762547-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnnbdaahphjgdgfhliignpepgnbnfomp] - c:\program files (x86)\copernic\desktopsearch\ChromeConnector\ChromeConnector.crx
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
Opera:
=======
OPR Profile: C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable [2022-06-22]
OPR Notifications: Opera Stable -> hxxps://www.facebook.com; hxxps://www.lesimprimantes3d.fr
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-06-17]
OPR Extension: (Opera Crypto Wallet) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-05-26]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Serge\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-02-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [3956952 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1157592 2018-09-20] (Acronis International GmbH -> )
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6285616 2020-09-04] (Acronis International GmbH -> )
S2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122728 2017-09-04] (CHENGDU AOMEI Tech Co., Ltd. -> AOMEI Tech Co., Ltd.)
S2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2010-12-14] (Intel Corporation) [Fichier non signé]
S3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-12-14] (Intel Corporation) [Fichier non signé]
S2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [974912 2010-12-14] (Intel Corporation) [Fichier non signé]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\103.0.5060.46\remoting_host.exe [73104 2022-06-09] (Google LLC -> Google LLC)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1774696 2021-05-12] (voidtools -> voidtools)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Fichier non signé]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Fichier non signé]
R2 FspSvc; C:\Windows\System32\FspService.exe [2178896 2015-05-29] (Sentelic Corporation -> )
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [Fichier non signé]
R2 hddrsrv; C:\Program Files (x86)\HDD Regenerator\hrsrv.exe [82144 2013-05-08] (Abstradrome -> )
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-23] (Hewlett-Packard Co.) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8348856 2022-03-31] (Malwarebytes Inc -> Malwarebytes)
R2 Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [160768 2012-11-09] (Micro-Star International Co., Ltd.) [Fichier non signé]
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2018-09-20] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1762456 2018-09-20] (Acronis International GmbH -> )
S2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [12800 2010-07-17] (MSI) [Fichier non signé]
S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [69964448 2015-04-03] (Microsoft Corporation -> Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Fichier non signé]
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software -> Nitro PDF Software)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2015-10-19] (pdfforge GmbH -> pdfforge GmbH)
R2 PDFProFiltSrv; C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe [135056 2012-10-23] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Fichier non signé]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-01-31] (SolidWorks) [Fichier non signé]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441512 2015-04-03] (Microsoft Corporation -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7003048 2018-09-20] (Acronis International GmbH -> )
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Fichier non signé]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13274600 2022-04-05] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746728 2022-03-23] (Oracle Corporation -> Oracle Corporation)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-06-16] (Disc Soft Ltd -> Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [60968 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé]
R1 EUDSKACS; C:\windows\system32\drivers\eudskacs.sys [18472 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R0 EUDSKCP; C:\Windows\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R1 EUEUMDK; C:\Windows\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R1 EUFDDISK; C:\windows\system32\drivers\EuFdDisk.sys [192552 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé]
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [660456 2020-09-04] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [390592 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\Windows\System32\DRIVERS\fltsrv.sys [182832 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 fspad_win764; C:\Windows\system32\DRIVERS\fspad_win764.sys [209232 2015-05-29] (Sentelic Corporation -> Sentelic Corporation)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [223688 2022-04-25] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2022-03-31] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [158856 2022-04-25] (Malwarebytes Inc -> Malwarebytes)
R3 MpKsld2f88262; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B2D7676-13CA-40C4-B7D8-D9F15383E910}\MpKslDrv.sys [141568 2022-06-28] (Microsoft Windows -> Microsoft Corporation)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1310552 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [213336 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\Windows\system32\DRIVERS\tnd.sys [690520 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [240704 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [250608 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1046392 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331976 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2020-09-04] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 WinDivert1.1; C:\Users\Serge\Téléchargements\Activation Windows et Office\wdvdriver\x64WDV\WinDivert.sys [35376 2021-12-07] (Nemea Mjukvaruutveckling AB -> Basil Projects)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo LTD -> Jungo Connectivity)
U3 idsvc; pas de ImagePath
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-29 09:29 - 2022-06-29 09:31 - 000044801 _____ C:\Users\Serge\Desktop\FRST.txt
2022-06-29 09:08 - 2022-06-29 09:25 - 000140346 _____ C:\Users\Serge\Desktop\Addition_0.txt
2022-06-29 08:58 - 2022-06-29 09:27 - 000033224 _____ C:\Users\Serge\Desktop\FRST_0.txt
2022-06-29 08:56 - 2022-06-29 09:30 - 000000000 ____D C:\FRST
2022-06-29 08:55 - 2022-06-29 08:50 - 002369024 _____ (Farbar) C:\Users\Serge\Desktop\FRST64.exe
2022-06-29 08:48 - 2022-06-29 08:48 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-06-29 08:41 - 2022-06-29 08:35 - 000001020 _____ C:\Users\Serge\Desktop\Diagnostic FRST.txt
2022-06-28 23:40 - 2022-06-28 23:40 - 000002406 _____ C:\Users\Serge\Desktop\Bureau Schwartz.lnk
2022-06-27 18:01 - 2022-06-27 18:01 - 000000000 ____D C:\Users\Serge\.ms-ad
2022-06-24 11:47 - 2022-06-24 11:47 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2022-06-20 20:22 - 2022-06-20 20:22 - 000104448 _____ C:\Windows\system32\nettraceex.dll
2022-06-20 20:21 - 2022-06-20 20:21 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2022-06-20 20:21 - 2022-06-20 20:21 - 000011787 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-06-20 20:20 - 2022-06-20 20:20 - 002260480 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2022-06-20 20:20 - 2022-06-20 20:20 - 000232288 _____ C:\Windows\system32\containerdevicemanagement.dll
2022-06-20 19:14 - 2022-06-20 19:14 - 000000000 ___HD C:\$WinREAgent
2022-06-18 23:01 - 2022-06-18 23:01 - 000000000 ____D C:\Users\Marie-Laure\AppData\Roaming\Everything
2022-06-18 23:01 - 2022-06-18 23:01 - 000000000 ____D C:\Users\Marie-Laure\AppData\Local\Everything
2022-06-18 22:57 - 2022-06-18 22:57 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1032755939-1607129392-196762547-1008
2022-06-18 22:57 - 2022-06-18 22:57 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1032755939-1607129392-196762547-1008
2022-06-13 13:19 - 2022-06-16 10:56 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-13 13:19 - 2022-06-16 10:56 - 000003594 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d73fa8efc88af
2022-06-08 13:31 - 2022-06-08 13:35 - 000003788 _____ C:\Windows\system32\Tasks\Re-attempt Adobe® Flash Player Install
2022-06-08 13:31 - 2022-06-08 13:35 - 000003394 _____ C:\Windows\system32\Tasks\Inno Setup® Software Update Scheduler
2022-06-03 23:41 - 2022-06-03 23:41 - 000000000 ____D C:\ProgramData\Piriform
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-29 09:33 - 2018-08-22 18:16 - 000000000 ____D C:\ProgramData\TEMP
2022-06-29 09:11 - 2018-03-25 09:22 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-29 08:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-29 08:56 - 2017-12-05 21:58 - 000000000 ____D C:\Users\Serge\AppData\LocalLow\Mozilla
2022-06-29 08:50 - 2022-03-12 12:11 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-29 08:49 - 2015-01-24 19:30 - 000000000 ___RD C:\Users\Serge\Téléchargements
2022-06-29 08:48 - 2017-12-09 17:17 - 000000980 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-29 08:48 - 2017-12-09 17:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-29 08:48 - 2017-12-09 17:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-29 08:45 - 2022-02-08 13:22 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Everything
2022-06-29 08:41 - 2021-05-03 00:42 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-06-28 20:03 - 2018-05-04 09:14 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Send Anywhere
2022-06-28 19:58 - 2015-01-31 17:59 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-06-28 19:57 - 2021-05-03 01:33 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-06-28 19:57 - 2011-05-25 08:22 - 000000000 ____D C:\ProgramData\NVIDIA
2022-06-28 19:56 - 2022-01-27 10:36 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-28 19:55 - 2019-12-07 11:03 - 001310720 _____ C:\Windows\system32\config\BBI
2022-06-28 19:54 - 2022-02-09 18:31 - 000000000 ____D C:\Users\Serge\AppData\Local\Everything
2022-06-27 18:01 - 2021-05-02 22:19 - 000000000 ____D C:\Users\Serge
2022-06-27 17:55 - 2020-09-27 09:55 - 000000000 ____D C:\ProgramData\Packages
2022-06-27 17:55 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2022-06-27 17:53 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-27 15:42 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2022-06-25 13:04 - 2020-09-27 09:54 - 000002746 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-24 11:46 - 2022-01-12 22:44 - 000002097 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-06-24 11:46 - 2022-01-08 16:13 - 000002109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-06-23 20:05 - 2019-05-05 19:24 - 000000000 ____D C:\Users\Serge\Desktop\Boules-bridge logiciel
2022-06-23 19:28 - 2020-09-27 09:51 - 000000000 ____D C:\Windows\system32\Drivers\wd
2022-06-23 09:08 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2022-06-23 08:38 - 2015-01-27 08:51 - 000000000 ____D C:\Users\Serge\AppData\Local\CrashDumps
2022-06-22 15:09 - 2018-09-22 12:54 - 000001024 ____H C:\AMTAG.BIN
2022-06-22 14:44 - 2021-05-03 01:28 - 000025587 _____ C:\Windows\diagerr.xml
2022-06-22 14:44 - 2021-05-03 01:28 - 000024750 _____ C:\Windows\diagwrn.xml
2022-06-20 21:17 - 2021-05-03 01:11 - 002021514 _____ C:\Windows\system32\PerfStringBackup.INI
2022-06-20 21:17 - 2019-12-07 16:49 - 000833050 _____ C:\Windows\system32\perfh00C.dat
2022-06-20 21:17 - 2019-12-07 16:49 - 000167780 _____ C:\Windows\system32\perfc00C.dat
2022-06-20 21:09 - 2021-05-03 00:40 - 000576552 _____ C:\Windows\system32\FNTCACHE.DAT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2022-06-20 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2022-06-20 21:04 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2022-06-20 20:21 - 2011-02-14 23:42 - 000415524 __RSH C:\bootmgr
2022-06-20 20:19 - 2021-05-03 00:48 - 002877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2022-06-20 18:46 - 2015-01-30 23:46 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2022-06-20 18:40 - 2015-01-25 11:13 - 000000000 ____D C:\Windows\system32\MRT
2022-06-20 18:19 - 2015-01-25 11:13 - 145918784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-06-20 04:01 - 2021-05-02 21:24 - 000000000 ____D C:\Windows\system32\msmq
2022-06-18 23:01 - 2020-08-28 10:33 - 000000000 ____D C:\Users\Marie-Laure\AppData\Local\Packages
2022-06-18 22:57 - 2021-05-02 22:19 - 000002467 _____ C:\Users\Marie-Laure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-18 22:55 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2022-06-18 22:51 - 2020-08-28 10:33 - 000000000 ____D C:\Users\Marie-Laure\AppData\Roaming\Adobe
2022-06-17 20:05 - 2018-03-28 01:05 - 000000000 ____D C:\Users\Serge\AppData\Local\Packages
2022-06-17 14:20 - 2020-09-04 19:19 - 000000000 ____D C:\Users\Serge\AppData\Roaming\Acronis
2022-06-17 09:40 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2022-06-08 14:50 - 2019-05-18 17:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2022-06-08 14:50 - 2019-05-18 17:20 - 000000000 ____D C:\Program Files\KMSpico
2022-06-08 13:31 - 2022-01-28 22:05 - 000000000 ____D C:\Windows\system32\Tasks\HardDiskSentinel
2022-06-08 13:31 - 2021-05-03 09:30 - 000000000 ____D C:\Windows\system32\Tasks\Agent Activation Runtime
2022-06-06 18:53 - 2019-02-22 20:26 - 000001445 _____ C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-06-06 14:24 - 2019-03-07 12:43 - 000000502 _____ C:\Users\Serge\printrunconf.ini~bak
2022-06-06 14:24 - 2019-03-07 12:43 - 000000502 _____ C:\Users\Serge\printrunconf.ini
2022-06-04 18:04 - 2022-01-28 19:44 - 000000000 ____D C:\Program Files (x86)\Hard Disk Sentinel
2022-06-03 23:58 - 2021-12-08 14:55 - 000000000 ____D C:\Program Files\Recuva
2022-06-02 19:54 - 2021-05-02 22:19 - 000002457 _____ C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-01 18:39 - 2015-11-14 11:52 - 000000000 ____D C:\Users\Serge\AppData\Roaming\FileZilla
==================== Fichiers à la racine de certains dossiers ========
2018-09-22 10:14 - 2018-09-22 10:18 - 503043688 _____ () C:\Users\Serge\AppData\Local\AcronisTrueImage2016_6595.exe
2015-01-29 00:10 - 2015-01-29 00:10 - 000000017 _____ () C:\Users\Serge\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================