cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2022
Exécuté par Alain (administrateur) sur DESKTOP-NDVG9QH (Gigabyte Technology Co., Ltd. H81M-S2H) (02-06-2022 10:48:17)
Exécuté depuis C:\Users\Alain\Desktop
Profils chargés: Alain
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1706 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(ABBYY Production LLC -> ABBYY Production LLC.) C:\Program Files (x86)\ABBYY FineReader 12 Sprint\Bonus.Sprint.ScreenshotReader.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(cmd.exe ->) (ACLAP -> Node.js) C:\Program Files\net.downloadhelper.coapp\bin\net.downloadhelper.coapp-win-64.exe
(explorer.exe ->) (Antonio Da Cruz) [Fichier non signé] C:\Program Files\photofiltre\PhotoFiltre.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <12>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(services.exe ->) () [Fichier non signé] C:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe
(services.exe ->) (ABBYY Production LLC -> ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12 Sprint\NetworkLicenseServer.exe
(services.exe ->) (Apache Software Foundation) [Fichier non signé] C:\wamp\bin\apache\apache2.4.9\bin\httpd.exe <2>
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.11411.0_x64__8wekyb3d8bbwe\Music.UI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1057408 2012-06-08] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Pas de fichier)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-03-28] (Adobe Inc. -> )
HKLM-x32\...\Run: [Bonus.SSR.Sprint12] => C:\Program Files (x86)\ABBYY FineReader 12 Sprint\Bonus.Sprint.ScreenshotReader.exe [978024 2018-06-14] (ABBYY Production LLC -> ABBYY Production LLC.)
HKU\S-1-5-21-3676109604-2770054248-4226630971-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35888256 2022-03-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3676109604-2770054248-4226630971-1001\...\Run: [ABBYY Screenshot Reader Bonus] => "C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint\Bonus.ScreenshotReader.exe" -autorun (Pas de fichier)
HKU\S-1-5-21-3676109604-2770054248-4226630971-1001\...\Run: [Bonus.SSR.FR15] => "C:\Program Files (x86)\ABBYY FineReader 15\screenshotreader.exe" /autorun (Pas de fichier)
HKU\S-1-5-21-3676109604-2770054248-4226630971-1001\...\Run: [MicrosoftEdgeAutoLaunch_BB091E1C7C1412A0B7256BB30DA07242] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3547064 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3676109604-2770054248-4226630971-1001\...\MountPoints2: {0cb7ce85-8b27-11ec-8db4-1c1b0d149be4} - "G:\OInstall.exe"
HKU\S-1-5-18\...\Run: [] => [X]
HKLM\...\Windows x64\Print Processors\Canon MG2500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBX.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series: C:\Windows\system32\CNMLMBX.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series XPS: C:\Windows\system32\CNMXLMBX.DLL [393728 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.63\Installer\chrmstp.exe [2022-05-31] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A13DE6AB-50FE-4A51-99CA-85532BA0B984}] -> "C:\Program Files (x86)\ABBYY FineReader 15\ScreenshotReader.exe" -install -setAutorun:2
IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll
IFEO\SppExtComObj.Exe: [VerifierDlls] SppExtComObjHook.dll

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {04F59348-8FFB-463A-8CE3-03CFEC530E80} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {13067A5C-E999-42D8-9B62-A31659AF4F95} - System32\Tasks\infatica_p2b_del => C:\Program Files (x86)\Infatica P2B\unins000.exe [1931781 2022-02-28] () [Fichier non signé]
Task: {1C3DC7C5-607C-4738-8069-81117DAD1872} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-03-10] (Piriform Software Ltd -> Piriform)
Task: {1FD93A12-93A2-490A-88F5-1C7FAE75FAC6} - System32\Tasks\CCleanerSkipUAC - Alain => C:\Program Files\CCleaner\CCleaner.exe [30053504 2022-03-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2009915C-5949-4DBC-B97E-533A71CAEFFE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2097D49E-C663-41AF-B834-78B004E06E68} - System32\Tasks\infatica_p2b => C:\Program Files (x86)\Infatica P2B\infatica-service-app.exe [20072 2021-12-04] (Infatica pte ltd -> )
Task: {3040060D-7EC0-468D-AF0C-50A1ABEC6635} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {357151F7-98EB-463E-A25F-D73111CA1A29} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {360D59A6-B33A-44F2-9BD6-4852D7A11572} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21856112 2021-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {58E2E21D-F97B-40CE-A0B5-AC3E8C877618} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [113528 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {62556ABB-2018-4FC2-9A7C-0A6C152494CA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {677CFC4D-5B08-43CE-9CCC-B00FEE4CDECB} - System32\Tasks\GoogleUpdateTaskMachineCore{21DA0181-7B50-4FAD-AB4C-252D8C5B2989} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-11] (Google LLC -> Google LLC)
Task: {7CAE80D6-92F2-4896-9297-F1B66E386312} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [5439408 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {864F15EA-87E4-4175-A391-ED258E03EBEB} - System32\Tasks\GoogleUpdateTaskMachineUA{C5CDB84B-6C52-4BC6-A79C-D9ED4D486526} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-11] (Google LLC -> Google LLC)
Task: {8C8F7DA0-4945-460D-A1F3-425E215947CA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9CBEAF94-7703-4A8D-830C-57367E2CD470} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {9EE4A842-9D7A-46A9-BA8C-24349135CC27} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [5439408 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {A517C44E-BD22-4909-AD5C-0190C87B0742} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [113528 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D20D4F50-A46F-4A23-AFB3-0B0E175AF51A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21856112 2021-08-13] (Microsoft Corporation -> Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{c143d13a-b67d-47ad-b14e-362b6ddb1557}: [DhcpNameServer] 212.27.40.240 212.27.40.241

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Alain\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-02]

FireFox:
========
FF DefaultProfile: yz07n4m4.default
FF ProfilePath: C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\3xo1ctae.default-release-1 [2022-03-29]
FF ProfilePath: C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\yz07n4m4.default [2022-02-12]
FF ProfilePath: C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\byhkp4jw.default-release [2022-06-02]
FF Extension: (visitedlinkenabler) - C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\byhkp4jw.default-release\Extensions\jid1-yDnsmkBoiRtgNA@jetpack.xpi [2022-02-12]
FF Extension: (Video DownloadHelper) - C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\byhkp4jw.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-02-15]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Alain\AppData\Roaming\Mozilla\Firefox\Profiles\byhkp4jw.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-02-17]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default [2022-06-02]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxps://www.google.fr/"
CHR Extension: (Rose) - C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default\Extensions\aobcgffnbkbipbflopponndoiommhnch [2022-02-12]
CHR Extension: (uBlock Origin) - C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-04-08]
CHR Extension: (Video DownloadHelper) - C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2022-02-16]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-11]

Brave:
=======
BRA Profile: C:\Users\Alain\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-02-12]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ABBYY.Licensing.FineReaderSprint.Standard.12.0; C:\Program Files (x86)\ABBYY FineReader 12 Sprint\NetworkLicenseServer.exe [953472 2018-05-30] (ABBYY Production LLC -> ABBYY Production LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9162144 2021-08-13] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2359424 2022-01-21] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R3 wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [24576 2014-05-01] (Apache Software Foundation) [Fichier non signé]
R3 wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [12942848 2014-05-01] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-02 10:48 - 2022-06-02 10:48 - 000019124 _____ C:\Users\Alain\Desktop\FRST.txt
2022-06-02 10:45 - 2022-06-02 10:45 - 000000000 ____D C:\Users\Alain\Desktop\FRST-OlderVersion
2022-06-02 10:30 - 2022-06-02 10:30 - 000000027 _____ C:\Users\Alain\Downloads\Fixlist.txt
2022-06-01 17:53 - 2022-06-01 18:27 - 1330891234 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen.mp4
2022-06-01 17:53 - 2022-06-01 18:16 - 562985964 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen (5).mp4
2022-06-01 17:53 - 2022-06-01 18:16 - 545192625 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen (1).mp4
2022-06-01 15:47 - 2022-06-02 10:46 - 000000992 _____ C:\Users\Alain\Desktop\Fixlog.txt
2022-06-01 15:46 - 2022-06-02 10:48 - 000000000 ____D C:\FRST
2022-06-01 15:39 - 2022-06-02 10:45 - 002368000 _____ (Farbar) C:\Users\Alain\Desktop\FRST64.exe
2022-06-01 15:11 - 2022-06-01 15:19 - 560690572 _____ C:\Users\Alain\Downloads\Sono_fotogenico_1980.far.mkv
2022-05-31 22:08 - 2022-06-01 15:43 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-05-31 15:30 - 2022-05-31 17:23 - 000222765 _____ C:\Users\Alain\Documents\télé 7 jours 1977.wlmp
2022-05-27 17:04 - 2022-05-31 13:27 - 000000956 _____ C:\Users\Alain\Desktop\_act.txt
2022-05-26 17:51 - 2022-05-26 18:17 - 756842621 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen (4).mp4
2022-05-26 17:50 - 2022-05-26 18:17 - 831577497 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen (3).mp4
2022-05-26 17:43 - 2022-05-26 18:05 - 844567140 _____ C:\Users\Alain\Downloads\Résultats de recherche - madelen (2).mp4
2022-05-25 16:22 - 2022-05-25 16:23 - 001526916 _____ C:\Windows\Minidump\052522-4421-01.dmp
2022-05-21 18:10 - 2022-05-21 18:25 - 1124943340 _____ C:\Users\Alain\Downloads\1974 ET_AVEC_LES_OREILLES.mp4
2022-05-21 16:22 - 2022-05-21 16:40 - 1104533923 _____ C:\Users\Alain\Downloads\1973 Le.journal.intime.d.une.nymphomane.720p.BD.mp4
2022-05-13 22:37 - 2022-05-13 05:46 - 648231350 _____ C:\Users\Alain\Downloads\941115 Studio Gabriel.mp4
2022-05-13 22:36 - 2022-05-13 05:46 - 1365433774 _____ C:\Users\Alain\Downloads\941119 Chérie, j’ai un truc à te dire.mp4
2022-05-13 17:38 - 2022-05-13 17:39 - 000967428 _____ C:\Windows\Minidump\051322-4843-01.dmp
2022-05-13 14:45 - 2022-05-13 14:45 - 000011799 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-05-13 14:44 - 2022-05-13 14:44 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll
2022-05-13 14:44 - 2022-05-13 14:44 - 000093696 _____ C:\Windows\system32\Drivers\cimfs.sys
2022-05-13 14:35 - 2022-05-13 14:35 - 000000000 ___HD C:\$WinREAgent
2022-05-12 22:37 - 2022-05-12 22:37 - 000000000 ____D C:\Users\Alain\AppData\Roaming\Other
2022-05-12 22:37 - 2022-05-12 22:37 - 000000000 ____D C:\Users\Alain\AppData\Roaming\AMS Software
2022-05-12 22:36 - 2022-05-12 22:38 - 000000000 ____D C:\Program Files (x86)\PhotoGlory
2022-05-12 22:27 - 2022-05-12 22:47 - 1560184671 _____ C:\Users\Alain\Downloads\670312 Soirée électorale.mp4
2022-05-09 15:44 - 2022-05-09 15:44 - 001040036 _____ C:\Windows\Minidump\050922-4312-01.dmp

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-02 10:46 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-02 10:13 - 2022-02-13 23:35 - 000000000 ____D C:\Program Files\CCleaner
2022-06-02 10:13 - 2022-02-12 10:07 - 000000000 ____D C:\Users\Alain\AppData\LocalLow\Mozilla
2022-06-02 10:12 - 2022-02-11 10:22 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-06-02 09:56 - 2022-02-11 11:33 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-02 09:56 - 2022-02-11 10:47 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2022-06-02 09:56 - 2022-02-11 10:47 - 000000000 __SHD C:\Users\Alain\IntelGraphicsProfiles
2022-06-01 22:13 - 2022-02-12 10:07 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-01 22:13 - 2022-02-11 11:06 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3676109604-2770054248-4226630971-1001
2022-06-01 22:13 - 2022-02-11 10:44 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3676109604-2770054248-4226630971-1001
2022-06-01 22:13 - 2022-02-11 10:41 - 000002421 _____ C:\Users\Alain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-01 18:42 - 2022-02-11 11:46 - 000000000 ____D C:\Users\Alain\AppData\Roaming\vlc
2022-06-01 15:47 - 2022-02-11 10:28 - 001770906 _____ C:\Windows\system32\PerfStringBackup.INI
2022-06-01 15:47 - 2019-12-07 16:49 - 000791756 _____ C:\Windows\system32\perfh00C.dat
2022-06-01 15:47 - 2019-12-07 16:49 - 000149922 _____ C:\Windows\system32\perfc00C.dat
2022-06-01 15:47 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2022-06-01 15:43 - 2022-02-12 10:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-01 15:43 - 2022-02-11 10:22 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-01 15:43 - 2022-02-11 10:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-06-01 15:42 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2022-06-01 15:41 - 2022-02-12 12:17 - 000000000 ____D C:\Users\Alain\AppData\Roaming\dvdcss
2022-06-01 15:34 - 2022-02-12 20:10 - 000000000 ____D C:\Users\Alain\AppData\Roaming\FileZilla
2022-06-01 15:20 - 2022-02-11 16:34 - 000000000 ____D C:\Users\Alain\Documents\ConvertXToDVD
2022-05-31 23:39 - 2022-02-12 10:07 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-05-31 23:39 - 2022-02-12 10:07 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-05-31 22:06 - 2022-02-11 11:33 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-05-31 15:39 - 2022-02-18 01:00 - 000000000 ____D C:\Users\Alain\AppData\Local\CrashDumps
2022-05-31 15:29 - 2022-02-20 12:54 - 000000000 ____D C:\Users\Alain\Desktop\Captvty
2022-05-31 13:26 - 2022-03-22 18:16 - 000000070 _____ C:\Users\Alain\Desktop\_desc.txt
2022-05-31 10:17 - 2022-03-16 19:16 - 000000000 ____D C:\Film 3
2022-05-31 10:17 - 2022-02-22 16:33 - 000000000 ____D C:\ProgramData\DVD Shrink
2022-05-28 19:47 - 2022-02-14 15:13 - 000000000 ____D C:\Users\Alain\Downloads\Nouveautés
2022-05-26 12:05 - 2022-02-11 10:41 - 000000000 ____D C:\Users\Alain\AppData\Local\Packages
2022-05-25 20:09 - 2022-02-11 10:41 - 000000000 ____D C:\Users\Alain
2022-05-25 19:33 - 2022-02-12 20:52 - 000000000 ____D C:\Users\Alain\Documents\Livre cinéma regourd 2
2022-05-25 16:23 - 2022-02-28 17:37 - 000000000 ____D C:\Windows\Minidump
2022-05-25 16:22 - 2022-02-28 17:37 - 731957800 _____ C:\Windows\MEMORY.DMP
2022-05-24 23:10 - 2022-02-13 23:23 - 000237111 ____H C:\Users\Alain\Desktop\~WRL3760.tmp
2022-05-24 22:07 - 2022-02-16 15:07 - 000000000 ____D C:\Users\Alain\Downloads\000 telefilm INA
2022-05-21 23:31 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-05-21 23:31 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2022-05-21 22:26 - 2022-02-11 10:22 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-05-20 10:43 - 2022-02-11 10:41 - 000000000 ____D C:\Users\Alain\AppData\Local\VirtualStore
2022-05-17 15:15 - 2022-02-16 15:01 - 000000000 ____D C:\Users\Alain\Documents\Livre
2022-05-17 09:05 - 2022-02-13 23:35 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2022-05-14 15:26 - 2022-02-17 23:33 - 000000000 ____D C:\Users\Alain\dwhelper
2022-05-13 15:05 - 2022-02-13 23:23 - 000226348 ____H C:\Users\Alain\Desktop\~WRL2491.tmp
2022-05-13 15:00 - 2022-02-11 10:22 - 000472928 _____ C:\Windows\system32\FNTCACHE.DAT
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2022-05-13 14:59 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-13 14:47 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2022-05-13 14:34 - 2022-02-11 10:46 - 000000000 ____D C:\Windows\system32\MRT
2022-05-13 12:28 - 2022-02-11 10:46 - 145501456 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-05-12 11:51 - 2022-02-18 23:42 - 000000000 ____D C:\Users\Alain\AppData\Roaming\avidemux
2022-05-09 12:09 - 2022-02-13 23:23 - 000220879 ____H C:\Users\Alain\Desktop\~WRL0742.tmp
2022-05-07 15:36 - 2022-03-22 12:29 - 000000000 ____D C:\Users\Alain\Downloads\Vénus et Apollon

==================== Fichiers à la racine de certains dossiers ========

2022-02-11 16:34 - 2022-02-21 14:31 - 000099384 _____ () C:\Users\Alain\AppData\Roaming\inst.exe
2022-02-11 16:34 - 2022-02-21 14:31 - 000007859 _____ () C:\Users\Alain\AppData\Roaming\pcouffin.cat
2022-02-11 16:34 - 2022-02-21 14:31 - 000001167 _____ () C:\Users\Alain\AppData\Roaming\pcouffin.inf
2022-02-11 16:34 - 2022-02-21 14:31 - 000000055 _____ () C:\Users\Alain\AppData\Roaming\pcouffin.log
2022-02-11 16:34 - 2022-02-21 14:31 - 000082816 _____ (VSO Software) C:\Users\Alain\AppData\Roaming\pcouffin.sys
2022-02-14 10:21 - 2022-02-14 10:21 - 000007605 _____ () C:\Users\Alain\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================

Publicité


Signaler le contenu de ce document

Publicité