Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 13-06-2022
Exécuté par brigitte (administrateur) sur LAPTOP-FSGDUSER (Acer Aspire ES1-523) (14-06-2022 12:52:42)
Exécuté depuis C:\Users\brigitte\Downloads
Profils chargés: brigitte
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1741 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe ->) (Acer Incorporated -> Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files\Acer\Acer Quick Access\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(C:\Program Files\Acer\Acer Quick Access\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(C:\Users\brigitte\Downloads\MediaCreationTool21H2.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\$Windows.~WS\Sources\SetupHost.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\brigitte\Downloads\MediaCreationTool21H2.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
(services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(svchost.exe ->) (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Amundsen\2.1.16258\awc.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(svchost.exe ->) (Acer Incorporated -> Acer) C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (SweetLabs Inc -> SweetLabs, Inc) C:\Users\brigitte\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16419072 2016-02-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-06] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\Run: [MicrosoftEdgeAutoLaunch_36F3B0EEB40F54F7B56584BE26375E95] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595192 2022-06-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\MountPoints2: {228894b6-a1ef-11ec-9e1d-1c3947fbf842} - "E:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\EPSON XP-312 313 315 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMBLFE.DLL [179712 2013-10-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [Fichier non signé]
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A755608-919C-4217-880C-DD85AAC8768E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {0A872849-FF61-4FC1-A734-42D3528935D1} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [472992 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {1BD0354E-750A-4CB9-87F9-994610F8AE1F} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated)
Task: {2D351B4F-FBA2-4684-A77D-9C3F5205229F} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {3FD56C9F-D4B0-4E43-8C86-C897FCEC44EA} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2766240 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {40AA1BF8-3DF1-4290-8A19-A291C92BA684} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {42997FBC-0172-4462-899E-25823B2ECC2A} - System32\Tasks\EPSON XP-312 313 315 Series Update {CFE4E473-BEFF-477F-8776-7F3E20DBF02D} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {4E57940C-72E4-4090-BA81-021E14F2D745} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {66B3285C-ADAB-4A63-AD79-1023A31A0E31} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {6D125945-D710-4AA0-BF8F-5AE8D414A3D9} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D7EB6AA-2EEC-4350-A3A8-0A2E752D1CC1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6E1938A0-F5DA-4D2C-B121-54133553E1E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6EEE0087-8EF4-4049-9091-CD55A97D6A8B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {79003D2F-4C28-4D40-92F2-97CD1C29191A} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {88CB0642-9AC1-4F92-B48D-D9CCEDACB07C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {B8D4C6EE-9B92-48E8-AEB4-27DF984A2F01} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF76E6FA-20CC-46E5-8294-96100F3618DD} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer)
Task: {C6523C31-DC99-4D3C-BF25-0AA3F2799ACA} - System32\Tasks\App Explorer => C:\Users\brigitte\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7887392 2022-04-23] (SweetLabs Inc -> SweetLabs, Inc) <==== ATTENTION
Task: {C7133267-DCB3-4A3D-A976-B6AA161DFDC4} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [421792 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {C79DF7D5-13D4-4FF4-94B6-6027A535195B} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {CFE4E473-BEFF-477F-8776-7F3E20DBF02D} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {CC29D279-0056-4D53-9188-EC5E556CEA8C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {CE9562DF-34E5-4073-95EC-96CBD164CD0D} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {E7CE31AC-E513-4239-B705-C2D14616AB5C} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296 2014-03-13] (Acer Incorporated -> TODO:)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {CFE4E473-BEFF-477F-8776-7F3E20DBF02D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {CFE4E473-BEFF-477F-8776-7F3E20DBF02D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{CFE4E473-BEFF-477F-8776-7F3E20DBF02D} /F:UpdateWORKGROUP\LAPTOP-FSGDUSER$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{6a5490a0-67ea-4153-aa76-f42780e5ab6d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bd18bea0-b0c9-455f-97c7-d83b83668a81}: [DhcpNameServer] 172.20.10.1
Edge:
=======
DownloadDir: C:\Users\brigitte\Downloads
Edge Notifications: HKU\S-1-5-21-1010319878-438117629-760683053-1001 -> hxxps://sciencepost.fr
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2021-09-27]
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\brigitte\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-14]
Edge DownloadDir: Default -> C:\Users\brigitte\Downloads
Edge Notifications: Default -> hxxps://sciencepost.fr
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\brigitte\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-06-07]
FireFox:
========
FF DefaultProfile: 6cg6tre3.default-1615639269383
FF ProfilePath: C:\Users\brigitte\AppData\Roaming\Mozilla\Firefox\Profiles\6cg6tre3.default-1615639269383 [2022-06-14]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\brigitte\AppData\Roaming\Mozilla\Firefox\Profiles\6cg6tre3.default-1615639269383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-13]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2016-09-08] []
FF Extension: (Français Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-fr@firefox.mozilla.org [2016-09-08] []
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2016-09-08] []
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-12] (Microsoft Corporation -> Microsoft Corporation)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278616 2017-03-20] (Acer Incorporated -> Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [440224 2016-07-29] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [481696 2016-07-29] (Acer Incorporated -> Acer Incorporated)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [295840 2016-05-28] (Acer Incorporated -> acer)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 Kb9xI2c; C:\WINDOWS\System32\drivers\Kb9xI2c.sys [37888 2015-05-19] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated -> Acer Incorporated)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated -> Acer Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-14 12:52 - 2022-06-14 13:11 - 000018674 _____ C:\Users\brigitte\Downloads\FRST.txt
2022-06-13 15:52 - 2022-06-14 13:07 - 000000000 ____D C:\FRST
2022-06-13 15:51 - 2022-06-13 15:52 - 002368000 _____ (Farbar) C:\Users\brigitte\Downloads\FRST64.exe
2022-06-13 15:48 - 2022-06-14 13:06 - 000000000 ____D C:\ESD
2022-06-13 15:43 - 2022-06-13 15:43 - 000000000 ___HD C:\$Windows.~WS
2022-06-13 15:43 - 2022-06-13 15:43 - 000000000 ____D C:\$WINDOWS.~BT
2022-06-13 15:25 - 2022-06-13 15:38 - 000000000 ____D C:\Users\brigitte\Desktop\SANDISK
2022-06-13 15:12 - 2022-06-13 15:12 - 000000344 _____ C:\Users\brigitte\Desktop\Windows Defender impossible de mettre à jour.URL
2022-06-13 13:58 - 2022-06-13 14:06 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-09 12:48 - 2022-06-09 12:48 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-09 12:47 - 2022-06-09 12:47 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-09 12:47 - 2022-06-09 12:47 - 000011811 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-09 12:45 - 2022-06-09 12:45 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-09 12:44 - 2022-06-09 12:44 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-09 11:31 - 2022-06-09 11:31 - 000000000 ___HD C:\$WinREAgent
2022-05-27 13:26 - 2022-06-09 13:15 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-27 12:51 - 2022-05-27 12:51 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-27 12:50 - 2022-05-27 12:50 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-27 12:21 - 2022-05-27 12:21 - 000000000 ___HD C:\$SysReset
2022-05-25 11:27 - 2022-05-25 11:27 - 000000000 _____ C:\WINDOWS\Minidump\052522-91593-01.dmp
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-14 13:16 - 2021-09-27 17:38 - 000001890 _____ C:\WINDOWS\diagwrn.xml
2022-06-14 13:16 - 2021-09-27 17:38 - 000001890 _____ C:\WINDOWS\diagerr.xml
2022-06-14 13:16 - 2021-09-26 13:12 - 000000000 ___DC C:\WINDOWS\Panther
2022-06-14 13:15 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-14 13:09 - 2018-06-10 09:12 - 000000000 ____D C:\Users\brigitte\AppData\Local\Host App Service
2022-06-14 12:47 - 2022-02-15 17:07 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-14 12:46 - 2017-07-12 09:18 - 000000000 ____D C:\Users\brigitte\AppData\LocalLow\Mozilla
2022-06-14 12:39 - 2021-09-27 16:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-13 15:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-13 14:30 - 2017-12-30 22:01 - 000000000 ____D C:\Users\brigitte\AppData\Local\Packages
2022-06-13 14:30 - 2016-09-08 03:14 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-06-13 14:29 - 2016-09-08 03:38 - 000000000 ____D C:\ProgramData\CyberLink
2022-06-13 14:28 - 2016-09-08 03:38 - 000000000 ____D C:\Users\Public\CyberLink
2022-06-13 14:21 - 2017-08-30 11:04 - 000000000 ____D C:\Users\brigitte\AppData\Local\IIIQF
2022-06-13 14:21 - 2017-08-30 11:04 - 000000000 ____D C:\ProgramData\~0
2022-06-13 14:06 - 2021-09-27 17:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-13 14:06 - 2021-09-27 16:52 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-13 14:06 - 2016-09-08 03:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-13 14:05 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-06-13 14:04 - 2017-09-01 16:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2022-06-13 14:01 - 2021-09-27 17:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-13 14:01 - 2016-09-08 03:34 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-13 13:48 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-13 13:37 - 2020-03-22 19:23 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-13 13:37 - 2020-03-22 19:23 - 000002284 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-13 12:50 - 2022-01-24 13:02 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1010319878-438117629-760683053-1001
2022-06-13 12:50 - 2021-09-27 17:48 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1010319878-438117629-760683053-1001
2022-06-13 12:50 - 2021-09-27 17:02 - 000002430 _____ C:\Users\brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-13 12:44 - 2018-12-28 13:34 - 000000000 ____D C:\Users\brigitte\AppData\Local\D3DSCache
2022-06-09 16:36 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-09 13:37 - 2017-03-06 19:48 - 000000000 ____D C:\Users\brigitte\AppData\Local\ElevatedDiagnostics
2022-06-09 13:15 - 2019-12-07 16:49 - 000792842 _____ C:\WINDOWS\system32\perfh00C.dat
2022-06-09 13:15 - 2019-12-07 16:49 - 000149972 _____ C:\WINDOWS\system32\perfc00C.dat
2022-06-09 13:10 - 2021-09-27 16:52 - 000434352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-09 13:05 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-09 13:02 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-09 12:43 - 2021-09-27 16:58 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-09 12:06 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2022-05-30 17:55 - 2016-09-08 01:12 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-26 15:45 - 2017-02-18 13:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-26 15:44 - 2017-02-18 13:49 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-25 11:38 - 2021-09-27 17:02 - 000000000 ____D C:\Users\brigitte
2022-05-25 11:27 - 2022-02-23 08:08 - 000000000 ____D C:\WINDOWS\Minidump
2022-05-25 11:27 - 2022-02-23 08:07 - 590011899 _____ C:\WINDOWS\MEMORY.DMP
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par brigitte (administrateur) sur LAPTOP-FSGDUSER (Acer Aspire ES1-523) (14-06-2022 12:52:42)
Exécuté depuis C:\Users\brigitte\Downloads
Profils chargés: brigitte
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1741 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe ->) (Acer Incorporated -> Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files\Acer\Acer Quick Access\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(C:\Program Files\Acer\Acer Quick Access\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(C:\Users\brigitte\Downloads\MediaCreationTool21H2.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\$Windows.~WS\Sources\SetupHost.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\brigitte\Downloads\MediaCreationTool21H2.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
(services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(svchost.exe ->) (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Amundsen\2.1.16258\awc.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(svchost.exe ->) (Acer Incorporated -> Acer) C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (SweetLabs Inc -> SweetLabs, Inc) C:\Users\brigitte\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16419072 2016-02-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-06] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\Run: [MicrosoftEdgeAutoLaunch_36F3B0EEB40F54F7B56584BE26375E95] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595192 2022-06-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1010319878-438117629-760683053-1001\...\MountPoints2: {228894b6-a1ef-11ec-9e1d-1c3947fbf842} - "E:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\EPSON XP-312 313 315 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMBLFE.DLL [179712 2013-10-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [Fichier non signé]
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A755608-919C-4217-880C-DD85AAC8768E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {0A872849-FF61-4FC1-A734-42D3528935D1} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [472992 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {1BD0354E-750A-4CB9-87F9-994610F8AE1F} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated)
Task: {2D351B4F-FBA2-4684-A77D-9C3F5205229F} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {3FD56C9F-D4B0-4E43-8C86-C897FCEC44EA} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2766240 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {40AA1BF8-3DF1-4290-8A19-A291C92BA684} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {42997FBC-0172-4462-899E-25823B2ECC2A} - System32\Tasks\EPSON XP-312 313 315 Series Update {CFE4E473-BEFF-477F-8776-7F3E20DBF02D} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {4E57940C-72E4-4090-BA81-021E14F2D745} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {66B3285C-ADAB-4A63-AD79-1023A31A0E31} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {6D125945-D710-4AA0-BF8F-5AE8D414A3D9} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D7EB6AA-2EEC-4350-A3A8-0A2E752D1CC1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6E1938A0-F5DA-4D2C-B121-54133553E1E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6EEE0087-8EF4-4049-9091-CD55A97D6A8B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {79003D2F-4C28-4D40-92F2-97CD1C29191A} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {88CB0642-9AC1-4F92-B48D-D9CCEDACB07C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {B8D4C6EE-9B92-48E8-AEB4-27DF984A2F01} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF76E6FA-20CC-46E5-8294-96100F3618DD} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer)
Task: {C6523C31-DC99-4D3C-BF25-0AA3F2799ACA} - System32\Tasks\App Explorer => C:\Users\brigitte\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7887392 2022-04-23] (SweetLabs Inc -> SweetLabs, Inc) <==== ATTENTION
Task: {C7133267-DCB3-4A3D-A976-B6AA161DFDC4} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [421792 2016-07-29] (Acer Incorporated -> Acer Incorporated)
Task: {C79DF7D5-13D4-4FF4-94B6-6027A535195B} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {CFE4E473-BEFF-477F-8776-7F3E20DBF02D} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {CC29D279-0056-4D53-9188-EC5E556CEA8C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {CE9562DF-34E5-4073-95EC-96CBD164CD0D} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {E7CE31AC-E513-4239-B705-C2D14616AB5C} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296 2014-03-13] (Acer Incorporated -> TODO:
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {CFE4E473-BEFF-477F-8776-7F3E20DBF02D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {CFE4E473-BEFF-477F-8776-7F3E20DBF02D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{CFE4E473-BEFF-477F-8776-7F3E20DBF02D} /F:UpdateWORKGROUP\LAPTOP-FSGDUSER$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{6a5490a0-67ea-4153-aa76-f42780e5ab6d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bd18bea0-b0c9-455f-97c7-d83b83668a81}: [DhcpNameServer] 172.20.10.1
Edge:
=======
DownloadDir: C:\Users\brigitte\Downloads
Edge Notifications: HKU\S-1-5-21-1010319878-438117629-760683053-1001 -> hxxps://sciencepost.fr
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2021-09-27]
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\brigitte\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-14]
Edge DownloadDir: Default -> C:\Users\brigitte\Downloads
Edge Notifications: Default -> hxxps://sciencepost.fr
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\brigitte\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-06-07]
FireFox:
========
FF DefaultProfile: 6cg6tre3.default-1615639269383
FF ProfilePath: C:\Users\brigitte\AppData\Roaming\Mozilla\Firefox\Profiles\6cg6tre3.default-1615639269383 [2022-06-14]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\brigitte\AppData\Roaming\Mozilla\Firefox\Profiles\6cg6tre3.default-1615639269383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-13]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2016-09-08] []
FF Extension: (Français Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-fr@firefox.mozilla.org [2016-09-08] []
FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2016-09-08] []
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-12] (Microsoft Corporation -> Microsoft Corporation)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278616 2017-03-20] (Acer Incorporated -> Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-30] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [440224 2016-07-29] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [481696 2016-07-29] (Acer Incorporated -> Acer Incorporated)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [295840 2016-05-28] (Acer Incorporated -> acer)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 Kb9xI2c; C:\WINDOWS\System32\drivers\Kb9xI2c.sys [37888 2015-05-19] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated -> Acer Incorporated)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated -> Acer Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-14 12:52 - 2022-06-14 13:11 - 000018674 _____ C:\Users\brigitte\Downloads\FRST.txt
2022-06-13 15:52 - 2022-06-14 13:07 - 000000000 ____D C:\FRST
2022-06-13 15:51 - 2022-06-13 15:52 - 002368000 _____ (Farbar) C:\Users\brigitte\Downloads\FRST64.exe
2022-06-13 15:48 - 2022-06-14 13:06 - 000000000 ____D C:\ESD
2022-06-13 15:43 - 2022-06-13 15:43 - 000000000 ___HD C:\$Windows.~WS
2022-06-13 15:43 - 2022-06-13 15:43 - 000000000 ____D C:\$WINDOWS.~BT
2022-06-13 15:25 - 2022-06-13 15:38 - 000000000 ____D C:\Users\brigitte\Desktop\SANDISK
2022-06-13 15:12 - 2022-06-13 15:12 - 000000344 _____ C:\Users\brigitte\Desktop\Windows Defender impossible de mettre à jour.URL
2022-06-13 13:58 - 2022-06-13 14:06 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-09 12:48 - 2022-06-09 12:48 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-09 12:47 - 2022-06-09 12:47 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-09 12:47 - 2022-06-09 12:47 - 000011811 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-09 12:45 - 2022-06-09 12:45 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-09 12:44 - 2022-06-09 12:44 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-09 11:31 - 2022-06-09 11:31 - 000000000 ___HD C:\$WinREAgent
2022-05-27 13:26 - 2022-06-09 13:15 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-27 12:51 - 2022-05-27 12:51 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-27 12:50 - 2022-05-27 12:50 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-27 12:21 - 2022-05-27 12:21 - 000000000 ___HD C:\$SysReset
2022-05-25 11:27 - 2022-05-25 11:27 - 000000000 _____ C:\WINDOWS\Minidump\052522-91593-01.dmp
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-06-14 13:16 - 2021-09-27 17:38 - 000001890 _____ C:\WINDOWS\diagwrn.xml
2022-06-14 13:16 - 2021-09-27 17:38 - 000001890 _____ C:\WINDOWS\diagerr.xml
2022-06-14 13:16 - 2021-09-26 13:12 - 000000000 ___DC C:\WINDOWS\Panther
2022-06-14 13:15 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-14 13:09 - 2018-06-10 09:12 - 000000000 ____D C:\Users\brigitte\AppData\Local\Host App Service
2022-06-14 12:47 - 2022-02-15 17:07 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-14 12:46 - 2017-07-12 09:18 - 000000000 ____D C:\Users\brigitte\AppData\LocalLow\Mozilla
2022-06-14 12:39 - 2021-09-27 16:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-13 15:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-13 14:30 - 2017-12-30 22:01 - 000000000 ____D C:\Users\brigitte\AppData\Local\Packages
2022-06-13 14:30 - 2016-09-08 03:14 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-06-13 14:29 - 2016-09-08 03:38 - 000000000 ____D C:\ProgramData\CyberLink
2022-06-13 14:28 - 2016-09-08 03:38 - 000000000 ____D C:\Users\Public\CyberLink
2022-06-13 14:21 - 2017-08-30 11:04 - 000000000 ____D C:\Users\brigitte\AppData\Local\IIIQF
2022-06-13 14:21 - 2017-08-30 11:04 - 000000000 ____D C:\ProgramData\~0
2022-06-13 14:06 - 2021-09-27 17:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-13 14:06 - 2021-09-27 16:52 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-13 14:06 - 2016-09-08 03:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-13 14:05 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-06-13 14:04 - 2017-09-01 16:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2022-06-13 14:01 - 2021-09-27 17:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-13 14:01 - 2016-09-08 03:34 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-13 13:48 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-13 13:37 - 2020-03-22 19:23 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-13 13:37 - 2020-03-22 19:23 - 000002284 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-13 12:50 - 2022-01-24 13:02 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1010319878-438117629-760683053-1001
2022-06-13 12:50 - 2021-09-27 17:48 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1010319878-438117629-760683053-1001
2022-06-13 12:50 - 2021-09-27 17:02 - 000002430 _____ C:\Users\brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-13 12:44 - 2018-12-28 13:34 - 000000000 ____D C:\Users\brigitte\AppData\Local\D3DSCache
2022-06-09 16:36 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-09 13:37 - 2017-03-06 19:48 - 000000000 ____D C:\Users\brigitte\AppData\Local\ElevatedDiagnostics
2022-06-09 13:15 - 2019-12-07 16:49 - 000792842 _____ C:\WINDOWS\system32\perfh00C.dat
2022-06-09 13:15 - 2019-12-07 16:49 - 000149972 _____ C:\WINDOWS\system32\perfc00C.dat
2022-06-09 13:10 - 2021-09-27 16:52 - 000434352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-09 13:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-09 13:05 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-09 13:02 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-09 12:43 - 2021-09-27 16:58 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-09 12:06 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2022-05-30 17:55 - 2016-09-08 01:12 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-27 13:13 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-26 15:45 - 2017-02-18 13:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-26 15:44 - 2017-02-18 13:49 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-25 11:38 - 2021-09-27 17:02 - 000000000 ____D C:\Users\brigitte
2022-05-25 11:27 - 2022-02-23 08:08 - 000000000 ____D C:\WINDOWS\Minidump
2022-05-25 11:27 - 2022-02-23 08:07 - 590011899 _____ C:\WINDOWS\MEMORY.DMP
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================