Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 15-08-2022
Exécuté par MCS (administrateur) sur VIVOSALON (ASUSTeK COMPUTER INC. X705UA) (21-08-2022 19:10:09)
Exécuté depuis D:\A PAPIERS MCS\Santé\A MARC\2022
Profils chargés: MCS
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1889 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MpCopyAccelerator.exe
(D:\Program Files\Everything\Everything.exe ->) (NICOLAS_COOLMAN -> Nicolas Coolman) [Fichier non signé] D:\Download\ZHPSuite.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxEM.exe
(explorer.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (anytxt.net) [Fichier non signé] D:\Program Files\AnyTXT Searcher\ATGUI.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\61.0.3.0\crashpad_handler.exe <4>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21>
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\61.0.3.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Notepad++ -> Don HO don.h@free.fr) D:\Program Files (x86)\Notepad++\notepad++.exe
(explorer.exe ->) (voidtools -> voidtools) D:\Program Files\Everything\Everything.exe <2>
(services.exe ->) (anytxt.net) [Fichier non signé] D:\Program Files\AnyTXT Searcher\ATService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (CyberGhost S.R.L. -> CyberGhost S.R.L.) C:\Program Files\CyberGhost 8\Dashboard.Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82419944dda69b12\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_3de4831720bb2934\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_03b951be52cd2aa9\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3ad50285c3647623\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3ad50285c3647623\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Jiangmen Ruili Software Co., Ltd. -> Rene.E Laboratory) D:\Program Files (x86)\Rene.E Laboratory\Becca\x64\bcservice.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\NisSrv.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) D:\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) D:\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (INTEL CORP) C:\Program Files\WindowsApps\appup.intelgraphicsexperience_1.100.3408.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Everything] => D:\Program Files\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2087624067-1276621751-448620844-1025\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\61.0.3.0\GoogleDriveFS.exe [51041096 2022-07-18] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2087624067-1276621751-448620844-1025\...\Run: [MicrosoftEdgeAutoLaunch_ABB67434869FA037A8CD10F36FC5FC42] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3827128 2022-08-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [54944 2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-04] (Google LLC -> Google LLC)
Startup: C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LastPass.LastPassRemove.bat [2022-06-05] () [Fichier non signé]
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {11C4A33E-F55D-47C0-B673-CF214321BD1C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {1255FAEB-5CFF-4816-9191-5374F381F860} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {13F5E192-1BA0-4367-A0A4-61AAC8EEB880} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {176237A4-85C0-4005-88CD-235E5D223032} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8406496 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {2146001B-3081-4A43-8C28-07C6625A6495} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {24616230-D817-4D26-B154-175C83D50826} - System32\Tasks\CrystalDiskInfo => C:\Program Files\CrystalDiskInfo\DiskInfo64.exe [2781752 2021-02-23] (Noriyuki Miyazaki -> Crystal Dew World)
Task: {25825157-2581-427C-BCF2-F65689F55EAD} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {29EAEC92-9CEE-4F51-9DAF-CC5FB5FFECC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3E71B669-8223-4AE1-B76A-BA16E89EF07B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {442583A2-F992-4BE6-874E-B143B3279284} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {4B543499-602A-4ECE-A389-E87751C94203} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {4EFC050C-F770-48A7-8AC0-BD771F88AE3E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C77BF85-F6AB-4893-87D3-71D4ECA86E32} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2022-04-30] (Google Inc -> Google LLC)
Task: {7F2D2B5D-74CB-4046-826E-BC4FD9425DE6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {837DB7FB-3E44-45FB-BE8B-74B770CDE7BA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D0F0D29-7CB6-4B9D-89C4-421E8272AB9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {923D2E2B-E591-47FF-BFE8-7F9818357087} - System32\Tasks\CCleanerSkipUAC - MCS => F:\CCLeaner_577 (port)\CCleaner.exe $(Arg0) (Pas de fichier)
Task: {9594E56F-A7FA-4254-A81B-9E22C6186952} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /ua /installsource scheduler (Pas de fichier)
Task: {A1A2A267-4867-4F5A-A585-D33592957AC2} - System32\Tasks\Microsoft\Windows\Management\Autopilot\RemediateHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [192000 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
Task: {A59C8F5A-F271-4A32-8331-1E621E94038B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6C17239-C55C-4FBC-913E-882248B34007} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-1025 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC2EAC2F-A8C3-4B14-B7BA-3B4AEC970461} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8406496 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {BDA831AC-AA61-4C1F-BF79-583E11F9AB82} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61856 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD09B213-D263-4CC5-8866-4B89C196E32B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2022-04-30] (Google Inc -> Google LLC)
Task: {DC9E71E6-1E2E-47A8-986E-7F03204C5C05} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /c (Pas de fichier)
Task: {DDA9E156-9990-4544-8935-CF6DA591F8D3} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe /dotip (Pas de fichier)
Task: {EB823E1A-A03B-4C8A-A33D-97A263162A34} - System32\Tasks\Microsoft\Windows\Management\Autopilot\DetectHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [192000 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{07e2609f-7a7f-4621-865f-fefb0838d917}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c7cdeefd-e2ec-4a46-860e-d9c5d5752ab4}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\MCS\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-21]
FireFox:
========
FF DefaultProfile: zk0wmpqf.default
FF ProfilePath: C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\zk0wmpqf.default [2022-08-20]
FF ProfilePath: C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release [2022-08-20]
FF Session Restore: Mozilla\Firefox\Profiles\25abtg83.default-release -> est activé.
FF Extension: (Cookie AutoDelete) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\CookieAutoDelete@kennydo.com.xpi [2022-07-13]
FF Extension: (Correcteur orthographique & grammatical — LanguageTool) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\languagetool-webextension@languagetool.org.xpi [2022-07-27]
FF Extension: (S3.Traducteur) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\s3@translator.xpi [2022-05-01]
FF Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\support@lastpass.com.xpi [2022-07-27]
FF Extension: (Google Translator for Firefox) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\translator@zoli.bod.xpi [2022-05-01]
FF Extension: (uBlock Origin) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-06-14]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2022-05-07] []
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [Pas de fichier]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-01] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-02-26] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default [2022-08-21]
CHR Notifications: Default -> hxxps://saymineapp.com; hxxps://www.easeus.fr; hxxps://www.wish.com
CHR StartupUrls: Default -> "hxxps://www.google.fr/webhp?rls=ig","hxxps://www.google.com/"
CHR Session Restore: Default -> est activé.
CHR Extension: (Google Traduction) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-07-13]
CHR Extension: (Safe Torrent Scanner) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-06-15]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-07-27]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2022-08-18]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-08-11]
CHR Extension: (SuperSorter) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjebfgojnlefhdgmomncgjglmdckngij [2022-06-10]
CHR Extension: (Ad Blocker App) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\iamhhblhmpldjchjecmapgoikpjmmfoe [2022-08-14]
CHR Extension: (Translation Comparison) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\kicpmhgmcajloefloefojbfdmenhmhjf [2022-06-10]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-04]
CHR Extension: (Coupert FR - Codes Promo et Cashback) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2022-08-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-10]
CHR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2022-07-26]
CHR Extension: (Bookmarks clean up) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oncbjlgldmiagjophlhobkogeladjijl [2022-06-10]
CHR Extension: (Ocean) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2022-06-10]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-08-20]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-08-20]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-05-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-17]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-05-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-17]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-08-20]
CHR Extension: (Safe Torrent Scanner) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-05-27]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-05-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-05-27]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-27]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3 [2022-08-20]
CHR StartupUrls: Profile 3 -> "hxxps://www.google.fr/webhp?rls=ig","hxxps://www.google.com/"
CHR Session Restore: Profile 3 -> est activé.
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-06-09]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2022-05-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-06-05]
CHR Extension: (SuperSorter) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hjebfgojnlefhdgmomncgjglmdckngij [2022-05-27]
CHR Extension: (Translation Comparison) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kicpmhgmcajloefloefojbfdmenhmhjf [2022-05-27]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-27]
CHR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2022-05-27]
CHR Extension: (Bookmarks clean up) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\oncbjlgldmiagjophlhobkogeladjijl [2022-05-27]
CHR Extension: (Ocean) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2022-05-27]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\System Profile [2022-08-20]
CHR HKU\S-1-5-21-2087624067-1276621751-448620844-1025\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3815712 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3580200 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ATService; D:\Program Files\AnyTXT Searcher\atservice.exe [2039296 2022-08-04] (anytxt.net) [Fichier non signé]
R2 Becca Service; D:\Program Files (x86)\Rene.E Laboratory\Becca\x64\bcservice.exe [87168 2021-08-31] (Jiangmen Ruili Software Co., Ltd. -> Rene.E Laboratory)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12102608 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
R2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [68336 2022-05-04] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [5030080 2022-04-30] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.161.0731.0002\FileSyncHelper.exe [3389832 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [225368 2022-07-14] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.161.0731.0002\OneDriveUpdaterService.exe [3830152 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; D:\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-05-13] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; D:\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-05-13] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14585832 2022-05-11] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\NisSrv.exe [3125128 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MsMpEng.exe [133560 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [113496 2021-01-14] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-10-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-12-05] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [139488 2022-04-25] (GENESYS LOGIC, INC. -> Genesys Logic)
R1 googledrivefs3758; C:\WINDOWS\System32\DRIVERS\googledrivefs3758.sys [384584 2022-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2022-05-26] (Martin Malik - REALiX -> REALiX(tm))
R3 iaLPSS2_I2C; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_363c7132639e12a6\iaLPSS2_I2C_ICL.sys [200456 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_skl.inf_amd64_21716d1984912f3d\iaLPSS2_SPI_ICL.sys [160024 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_skl.inf_amd64_a59239db7de9954f\iaLPSS2_UART2_ICL.sys [312600 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [62984 2019-08-28] (Intel Corporation -> Intel Corporation)
R3 MpKsle4457863; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9CE8A4E5-4A9C-423F-9730-66E368E95A5E}\MpKslDrv.sys [228600 2022-08-21] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [30744 2017-03-09] (IObit Information Technology -> IObit)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-08-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94456 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-21 19:03 - 2022-08-21 19:06 - 000000750 _____ C:\Users\MCS\Desktop\ZHPFix.txt
2022-08-21 19:01 - 2022-08-21 19:01 - 000373258 _____ C:\Users\MCS\Desktop\ZHPDiag.html
2022-08-21 19:01 - 2022-08-21 19:01 - 000302341 _____ C:\Users\MCS\Desktop\ZHPDiag.txt
2022-08-21 18:55 - 2022-08-21 18:55 - 000000906 _____ C:\Users\MCS\Desktop\ZHPSuite.lnk
2022-08-21 08:18 - 2022-08-21 08:18 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-08-19 19:55 - 2022-08-19 19:55 - 000000000 ____D C:\MCsBackup
2022-08-19 19:54 - 2022-08-19 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.E Laboratory
2022-08-19 19:45 - 2022-08-19 19:45 - 000000112 ___SH C:\bootTel.dat
2022-08-19 17:20 - 2022-08-19 17:20 - 000003454 _____ C:\WINDOWS\system32\Tasks\CrystalDiskInfo
2022-08-15 23:24 - 2022-08-15 23:27 - 000000000 ____D C:\AdwCleaner
2022-08-15 18:14 - 2022-08-15 18:14 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BankPerfect
2022-08-15 17:50 - 2022-08-15 17:50 - 000002878 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - MCS
2022-08-15 13:36 - 2022-08-15 13:39 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2022-08-15 13:35 - 2022-08-15 13:36 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-08-15 13:34 - 2022-08-15 13:34 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-08-15 13:32 - 2022-08-15 13:32 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-08-15 13:29 - 2022-08-15 13:29 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2022-08-15 13:29 - 2022-08-15 13:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2022-08-15 13:29 - 2022-08-15 13:29 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-08-15 13:29 - 2022-08-15 13:29 - 000188928 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-08-15 13:29 - 2022-08-15 13:29 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-08-15 13:29 - 2022-08-15 13:29 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-08-15 13:28 - 2022-08-15 13:28 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-08-15 13:28 - 2022-08-15 13:28 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-08-15 13:27 - 2022-08-15 13:27 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-08-15 13:27 - 2022-08-15 13:27 - 000162304 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-08-15 13:27 - 2022-08-15 13:27 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files\Reference Assemblies
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files\MSBuild
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files (x86)\MSBuild
2022-08-15 12:50 - 2022-08-15 12:50 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-08-15 12:48 - 2022-08-15 12:48 - 000000020 ___SH C:\Users\MCS\ntuser.ini
2022-08-15 12:47 - 2022-08-21 08:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-15 12:47 - 2022-08-20 12:33 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-1025
2022-08-15 12:47 - 2022-08-20 12:33 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-500
2022-08-15 12:47 - 2022-08-20 12:33 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-08-15 12:47 - 2022-08-15 12:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-08-15 12:47 - 2022-08-15 12:47 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003578 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003554 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003394 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000003354 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000003330 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000002672 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2022-08-15 12:47 - 2022-08-15 12:47 - 000002444 _____ C:\WINDOWS\system32\Tasks\IObitSelfCheckTask
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\OfficeSoftwareProtectionPlatform
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-08-15 12:46 - 2022-08-15 12:47 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2022-08-15 12:46 - 2022-08-15 12:47 - 000011433 _____ C:\WINDOWS\diagerr.xml
2022-08-15 12:42 - 2022-08-21 08:10 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-15 12:40 - 2022-08-15 12:48 - 000000000 ____D C:\Users\MCS
2022-08-15 12:40 - 2022-08-15 12:42 - 000000000 ____D C:\Users\Administrateur
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Voisinage réseau
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Voisinage d'impression
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Modèles
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Mes documents
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Menu Démarrer
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\AppData\Local\Historique
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Voisinage réseau
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Voisinage d'impression
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Modèles
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Mes documents
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Menu Démarrer
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\AppData\Local\Historique
2022-08-15 12:39 - 2022-08-21 17:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-15 12:39 - 2022-08-15 18:00 - 000491936 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-08-15 11:49 - 2022-08-20 09:05 - 000000000 ___DC C:\WINDOWS\Panther
2022-08-15 11:28 - 2022-08-15 11:28 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant
2022-08-15 11:07 - 2022-08-15 11:07 - 000001395 _____ C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-08-14 21:31 - 2022-08-15 13:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2022-08-14 21:31 - 2022-08-14 21:31 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2022-08-14 20:01 - 2022-08-18 15:41 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\webviewdata
2022-08-14 18:31 - 2022-08-20 12:10 - 000000000 ____D C:\Users\MCS\Desktop\desinfection
2022-08-14 18:14 - 2022-08-21 19:10 - 000000000 ____D C:\FRST
2022-08-14 15:18 - 2022-08-14 15:18 - 000000000 ___HD C:\$WinREAgent
2022-08-14 13:58 - 2022-08-21 19:07 - 000000000 ____D C:\Users\MCS\AppData\Roaming\ZHP
2022-08-14 13:58 - 2022-08-15 18:44 - 000000000 ____D C:\Users\MCS\AppData\Local\ZHP
2022-08-11 18:07 - 2022-08-11 18:07 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\uTorrent.WebView2
2022-08-10 18:05 - 2022-08-14 10:56 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-08-10 07:42 - 2022-08-15 13:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyTXT Searcher
2022-08-10 07:42 - 2022-08-10 07:43 - 000000000 ___HD C:\ProgramData\Anytxt
2022-08-10 07:42 - 2022-08-10 07:42 - 000000767 _____ C:\Users\Public\Desktop\AnyTXT Searcher.lnk
2022-08-10 07:42 - 2022-08-10 07:42 - 000000000 ____D C:\Program Files\Common Files\ATFLT
2022-08-10 07:42 - 2022-08-10 07:42 - 000000000 ____D C:\Program Files (x86)\MSECache
2022-08-08 18:57 - 2022-08-15 13:39 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-08-08 18:55 - 2022-08-15 18:40 - 000000000 ____D C:\Users\MCS\AppData\Local\Avast Software
2022-08-08 18:49 - 2022-08-15 18:40 - 000000000 ____D C:\ProgramData\Avast Software
2022-08-07 19:39 - 2022-08-07 19:39 - 000000783 _____ C:\Users\Public\Desktop\Notepad++.lnk
2022-08-04 13:09 - 2022-08-04 13:09 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2022-08-04 13:09 - 2022-08-04 13:09 - 000001865 _____ C:\Users\MCS\Desktop\Google Drive.lnk
2022-08-04 13:09 - 2022-07-18 18:08 - 000384584 _____ (Google, Inc.) C:\WINDOWS\system32\Drivers\googledrivefs3758.sys
2022-08-01 20:40 - 2022-08-06 12:30 - 000000000 ____D C:\Users\MCS\Desktop\Mariage NIKO
2022-08-01 15:55 - 2022-08-01 15:56 - 000003584 _____ C:\Users\MCS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-07-27 22:11 - 2022-08-04 12:18 - 000000000 ____D C:\Users\MCS\Desktop\MARIAGE NICOLAS
2022-07-23 09:53 - 2022-07-23 10:08 - 000000000 ____D C:\Users\MCS\Desktop\blanes
2022-07-23 07:54 - 2017-03-09 13:53 - 000030744 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2022-07-23 07:54 - 2016-03-22 11:02 - 000036824 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-21 18:58 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-21 13:05 - 2021-12-05 10:14 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\Mozilla
2022-08-21 08:10 - 2019-12-07 16:50 - 000794444 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-21 08:10 - 2019-12-07 16:50 - 000150558 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-21 08:10 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-08-21 08:09 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-08-21 08:09 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-08-21 08:08 - 2021-12-03 13:18 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-21 08:02 - 2022-06-08 19:16 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-08-21 08:02 - 2021-01-14 08:55 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-21 08:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-08-21 08:02 - 2019-11-11 07:12 - 000000000 __SHD C:\Users\MCS\IntelGraphicsProfiles
2022-08-21 08:02 - 2019-04-05 02:50 - 000000000 ___HD C:\Intel
2022-08-20 22:10 - 2022-05-01 04:03 - 000000000 ____D C:\Users\MCS\AppData\Local\Everything
2022-08-20 22:10 - 2022-04-30 14:12 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Everything
2022-08-20 22:10 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-08-20 22:09 - 2022-04-30 13:29 - 000000000 ____D C:\Users\MCS\AppData\Local\Packages
2022-08-20 19:18 - 2022-07-13 07:52 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-08-20 12:33 - 2022-07-10 16:06 - 000002172 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-08-20 12:14 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-08-20 09:23 - 2022-06-05 05:31 - 000000000 ____D C:\Users\MCS\AppData\Roaming\FreeFileSync
2022-08-19 18:12 - 2022-05-04 18:29 - 000000000 ____D C:\Users\MCS\AppData\Local\CyberGhost
2022-08-19 17:32 - 2022-06-04 17:30 - 000000000 ____D C:\Users\MCS\AppData\Roaming\vlc
2022-08-19 17:22 - 2022-05-01 20:05 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-08-18 06:18 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-08-16 07:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2022-08-15 20:06 - 2022-05-26 21:10 - 000000000 ____D C:\Users\MCS\AppData\Roaming\IObit
2022-08-15 20:06 - 2022-05-26 21:10 - 000000000 ____D C:\ProgramData\IObit
2022-08-15 20:04 - 2022-06-24 07:25 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Notepad++
2022-08-15 18:39 - 2022-05-26 22:53 - 000000000 ____D C:\Users\MCS\AppData\Roaming\uTorrent
2022-08-15 18:39 - 2022-05-01 20:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-08-15 18:08 - 2022-04-30 13:31 - 000000000 ____D C:\Users\MCS\AppData\Local\D3DSCache
2022-08-15 17:54 - 2022-06-01 08:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2022-08-15 17:54 - 2022-04-27 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\keit.co
2022-08-15 17:52 - 2022-06-08 19:16 - 000000000 ____D C:\Users\MCS\AppData\Roaming\TeamViewer
2022-08-15 17:52 - 2022-06-07 19:31 - 000000000 ____D C:\Users\MCS\AppData\Local\CrashDumps
2022-08-15 13:39 - 2022-06-05 05:58 - 000000000 ____D C:\Program Files\Intel
2022-08-15 13:39 - 2022-05-29 18:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2022-08-15 13:39 - 2022-05-04 18:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 8
2022-08-15 13:39 - 2022-05-01 18:20 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2022-08-15 13:39 - 2022-04-30 15:14 - 000000000 ____D C:\WINDOWS\SHELLNEW
2022-08-15 13:39 - 2022-04-30 13:22 - 000000000 ____D C:\WINDOWS\OEM
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2022-08-15 13:39 - 2022-04-26 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.5
2022-08-15 13:39 - 2022-01-27 20:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Outlook Finder
2022-08-15 13:39 - 2022-01-02 06:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pistonsoft BPM Detector
2022-08-15 13:39 - 2021-12-05 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-08-15 13:39 - 2021-11-18 07:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Photo Finder
2022-08-15 13:39 - 2021-10-29 05:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Music Files Finder
2022-08-15 13:39 - 2021-10-18 20:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2022-08-15 13:39 - 2021-10-09 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remove Empty Directories
2022-08-15 13:39 - 2021-09-23 06:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TimeToPhoto
2022-08-15 13:39 - 2021-09-06 10:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Suivi-Secu
2022-08-15 13:39 - 2021-06-29 10:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Attribute Changer
2022-08-15 13:39 - 2021-04-05 06:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Renamer
2022-08-15 13:39 - 2021-03-23 12:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConsoClicker
2022-08-15 13:39 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2022-08-15 13:39 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2022-08-15 13:39 - 2020-12-28 09:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2022-08-15 13:39 - 2020-12-27 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication
2022-08-15 13:39 - 2019-12-19 17:46 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WINDOWS
2022-08-15 13:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2022-08-15 13:39 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-08-15 13:39 - 2019-10-14 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Utilitaires
2022-08-15 13:38 - 2019-12-07 11:14 - 000000000 __RHD C:\Users\Public\Libraries
2022-08-15 13:38 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2022-08-15 13:36 - 2022-06-08 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2022-08-15 13:36 - 2022-04-30 13:19 - 000000000 ____D C:\WINDOWS\system32\Samsung
2022-08-15 13:36 - 2022-04-30 13:19 - 000000000 ____D C:\WINDOWS\Firmware
2022-08-15 13:36 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2022-08-15 13:36 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2022-08-15 13:36 - 2022-01-26 11:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Team Corporation
2022-08-15 13:36 - 2021-12-13 13:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2022-08-15 13:36 - 2021-10-01 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
2022-08-15 13:36 - 2021-06-19 20:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OFFICE
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Images & Sons
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divers
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ___SD C:\WINDOWS\system32\AppV
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-08-15 13:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-08-15 13:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2022-08-15 13:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2022-08-15 13:04 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-08-15 12:58 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2022-08-15 12:48 - 2021-12-04 23:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-08-15 12:48 - 2020-05-13 08:34 - 000000000 ___RD C:\Users\MCS\3D Objects
2022-08-15 12:48 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-08-15 12:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-08-15 12:47 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
2022-08-15 12:47 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-08-15 12:41 - 2021-08-01 12:26 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake Audio Converter
2022-08-15 12:41 - 2021-07-01 14:27 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dream Chronicles 2
2022-08-15 12:41 - 2021-06-27 03:40 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mystery Chronicles
2022-08-15 12:41 - 2021-01-07 11:05 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Èãðû
2022-08-15 12:41 - 2020-12-26 09:02 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2022-08-15 12:41 - 2020-10-19 07:08 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2022-08-15 12:41 - 2019-12-27 10:06 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Images & Sons
2022-08-15 12:41 - 2019-11-11 12:38 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-08-15 12:41 - 2019-11-11 08:49 - 000000000 ___RD C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows
2022-08-15 12:40 - 2022-04-30 12:25 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2022-08-15 11:44 - 2020-09-07 23:11 - 000000000 ___RD C:\Users\MCS\OneDrive
2022-08-14 13:57 - 2021-11-24 08:49 - 000000000 ____D C:\Users\MCS\Desktop\DUPLI
2022-08-14 11:06 - 2022-05-04 18:29 - 000000000 ____D C:\Users\MCS\AppData\Roaming\CyberGhost
2022-08-12 17:58 - 2022-07-10 08:38 - 000000000 ____D C:\Program Files\Microsoft Office
2022-08-11 18:08 - 2022-05-26 21:18 - 000000000 ____D C:\Users\MCS\AppData\Local\BitTorrentHelper
2022-08-11 06:37 - 2022-05-01 20:05 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-08-10 08:08 - 2021-12-31 15:03 - 000000000 ____D C:\Users\MCS\Desktop\Camera
2022-08-09 19:20 - 2022-06-04 18:11 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2022-08-09 16:21 - 2022-06-04 17:48 - 000000000 ___HD C:\ProgramData\CyberLink
2022-08-07 19:39 - 2021-12-05 19:31 - 000000783 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2022-08-04 13:09 - 2022-04-30 15:24 - 000000000 ____D C:\Users\MCS\AppData\Local\Google
2022-08-04 13:09 - 2022-04-30 15:24 - 000000000 ____D C:\Program Files\Google
2022-07-23 16:25 - 2022-05-26 21:11 - 000000000 ____D C:\ProgramData\ProductData
2022-07-23 07:54 - 2022-04-25 10:14 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\IObit
2022-07-22 07:57 - 2021-12-08 15:14 - 000000000 ____D C:\Users\MCS\Desktop\Office
==================== Fichiers à la racine de certains dossiers ========
2022-08-01 15:55 - 2022-08-01 15:56 - 000003584 _____ () C:\Users\MCS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-05-01 19:08 - 2022-05-01 19:08 - 000000000 _____ () C:\Users\MCS\AppData\Local\oobelibMkey.log
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\SysWOW64\version_IObitDel.dll [2022-05-26] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par MCS (administrateur) sur VIVOSALON (ASUSTeK COMPUTER INC. X705UA) (21-08-2022 19:10:09)
Exécuté depuis D:\A PAPIERS MCS\Santé\A MARC\2022
Profils chargés: MCS
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1889 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MpCopyAccelerator.exe
(D:\Program Files\Everything\Everything.exe ->) (NICOLAS_COOLMAN -> Nicolas Coolman) [Fichier non signé] D:\Download\ZHPSuite.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxEM.exe
(explorer.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (anytxt.net) [Fichier non signé] D:\Program Files\AnyTXT Searcher\ATGUI.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\61.0.3.0\crashpad_handler.exe <4>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21>
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\61.0.3.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Notepad++ -> Don HO don.h@free.fr) D:\Program Files (x86)\Notepad++\notepad++.exe
(explorer.exe ->) (voidtools -> voidtools) D:\Program Files\Everything\Everything.exe <2>
(services.exe ->) (anytxt.net) [Fichier non signé] D:\Program Files\AnyTXT Searcher\ATService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (CyberGhost S.R.L. -> CyberGhost S.R.L.) C:\Program Files\CyberGhost 8\Dashboard.Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_95bc605201b64517\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82419944dda69b12\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_3de4831720bb2934\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_03b951be52cd2aa9\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3ad50285c3647623\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3ad50285c3647623\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Jiangmen Ruili Software Co., Ltd. -> Rene.E Laboratory) D:\Program Files (x86)\Rene.E Laboratory\Becca\x64\bcservice.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.5-0\NisSrv.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) D:\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) D:\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (INTEL CORP) C:\Program Files\WindowsApps\appup.intelgraphicsexperience_1.100.3408.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.536.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Everything] => D:\Program Files\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2087624067-1276621751-448620844-1025\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\61.0.3.0\GoogleDriveFS.exe [51041096 2022-07-18] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2087624067-1276621751-448620844-1025\...\Run: [MicrosoftEdgeAutoLaunch_ABB67434869FA037A8CD10F36FC5FC42] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3827128 2022-08-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [54944 2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-04] (Google LLC -> Google LLC)
Startup: C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LastPass.LastPassRemove.bat [2022-06-05] () [Fichier non signé]
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {11C4A33E-F55D-47C0-B673-CF214321BD1C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {1255FAEB-5CFF-4816-9191-5374F381F860} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {13F5E192-1BA0-4367-A0A4-61AAC8EEB880} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {176237A4-85C0-4005-88CD-235E5D223032} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8406496 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {2146001B-3081-4A43-8C28-07C6625A6495} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {24616230-D817-4D26-B154-175C83D50826} - System32\Tasks\CrystalDiskInfo => C:\Program Files\CrystalDiskInfo\DiskInfo64.exe [2781752 2021-02-23] (Noriyuki Miyazaki -> Crystal Dew World)
Task: {25825157-2581-427C-BCF2-F65689F55EAD} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {29EAEC92-9CEE-4F51-9DAF-CC5FB5FFECC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3E71B669-8223-4AE1-B76A-BA16E89EF07B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {442583A2-F992-4BE6-874E-B143B3279284} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {4B543499-602A-4ECE-A389-E87751C94203} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {4EFC050C-F770-48A7-8AC0-BD771F88AE3E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C77BF85-F6AB-4893-87D3-71D4ECA86E32} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2022-04-30] (Google Inc -> Google LLC)
Task: {7F2D2B5D-74CB-4046-826E-BC4FD9425DE6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {837DB7FB-3E44-45FB-BE8B-74B770CDE7BA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D0F0D29-7CB6-4B9D-89C4-421E8272AB9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MpCmdRun.exe [1335968 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {923D2E2B-E591-47FF-BFE8-7F9818357087} - System32\Tasks\CCleanerSkipUAC - MCS => F:\CCLeaner_577 (port)\CCleaner.exe $(Arg0) (Pas de fichier)
Task: {9594E56F-A7FA-4254-A81B-9E22C6186952} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /ua /installsource scheduler (Pas de fichier)
Task: {A1A2A267-4867-4F5A-A585-D33592957AC2} - System32\Tasks\Microsoft\Windows\Management\Autopilot\RemediateHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [192000 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
Task: {A59C8F5A-F271-4A32-8331-1E621E94038B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6C17239-C55C-4FBC-913E-882248B34007} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-1025 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4172168 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC2EAC2F-A8C3-4B14-B7BA-3B4AEC970461} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8406496 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {BDA831AC-AA61-4C1F-BF79-583E11F9AB82} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61856 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD09B213-D263-4CC5-8866-4B89C196E32B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2022-04-30] (Google Inc -> Google LLC)
Task: {DC9E71E6-1E2E-47A8-986E-7F03204C5C05} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /c (Pas de fichier)
Task: {DDA9E156-9990-4544-8935-CF6DA591F8D3} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe /dotip (Pas de fichier)
Task: {EB823E1A-A03B-4C8A-A33D-97A263162A34} - System32\Tasks\Microsoft\Windows\Management\Autopilot\DetectHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [192000 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{07e2609f-7a7f-4621-865f-fefb0838d917}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c7cdeefd-e2ec-4a46-860e-d9c5d5752ab4}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\MCS\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-21]
FireFox:
========
FF DefaultProfile: zk0wmpqf.default
FF ProfilePath: C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\zk0wmpqf.default [2022-08-20]
FF ProfilePath: C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release [2022-08-20]
FF Session Restore: Mozilla\Firefox\Profiles\25abtg83.default-release -> est activé.
FF Extension: (Cookie AutoDelete) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\CookieAutoDelete@kennydo.com.xpi [2022-07-13]
FF Extension: (Correcteur orthographique & grammatical — LanguageTool) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\languagetool-webextension@languagetool.org.xpi [2022-07-27]
FF Extension: (S3.Traducteur) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\s3@translator.xpi [2022-05-01]
FF Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\support@lastpass.com.xpi [2022-07-27]
FF Extension: (Google Translator for Firefox) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\translator@zoli.bod.xpi [2022-05-01]
FF Extension: (uBlock Origin) - C:\Users\MCS\AppData\Roaming\Mozilla\Firefox\Profiles\25abtg83.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-06-14]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2022-05-07] []
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [Pas de fichier]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-01] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-02-26] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default [2022-08-21]
CHR Notifications: Default -> hxxps://saymineapp.com; hxxps://www.easeus.fr; hxxps://www.wish.com
CHR StartupUrls: Default -> "hxxps://www.google.fr/webhp?rls=ig","hxxps://www.google.com/"
CHR Session Restore: Default -> est activé.
CHR Extension: (Google Traduction) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-07-13]
CHR Extension: (Safe Torrent Scanner) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-06-15]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-07-27]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2022-08-18]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-08-11]
CHR Extension: (SuperSorter) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjebfgojnlefhdgmomncgjglmdckngij [2022-06-10]
CHR Extension: (Ad Blocker App) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\iamhhblhmpldjchjecmapgoikpjmmfoe [2022-08-14]
CHR Extension: (Translation Comparison) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\kicpmhgmcajloefloefojbfdmenhmhjf [2022-06-10]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-04]
CHR Extension: (Coupert FR - Codes Promo et Cashback) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2022-08-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-10]
CHR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2022-07-26]
CHR Extension: (Bookmarks clean up) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oncbjlgldmiagjophlhobkogeladjijl [2022-06-10]
CHR Extension: (Ocean) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2022-06-10]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-08-20]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-08-20]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-05-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-17]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-05-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-17]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-08-20]
CHR Extension: (Safe Torrent Scanner) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-05-27]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-05-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-05-27]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-27]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3 [2022-08-20]
CHR StartupUrls: Profile 3 -> "hxxps://www.google.fr/webhp?rls=ig","hxxps://www.google.com/"
CHR Session Restore: Profile 3 -> est activé.
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-06-09]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2022-05-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-27]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-06-05]
CHR Extension: (SuperSorter) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hjebfgojnlefhdgmomncgjglmdckngij [2022-05-27]
CHR Extension: (Translation Comparison) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kicpmhgmcajloefloefojbfdmenhmhjf [2022-05-27]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-27]
CHR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2022-05-27]
CHR Extension: (Bookmarks clean up) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\oncbjlgldmiagjophlhobkogeladjijl [2022-05-27]
CHR Extension: (Ocean) - C:\Users\MCS\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2022-05-27]
CHR Profile: C:\Users\MCS\AppData\Local\Google\Chrome\User Data\System Profile [2022-08-20]
CHR HKU\S-1-5-21-2087624067-1276621751-448620844-1025\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3815712 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3580200 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ATService; D:\Program Files\AnyTXT Searcher\atservice.exe [2039296 2022-08-04] (anytxt.net) [Fichier non signé]
R2 Becca Service; D:\Program Files (x86)\Rene.E Laboratory\Becca\x64\bcservice.exe [87168 2021-08-31] (Jiangmen Ruili Software Co., Ltd. -> Rene.E Laboratory)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12102608 2022-08-09] (Microsoft Corporation -> Microsoft Corporation)
R2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [68336 2022-05-04] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [5030080 2022-04-30] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.161.0731.0002\FileSyncHelper.exe [3389832 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [225368 2022-07-14] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.161.0731.0002\OneDriveUpdaterService.exe [3830152 2022-08-20] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; D:\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-05-13] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; D:\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-05-13] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14585832 2022-05-11] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\NisSrv.exe [3125128 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2207.5-0\MsMpEng.exe [133560 2022-08-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [113496 2021-01-14] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-10-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-12-05] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [139488 2022-04-25] (GENESYS LOGIC, INC. -> Genesys Logic)
R1 googledrivefs3758; C:\WINDOWS\System32\DRIVERS\googledrivefs3758.sys [384584 2022-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2022-05-26] (Martin Malik - REALiX -> REALiX(tm))
R3 iaLPSS2_I2C; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_363c7132639e12a6\iaLPSS2_I2C_ICL.sys [200456 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_skl.inf_amd64_21716d1984912f3d\iaLPSS2_SPI_ICL.sys [160024 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_skl.inf_amd64_a59239db7de9954f\iaLPSS2_UART2_ICL.sys [312600 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [62984 2019-08-28] (Intel Corporation -> Intel Corporation)
R3 MpKsle4457863; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9CE8A4E5-4A9C-423F-9730-66E368E95A5E}\MpKslDrv.sys [228600 2022-08-21] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [30744 2017-03-09] (IObit Information Technology -> IObit)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-08-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94456 2022-08-15] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-21 19:03 - 2022-08-21 19:06 - 000000750 _____ C:\Users\MCS\Desktop\ZHPFix.txt
2022-08-21 19:01 - 2022-08-21 19:01 - 000373258 _____ C:\Users\MCS\Desktop\ZHPDiag.html
2022-08-21 19:01 - 2022-08-21 19:01 - 000302341 _____ C:\Users\MCS\Desktop\ZHPDiag.txt
2022-08-21 18:55 - 2022-08-21 18:55 - 000000906 _____ C:\Users\MCS\Desktop\ZHPSuite.lnk
2022-08-21 08:18 - 2022-08-21 08:18 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-08-19 19:55 - 2022-08-19 19:55 - 000000000 ____D C:\MCsBackup
2022-08-19 19:54 - 2022-08-19 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.E Laboratory
2022-08-19 19:45 - 2022-08-19 19:45 - 000000112 ___SH C:\bootTel.dat
2022-08-19 17:20 - 2022-08-19 17:20 - 000003454 _____ C:\WINDOWS\system32\Tasks\CrystalDiskInfo
2022-08-15 23:24 - 2022-08-15 23:27 - 000000000 ____D C:\AdwCleaner
2022-08-15 18:14 - 2022-08-15 18:14 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BankPerfect
2022-08-15 17:50 - 2022-08-15 17:50 - 000002878 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - MCS
2022-08-15 13:36 - 2022-08-15 13:39 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2022-08-15 13:35 - 2022-08-15 13:36 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-08-15 13:34 - 2022-08-15 13:34 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-08-15 13:32 - 2022-08-15 13:32 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-08-15 13:29 - 2022-08-15 13:29 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2022-08-15 13:29 - 2022-08-15 13:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2022-08-15 13:29 - 2022-08-15 13:29 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-08-15 13:29 - 2022-08-15 13:29 - 000188928 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-08-15 13:29 - 2022-08-15 13:29 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-08-15 13:29 - 2022-08-15 13:29 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-08-15 13:29 - 2022-08-15 13:29 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-08-15 13:28 - 2022-08-15 13:28 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-08-15 13:28 - 2022-08-15 13:28 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2022-08-15 13:28 - 2022-08-15 13:28 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-08-15 13:28 - 2022-08-15 13:28 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-08-15 13:28 - 2022-08-15 13:28 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-08-15 13:27 - 2022-08-15 13:27 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-08-15 13:27 - 2022-08-15 13:27 - 000162304 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-08-15 13:27 - 2022-08-15 13:27 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2022-08-15 13:27 - 2022-08-15 13:27 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files\Reference Assemblies
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files\MSBuild
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2022-08-15 13:17 - 2022-08-15 13:17 - 000000000 ____D C:\Program Files (x86)\MSBuild
2022-08-15 12:50 - 2022-08-15 12:50 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-08-15 12:48 - 2022-08-15 12:48 - 000000020 ___SH C:\Users\MCS\ntuser.ini
2022-08-15 12:47 - 2022-08-21 08:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-15 12:47 - 2022-08-20 12:33 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-1025
2022-08-15 12:47 - 2022-08-20 12:33 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2087624067-1276621751-448620844-500
2022-08-15 12:47 - 2022-08-20 12:33 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-08-15 12:47 - 2022-08-15 12:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-08-15 12:47 - 2022-08-15 12:47 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003578 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003554 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2022-08-15 12:47 - 2022-08-15 12:47 - 000003394 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000003354 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000003330 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2022-08-15 12:47 - 2022-08-15 12:47 - 000002672 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2022-08-15 12:47 - 2022-08-15 12:47 - 000002444 _____ C:\WINDOWS\system32\Tasks\IObitSelfCheckTask
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\OfficeSoftwareProtectionPlatform
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-08-15 12:47 - 2022-08-15 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-08-15 12:46 - 2022-08-15 12:47 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2022-08-15 12:46 - 2022-08-15 12:47 - 000011433 _____ C:\WINDOWS\diagerr.xml
2022-08-15 12:42 - 2022-08-21 08:10 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-15 12:40 - 2022-08-15 12:48 - 000000000 ____D C:\Users\MCS
2022-08-15 12:40 - 2022-08-15 12:42 - 000000000 ____D C:\Users\Administrateur
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Voisinage réseau
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Voisinage d'impression
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Modèles
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Mes documents
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\Menu Démarrer
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\MCS\AppData\Local\Historique
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Voisinage réseau
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Voisinage d'impression
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Modèles
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Mes documents
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\Menu Démarrer
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2022-08-15 12:40 - 2022-08-15 12:40 - 000000000 _SHDL C:\Users\Administrateur\AppData\Local\Historique
2022-08-15 12:39 - 2022-08-21 17:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-15 12:39 - 2022-08-15 18:00 - 000491936 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-08-15 11:49 - 2022-08-20 09:05 - 000000000 ___DC C:\WINDOWS\Panther
2022-08-15 11:28 - 2022-08-15 11:28 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant
2022-08-15 11:07 - 2022-08-15 11:07 - 000001395 _____ C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-08-14 21:31 - 2022-08-15 13:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2022-08-14 21:31 - 2022-08-14 21:31 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2022-08-14 20:01 - 2022-08-18 15:41 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\webviewdata
2022-08-14 18:31 - 2022-08-20 12:10 - 000000000 ____D C:\Users\MCS\Desktop\desinfection
2022-08-14 18:14 - 2022-08-21 19:10 - 000000000 ____D C:\FRST
2022-08-14 15:18 - 2022-08-14 15:18 - 000000000 ___HD C:\$WinREAgent
2022-08-14 13:58 - 2022-08-21 19:07 - 000000000 ____D C:\Users\MCS\AppData\Roaming\ZHP
2022-08-14 13:58 - 2022-08-15 18:44 - 000000000 ____D C:\Users\MCS\AppData\Local\ZHP
2022-08-11 18:07 - 2022-08-11 18:07 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\uTorrent.WebView2
2022-08-10 18:05 - 2022-08-14 10:56 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-08-10 07:42 - 2022-08-15 13:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyTXT Searcher
2022-08-10 07:42 - 2022-08-10 07:43 - 000000000 ___HD C:\ProgramData\Anytxt
2022-08-10 07:42 - 2022-08-10 07:42 - 000000767 _____ C:\Users\Public\Desktop\AnyTXT Searcher.lnk
2022-08-10 07:42 - 2022-08-10 07:42 - 000000000 ____D C:\Program Files\Common Files\ATFLT
2022-08-10 07:42 - 2022-08-10 07:42 - 000000000 ____D C:\Program Files (x86)\MSECache
2022-08-08 18:57 - 2022-08-15 13:39 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-08-08 18:55 - 2022-08-15 18:40 - 000000000 ____D C:\Users\MCS\AppData\Local\Avast Software
2022-08-08 18:49 - 2022-08-15 18:40 - 000000000 ____D C:\ProgramData\Avast Software
2022-08-07 19:39 - 2022-08-07 19:39 - 000000783 _____ C:\Users\Public\Desktop\Notepad++.lnk
2022-08-04 13:09 - 2022-08-04 13:09 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2022-08-04 13:09 - 2022-08-04 13:09 - 000001865 _____ C:\Users\MCS\Desktop\Google Drive.lnk
2022-08-04 13:09 - 2022-07-18 18:08 - 000384584 _____ (Google, Inc.) C:\WINDOWS\system32\Drivers\googledrivefs3758.sys
2022-08-01 20:40 - 2022-08-06 12:30 - 000000000 ____D C:\Users\MCS\Desktop\Mariage NIKO
2022-08-01 15:55 - 2022-08-01 15:56 - 000003584 _____ C:\Users\MCS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-07-27 22:11 - 2022-08-04 12:18 - 000000000 ____D C:\Users\MCS\Desktop\MARIAGE NICOLAS
2022-07-23 09:53 - 2022-07-23 10:08 - 000000000 ____D C:\Users\MCS\Desktop\blanes
2022-07-23 07:54 - 2017-03-09 13:53 - 000030744 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2022-07-23 07:54 - 2016-03-22 11:02 - 000036824 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-21 18:58 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-21 13:05 - 2021-12-05 10:14 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\Mozilla
2022-08-21 08:10 - 2019-12-07 16:50 - 000794444 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-21 08:10 - 2019-12-07 16:50 - 000150558 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-21 08:10 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-08-21 08:09 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-08-21 08:09 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-08-21 08:08 - 2021-12-03 13:18 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-21 08:02 - 2022-06-08 19:16 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-08-21 08:02 - 2021-01-14 08:55 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-21 08:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-08-21 08:02 - 2019-11-11 07:12 - 000000000 __SHD C:\Users\MCS\IntelGraphicsProfiles
2022-08-21 08:02 - 2019-04-05 02:50 - 000000000 ___HD C:\Intel
2022-08-20 22:10 - 2022-05-01 04:03 - 000000000 ____D C:\Users\MCS\AppData\Local\Everything
2022-08-20 22:10 - 2022-04-30 14:12 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Everything
2022-08-20 22:10 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-08-20 22:09 - 2022-04-30 13:29 - 000000000 ____D C:\Users\MCS\AppData\Local\Packages
2022-08-20 19:18 - 2022-07-13 07:52 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-08-20 12:33 - 2022-07-10 16:06 - 000002172 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-08-20 12:14 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-08-20 09:23 - 2022-06-05 05:31 - 000000000 ____D C:\Users\MCS\AppData\Roaming\FreeFileSync
2022-08-19 18:12 - 2022-05-04 18:29 - 000000000 ____D C:\Users\MCS\AppData\Local\CyberGhost
2022-08-19 17:32 - 2022-06-04 17:30 - 000000000 ____D C:\Users\MCS\AppData\Roaming\vlc
2022-08-19 17:22 - 2022-05-01 20:05 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-08-18 06:18 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-08-16 07:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2022-08-15 20:06 - 2022-05-26 21:10 - 000000000 ____D C:\Users\MCS\AppData\Roaming\IObit
2022-08-15 20:06 - 2022-05-26 21:10 - 000000000 ____D C:\ProgramData\IObit
2022-08-15 20:04 - 2022-06-24 07:25 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Notepad++
2022-08-15 18:39 - 2022-05-26 22:53 - 000000000 ____D C:\Users\MCS\AppData\Roaming\uTorrent
2022-08-15 18:39 - 2022-05-01 20:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-08-15 18:08 - 2022-04-30 13:31 - 000000000 ____D C:\Users\MCS\AppData\Local\D3DSCache
2022-08-15 17:54 - 2022-06-01 08:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2022-08-15 17:54 - 2022-04-27 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\keit.co
2022-08-15 17:52 - 2022-06-08 19:16 - 000000000 ____D C:\Users\MCS\AppData\Roaming\TeamViewer
2022-08-15 17:52 - 2022-06-07 19:31 - 000000000 ____D C:\Users\MCS\AppData\Local\CrashDumps
2022-08-15 13:39 - 2022-06-05 05:58 - 000000000 ____D C:\Program Files\Intel
2022-08-15 13:39 - 2022-05-29 18:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2022-08-15 13:39 - 2022-05-04 18:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 8
2022-08-15 13:39 - 2022-05-01 18:20 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2022-08-15 13:39 - 2022-04-30 15:14 - 000000000 ____D C:\WINDOWS\SHELLNEW
2022-08-15 13:39 - 2022-04-30 13:22 - 000000000 ____D C:\WINDOWS\OEM
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2022-08-15 13:39 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2022-08-15 13:39 - 2022-04-26 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.5
2022-08-15 13:39 - 2022-01-27 20:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Outlook Finder
2022-08-15 13:39 - 2022-01-02 06:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pistonsoft BPM Detector
2022-08-15 13:39 - 2021-12-05 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-08-15 13:39 - 2021-11-18 07:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Photo Finder
2022-08-15 13:39 - 2021-10-29 05:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Music Files Finder
2022-08-15 13:39 - 2021-10-18 20:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2022-08-15 13:39 - 2021-10-09 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remove Empty Directories
2022-08-15 13:39 - 2021-09-23 06:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TimeToPhoto
2022-08-15 13:39 - 2021-09-06 10:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Suivi-Secu
2022-08-15 13:39 - 2021-06-29 10:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Attribute Changer
2022-08-15 13:39 - 2021-04-05 06:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Renamer
2022-08-15 13:39 - 2021-03-23 12:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConsoClicker
2022-08-15 13:39 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2022-08-15 13:39 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2022-08-15 13:39 - 2020-12-28 09:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2022-08-15 13:39 - 2020-12-27 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication
2022-08-15 13:39 - 2019-12-19 17:46 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WINDOWS
2022-08-15 13:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2022-08-15 13:39 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-08-15 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-08-15 13:39 - 2019-10-14 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Utilitaires
2022-08-15 13:38 - 2019-12-07 11:14 - 000000000 __RHD C:\Users\Public\Libraries
2022-08-15 13:38 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2022-08-15 13:36 - 2022-06-08 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2022-08-15 13:36 - 2022-04-30 13:19 - 000000000 ____D C:\WINDOWS\system32\Samsung
2022-08-15 13:36 - 2022-04-30 13:19 - 000000000 ____D C:\WINDOWS\Firmware
2022-08-15 13:36 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2022-08-15 13:36 - 2022-04-30 13:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2022-08-15 13:36 - 2022-01-26 11:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Team Corporation
2022-08-15 13:36 - 2021-12-13 13:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2022-08-15 13:36 - 2021-10-01 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
2022-08-15 13:36 - 2021-06-19 20:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OFFICE
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Images & Sons
2022-08-15 13:36 - 2021-02-05 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divers
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ___SD C:\WINDOWS\system32\AppV
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-08-15 13:32 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-08-15 13:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-08-15 13:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-08-15 13:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2022-08-15 13:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2022-08-15 13:04 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-08-15 12:58 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2022-08-15 12:48 - 2021-12-04 23:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-08-15 12:48 - 2020-05-13 08:34 - 000000000 ___RD C:\Users\MCS\3D Objects
2022-08-15 12:48 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-08-15 12:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-08-15 12:47 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
2022-08-15 12:47 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-08-15 12:41 - 2021-08-01 12:26 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake Audio Converter
2022-08-15 12:41 - 2021-07-01 14:27 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dream Chronicles 2
2022-08-15 12:41 - 2021-06-27 03:40 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mystery Chronicles
2022-08-15 12:41 - 2021-01-07 11:05 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Èãðû
2022-08-15 12:41 - 2020-12-26 09:02 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2022-08-15 12:41 - 2020-10-19 07:08 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2022-08-15 12:41 - 2019-12-27 10:06 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Images & Sons
2022-08-15 12:41 - 2019-11-11 12:38 - 000000000 ____D C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-08-15 12:41 - 2019-11-11 08:49 - 000000000 ___RD C:\Users\MCS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows
2022-08-15 12:40 - 2022-04-30 12:25 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2022-08-15 11:44 - 2020-09-07 23:11 - 000000000 ___RD C:\Users\MCS\OneDrive
2022-08-14 13:57 - 2021-11-24 08:49 - 000000000 ____D C:\Users\MCS\Desktop\DUPLI
2022-08-14 11:06 - 2022-05-04 18:29 - 000000000 ____D C:\Users\MCS\AppData\Roaming\CyberGhost
2022-08-12 17:58 - 2022-07-10 08:38 - 000000000 ____D C:\Program Files\Microsoft Office
2022-08-11 18:08 - 2022-05-26 21:18 - 000000000 ____D C:\Users\MCS\AppData\Local\BitTorrentHelper
2022-08-11 06:37 - 2022-05-01 20:05 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-08-10 08:08 - 2021-12-31 15:03 - 000000000 ____D C:\Users\MCS\Desktop\Camera
2022-08-09 19:20 - 2022-06-04 18:11 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2022-08-09 16:21 - 2022-06-04 17:48 - 000000000 ___HD C:\ProgramData\CyberLink
2022-08-07 19:39 - 2021-12-05 19:31 - 000000783 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2022-08-04 13:09 - 2022-04-30 15:24 - 000000000 ____D C:\Users\MCS\AppData\Local\Google
2022-08-04 13:09 - 2022-04-30 15:24 - 000000000 ____D C:\Program Files\Google
2022-07-23 16:25 - 2022-05-26 21:11 - 000000000 ____D C:\ProgramData\ProductData
2022-07-23 07:54 - 2022-04-25 10:14 - 000000000 ____D C:\Users\MCS\AppData\LocalLow\IObit
2022-07-22 07:57 - 2021-12-08 15:14 - 000000000 ____D C:\Users\MCS\Desktop\Office
==================== Fichiers à la racine de certains dossiers ========
2022-08-01 15:55 - 2022-08-01 15:56 - 000003584 _____ () C:\Users\MCS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-05-01 19:08 - 2022-05-01 19:08 - 000000000 _____ () C:\Users\MCS\AppData\Local\oobelibMkey.log
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\SysWOW64\version_IObitDel.dll [2022-05-26] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================