Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 25-05-2023
Exécuté par renov (administrateur) sur DESKTOP-8P645V0 (Dell Inc. OptiPlex 9020) (26-05-2023 13:19:03)
Exécuté depuis C:\Users\renov\Desktop\FRST64.exe
Profils chargés: renov
Plate-forme: Microsoft Windows 10 Professionnel Version 22H2 19045.2965 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe ->) (Herospeed Digital Technology Limited -> ) C:\Program Files (x86)\EC-VISION\iVMS320 Server.exe
(C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe ->) (Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserSessionAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Microsoft Corporation) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\WebView2\msedgewebview2.exe <6>
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé] C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (HP Inc. -> Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation -> ) C:\Windows\System32\igfxTray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(RuntimeBroker.exe ->) (Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(RuntimeBroker.exe ->) (Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (HeroSpeed Digital Technology Co.,Ltd -> ) C:\Users\Public\longse_ivms\Database\bin\vlmysqld.exe
(services.exe ->) (Herospeed Digital Technology Limited -> ) C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ecb9604542bb4ba6\RstMwService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.2905_none_7dd39c4c7cb9dfa0\TiWorker.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8538872 2016-01-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1415928 2016-01-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6609176 2022-04-11] (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeGCInvoker-1.0] => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" (Pas de fichier)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740920 2022-02-08] (iMobie Inc. -> iMobie Inc.)
HKLM-x32\...\Run: [iVMS320] => C:\Program Files (x86)\EC-VISION\EC VISION.exe [159168 2021-12-14] () [Fichier non signé]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [30870320 2019-12-07] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [30870320 2019-12-07] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [OneDrive] => C:\Users\renov\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2602424 2023-05-24] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [HP OfficeJet Pro 8720 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\ScanToPCActivationApp.exe [3770528 2021-11-15] (HP Inc. -> HP Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740920 2022-02-08] (iMobie Inc. -> iMobie Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe [576184 2022-02-08] (iMobie Inc. -> iMobie Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40454048 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2572960 2021-11-28] (HP Inc. -> Hewlett-Packard Co.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Uninstall 23.086.0423.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\23.086.0423.0001" (Pas de fichier) <==== ATTENTION
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2022-04-07] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HP a211 Status Monitor: C:\WINDOWS\system32\hpinkstsa211LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3070 B611 series): C:\WINDOWS\system32\HPDiscoPMa211.dll [741536 2021-11-28] (HP Inc. -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\113.0.21244.129\Installer\chrmstp.exe [2023-05-25] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Startup: C:\Users\renov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Enregistrement du produit.lnk [2022-01-31]
ShortcutTarget: Logitech . Enregistrement du produit.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Logitech -> Leader Technologies/Logitech)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {029A3783-4897-48E4-8B12-B70600F57902} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {2901EDDA-2BD9-4741-B36F-31370A6537A7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Task: {36F2BAA9-A713-4EE1-9126-5622D3C9B647} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {55C32C90-90D8-425C-8E40-0FD20422AC14} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1135128 2023-04-04] (HP Inc. -> HP Inc.)
Task: {56F35B57-3ED3-437E-B232-C5A9662BD15C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [228888 2023-04-04] (HP Inc. -> HP Inc.)
Task: {6D641A7F-DCBD-4A7A-B23A-E2995CB76E88} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3330680 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {73C869FC-65E8-4BA0-B4A2-72C081FED4AC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN66CDK1TW => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1135128 2023-04-04] (HP Inc. -> HP Inc.)
Task: {76BE3B46-27F1-4802-8D66-01D116EB589F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [732064 2023-05-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {7A31BEF9-FF1C-4972-992F-81EC1AA2B6B9} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3330680 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {897A0D75-579F-4223-8160-B2937509450B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {97A3C0EA-AA84-429A-937F-3F7044C91B77} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [668464 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {98E8FEF9-4FF5-4BD9-9260-DA49E710A465} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8720 => C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\HPCustPartic.exe [6439584 2021-11-15] (HP Inc. -> HP Inc.)
Task: {A4F3DBAB-313F-4EBC-A253-40EBFDBFFEA5} - System32\Tasks\CCleanerSkipUAC - renov => C:\Program Files\CCleaner\CCleaner.exe [34264480 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {B88CAAA5-0D6D-4710-A743-89654338A15E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-04-04] (HP Inc. -> HP Inc.)
Task: {B9872A3D-9BE3-413A-AE00-C5134EB87C9F} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-05-26] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {D81E7854-76D2-45C6-A641-63C36DB1974D} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "b5610e0a-f8f9-44a9-9148-e428bf7a2380" --version "6.12.10490" --silent
Task: {E32B604A-9D32-4ECC-A985-34ADCFF83D7A} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6b4587ae-5700-4611-b735-6905418dcb8f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\renov\AppData\Local\Microsoft\Edge\User Data\Default [2023-05-26]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\renov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-11-28]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: rc2zvvs7.default
FF ProfilePath: C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\rc2zvvs7.default [2021-09-09]
FF ProfilePath: C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349 [2023-05-26]
FF Notifications: Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349 -> hxxps://app.n26.com; hxxps://iss.shopimind.com; hxxps://drive.google.com
FF Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\appledev@soarinfotech.com.xpi [2023-04-24] [UpdateUrl:hxxps://www.coupert.com/api/v2/extension/ffupdate]
FF Extension: (Dreamer – Bold) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\dreamer-bold-colorway@mozilla.org.xpi [2023-04-24]
FF Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\firefox@ghostery.com.xpi [2023-05-26]
FF Extension: (uBlock Origin) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\uBlock0@raymondhill.net.xpi [2023-05-11]
FF Extension: (Avast Online Security & Privacy) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\wrc@avast.com.xpi [2023-03-03]
FF Extension: (have a fox dream) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{3f1aff6b-0363-410f-b81b-9a286ffb4b10}.xpi [2021-06-06]
FF Extension: (Video DownloadHelper) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-12-10]
FF Extension: (IGRAAL : Cashback & codes promo) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{dbac9680-d559-4cd4-9765-059879e8c467}.xpi [2023-05-23]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [Pas de fichier]
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: Longse.cn/LsIPCCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsIPCCtl\npLsIPCCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> Longse)
FF Plugin-x32: lsjt.com/LsNetClientCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsWebPlugin\npLsNetClientCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
FF Plugin-x32: lsjt.com/LsRcxNetClientCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsRcxWebPlugin\npLsRCXNetClientCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
FF Plugin-x32: lsls.com/LsNvrNetClient -> C:\Program Files (x86)\EC-VISION\ocx\LsNXVRPlugin\npLsNvrNetClient.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-04-03] (Adobe Inc. -> Adobe Inc.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3103824 2021-02-01] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\113.0.21244.129\elevation_service.exe [2032688 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1063840 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [138448 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [55712 2022-11-07] (Dell Inc -> )
R2 DellClientManagementService; c:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [49880 2023-01-18] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [134560 2022-02-19] (Dell Inc -> Dell)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [858064 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [857032 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [853920 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-10] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [856992 2023-04-04] (HP Inc. -> HP Inc.)
R2 IVMS320MYSQL; C:\\Users\\Public\\longse_ivms\\Database\\my.ini [5111 ] () [Fichier non signé]
R2 iVMS320_Server; C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe [40728 2021-12-14] (Herospeed Digital Technology Limited -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9246536 2023-05-23] (Malwarebytes Inc. -> Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [336256 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182296 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-06-23] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-06-23] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [137056 2022-06-21] (Dell Inc -> Dell Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Fichier non signé]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16184216 2022-06-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\NisSrv.exe [3216064 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MsMpEng.exe [133544 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BHTPCRDR; C:\WINDOWS\System32\drivers\bhtpcrdr.sys [180944 2019-04-03] (BayHub Technology Inc. -> BayHubTech/O2Micro)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287232 2022-06-20] (Microsoft Corporation) [Fichier non signé]
R3 DBUtilDrv2; C:\WINDOWS\System32\drivers\DBUtilDrv2.sys [24968 2023-05-26] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [35704 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [37808 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159760 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2022-11-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 imausbhpal; C:\WINDOWS\System32\drivers\imausbhpal.sys [671224 2017-05-19] (Intel(R) Wireless Connectivity Solutions -> )
S3 imausbhub; C:\WINDOWS\System32\drivers\imausbhub.sys [479736 2017-05-19] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 LSI_SAS3; C:\WINDOWS\System32\drivers\lsi_sas3.sys [136224 2018-04-17] (Avago Technologies U.S. Inc. -> Avago Technologies)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-11-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198584 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77752 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181816 2023-05-23] (Malwarebytes Inc. -> Malwarebytes)
S3 megasas35; C:\WINDOWS\System32\drivers\megasas35.sys [87632 2018-10-10] (Avago Technologies U.S. Inc. -> Avago Technologies)
S3 percsas3; C:\WINDOWS\System32\drivers\percsas3.sys [75792 2016-09-20] (AVAGO TECHNOLOGIES U.S. INC. -> Avago Technologies)
S3 qcusbser; C:\WINDOWS\System32\drivers\dellusbser.sys [251880 2018-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167432 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43536 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49616 2023-05-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-05-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99608 2023-05-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-05-26 13:21 - 2023-05-26 13:21 - 000148103 _____ C:\Users\renov\Downloads\commande-plt-sur-mesure_9c8a20acecdfdfe79d221321a90f0acf.pdf
2023-05-26 13:19 - 2023-05-26 13:23 - 000031944 _____ C:\Users\renov\Desktop\FRST.txt
2023-05-26 07:10 - 2023-05-26 13:21 - 000000000 ____D C:\FRST
2023-05-26 07:08 - 2023-05-26 07:10 - 002382848 _____ (Farbar) C:\Users\renov\Desktop\FRST64.exe
2023-05-26 07:02 - 2023-05-26 07:02 - 000000000 ____D C:\WINDOWS\{8BFE99CA-A048-445D-8771-1A1BD952EA37}
2023-05-26 06:58 - 2023-05-26 06:58 - 000000000 _____ C:\WINDOWS\invcol.tmp
2023-05-24 15:46 - 2023-05-24 15:46 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-905969777-43035773-1705488793-1002
2023-05-24 15:46 - 2023-05-24 15:46 - 000002413 _____ C:\Users\renov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-05-23 19:21 - 2023-05-23 19:21 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2023-05-23 17:43 - 2023-05-23 17:43 - 000181816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2023-05-23 16:38 - 2023-05-26 06:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-05-23 15:47 - 2023-05-23 15:47 - 000000000 ___HD C:\$WinREAgent
2023-05-21 19:17 - 2023-05-23 16:23 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-05-21 19:17 - 2023-05-21 19:17 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-05-21 19:17 - 2023-05-21 19:17 - 000003470 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-05-11 18:42 - 2023-05-25 15:04 - 000000000 ____D C:\Users\renov\AppData\Local\Malwarebytes
2023-05-11 18:21 - 2023-05-11 18:26 - 000000000 ____D C:\Users\renov\AppData\Local\Google
2023-05-11 18:16 - 2023-05-11 18:16 - 005562976 _____ (Piriform Ltd) C:\Users\renov\Downloads\rcsetup153(1).exe
2023-05-11 18:11 - 2023-05-11 18:11 - 005562976 _____ (Piriform Ltd) C:\Users\renov\Downloads\rcsetup153.exe
2023-05-01 21:51 - 2023-05-01 21:51 - 000000000 _____ C:\Users\renov\Documents\HPOJ8720_Fax_Port
2023-04-25 00:03 - 2023-04-25 00:03 - 000000000 ____D C:\WINDOWS\system32\Drivers\mde
2023-04-24 09:05 - 2023-04-24 09:05 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-03-23 12:37 - 2023-03-23 12:37 - 000000000 ____D C:\Users\renov\AppData\Roaming\HP
2023-03-03 17:33 - 2023-03-03 17:33 - 000318244 _____ C:\Users\renov\Downloads\show.pdf
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-05-26 13:20 - 2022-02-14 08:00 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-05-26 13:15 - 2021-12-17 11:06 - 000000000 ____D C:\Program Files\TeamViewer
2023-05-26 13:13 - 2021-08-21 15:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-05-26 07:37 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-05-26 07:34 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-05-26 07:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-05-26 07:17 - 2022-06-02 12:04 - 000000000 ____D C:\Program Files\CCleaner
2023-05-26 07:12 - 2019-08-30 18:43 - 000000000 ____D C:\Users\renov\AppData\Local\Packages
2023-05-26 07:10 - 2022-06-10 12:32 - 000000000 ____D C:\ProgramData\Temp
2023-05-26 07:06 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-05-26 07:06 - 2019-08-30 18:09 - 000000000 ____D C:\Program Files\Dell
2023-05-26 07:06 - 2019-08-30 18:09 - 000000000 ____D C:\Program Files (x86)\Dell
2023-05-26 06:59 - 2019-08-30 19:05 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-05-26 06:58 - 2019-09-01 10:41 - 000000000 ____D C:\ProgramData\Package Cache
2023-05-26 06:56 - 2019-09-16 09:30 - 000000000 ____D C:\Users\renov\AppData\Roaming\TeamViewer
2023-05-26 06:56 - 2019-09-16 09:30 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2023-05-26 06:55 - 2022-11-15 18:25 - 000000000 ____D C:\Users\renov\AppData\LocalLow\IGDump
2023-05-26 06:55 - 2019-10-20 06:15 - 000000000 ____D C:\Users\renov\AppData\Local\CrashDumps
2023-05-25 15:10 - 2022-07-21 15:30 - 000002361 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2023-05-25 15:10 - 2022-07-21 15:30 - 000002326 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2023-05-25 15:10 - 2020-08-19 06:16 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2023-05-25 15:04 - 2019-08-30 18:08 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2023-05-24 15:46 - 2021-12-11 08:14 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-905969777-43035773-1705488793-1002
2023-05-24 15:46 - 2019-08-30 18:45 - 000000000 ___RD C:\Users\renov\OneDrive
2023-05-23 19:24 - 2019-08-30 19:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-05-23 19:21 - 2019-08-30 18:43 - 000000000 __SHD C:\Users\renov\IntelGraphicsProfiles
2023-05-23 17:48 - 2021-08-21 15:26 - 000000000 ____D C:\Users\renov
2023-05-23 17:48 - 2020-06-25 18:31 - 000002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-05-23 17:41 - 2022-05-27 07:03 - 000008192 ___SH C:\DumpStack.log.tmp
2023-05-23 17:41 - 2021-08-21 16:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-05-23 17:40 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-05-23 16:33 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-05-23 16:28 - 2021-08-21 15:43 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-05-23 16:28 - 2019-12-07 16:50 - 000755174 _____ C:\WINDOWS\system32\perfh00C.dat
2023-05-23 16:28 - 2019-12-07 16:50 - 000141980 _____ C:\WINDOWS\system32\perfc00C.dat
2023-05-21 19:22 - 2021-08-21 16:13 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-05-21 19:22 - 2021-08-21 16:13 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-05-11 23:43 - 2021-08-21 15:12 - 005122360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-05-11 23:36 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-05-11 23:36 - 2019-12-07 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\fr
2023-05-11 23:36 - 2019-12-07 16:50 - 000000000 ____D C:\WINDOWS\system32\fr
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-05-11 23:07 - 2021-08-21 15:18 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-05-11 18:45 - 2020-03-30 09:22 - 000000000 ____D C:\Program Files (x86)\Google
2023-05-11 17:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-05-11 16:23 - 2019-02-06 02:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-05-11 16:22 - 2020-08-21 12:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-05-11 16:19 - 2019-08-31 04:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-05-11 16:05 - 2019-08-31 04:49 - 159583304 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-05-01 21:51 - 2019-09-01 08:39 - 000000000 ____D C:\Users\renov\AppData\Local\HP
2023-05-01 20:49 - 2019-09-10 09:54 - 000000000 ____D C:\Users\renov\AppData\Roaming\Microsoft\Word
2023-04-29 07:04 - 2021-11-29 09:58 - 000000000 ____D C:\Program Files\HP
==================== Fichiers à la racine de certains dossiers ========
2021-06-02 08:42 - 2022-03-22 19:36 - 000000132 _____ () C:\Users\renov\AppData\Roaming\Préfs Format PNG Adobe CS6
2020-12-02 07:38 - 2020-12-02 07:38 - 000000218 _____ () C:\Users\renov\AppData\Local\recently-used.xbel
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\system32\wowreg32.exe [2021-09-15] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par renov (administrateur) sur DESKTOP-8P645V0 (Dell Inc. OptiPlex 9020) (26-05-2023 13:19:03)
Exécuté depuis C:\Users\renov\Desktop\FRST64.exe
Profils chargés: renov
Plate-forme: Microsoft Windows 10 Professionnel Version 22H2 19045.2965 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe ->) (Herospeed Digital Technology Limited -> ) C:\Program Files (x86)\EC-VISION\iVMS320 Server.exe
(C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe ->) (Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserSessionAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Microsoft Corporation) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\WebView2\msedgewebview2.exe <6>
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé] C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (HP Inc. -> Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation -> ) C:\Windows\System32\igfxTray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(RuntimeBroker.exe ->) (Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(RuntimeBroker.exe ->) (Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (HeroSpeed Digital Technology Co.,Ltd -> ) C:\Users\Public\longse_ivms\Database\bin\vlmysqld.exe
(services.exe ->) (Herospeed Digital Technology Limited -> ) C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ecb9604542bb4ba6\RstMwService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.1.108.0_x64__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.2905_none_7dd39c4c7cb9dfa0\TiWorker.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8538872 2016-01-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1415928 2016-01-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6609176 2022-04-11] (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeGCInvoker-1.0] => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" (Pas de fichier)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740920 2022-02-08] (iMobie Inc. -> iMobie Inc.)
HKLM-x32\...\Run: [iVMS320] => C:\Program Files (x86)\EC-VISION\EC VISION.exe [159168 2021-12-14] () [Fichier non signé]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [30870320 2019-12-07] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [30870320 2019-12-07] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [OneDrive] => C:\Users\renov\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2602424 2023-05-24] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [HP OfficeJet Pro 8720 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\ScanToPCActivationApp.exe [3770528 2021-11-15] (HP Inc. -> HP Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740920 2022-02-08] (iMobie Inc. -> iMobie Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe [576184 2022-02-08] (iMobie Inc. -> iMobie Inc.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40454048 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2572960 2021-11-28] (HP Inc. -> Hewlett-Packard Co.) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-905969777-43035773-1705488793-1002\...\RunOnce: [Uninstall 23.086.0423.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\renov\AppData\Local\Microsoft\OneDrive\23.086.0423.0001" (Pas de fichier) <==== ATTENTION
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2022-04-07] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HP a211 Status Monitor: C:\WINDOWS\system32\hpinkstsa211LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3070 B611 series): C:\WINDOWS\system32\HPDiscoPMa211.dll [741536 2021-11-28] (HP Inc. -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\113.0.21244.129\Installer\chrmstp.exe [2023-05-25] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Startup: C:\Users\renov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Enregistrement du produit.lnk [2022-01-31]
ShortcutTarget: Logitech . Enregistrement du produit.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Logitech -> Leader Technologies/Logitech)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {029A3783-4897-48E4-8B12-B70600F57902} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {2901EDDA-2BD9-4741-B36F-31370A6537A7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Task: {36F2BAA9-A713-4EE1-9126-5622D3C9B647} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {55C32C90-90D8-425C-8E40-0FD20422AC14} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1135128 2023-04-04] (HP Inc. -> HP Inc.)
Task: {56F35B57-3ED3-437E-B232-C5A9662BD15C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [228888 2023-04-04] (HP Inc. -> HP Inc.)
Task: {6D641A7F-DCBD-4A7A-B23A-E2995CB76E88} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3330680 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {73C869FC-65E8-4BA0-B4A2-72C081FED4AC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN66CDK1TW => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1135128 2023-04-04] (HP Inc. -> HP Inc.)
Task: {76BE3B46-27F1-4802-8D66-01D116EB589F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [732064 2023-05-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {7A31BEF9-FF1C-4972-992F-81EC1AA2B6B9} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3330680 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {897A0D75-579F-4223-8160-B2937509450B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {97A3C0EA-AA84-429A-937F-3F7044C91B77} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [668464 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {98E8FEF9-4FF5-4BD9-9260-DA49E710A465} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8720 => C:\Program Files\HP\HP OfficeJet Pro 8720\Bin\HPCustPartic.exe [6439584 2021-11-15] (HP Inc. -> HP Inc.)
Task: {A4F3DBAB-313F-4EBC-A253-40EBFDBFFEA5} - System32\Tasks\CCleanerSkipUAC - renov => C:\Program Files\CCleaner\CCleaner.exe [34264480 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {B88CAAA5-0D6D-4710-A743-89654338A15E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-04-04] (HP Inc. -> HP Inc.)
Task: {B9872A3D-9BE3-413A-AE00-C5134EB87C9F} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-05-26] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {D81E7854-76D2-45C6-A641-63C36DB1974D} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "b5610e0a-f8f9-44a9-9148-e428bf7a2380" --version "6.12.10490" --silent
Task: {E32B604A-9D32-4ECC-A985-34ADCFF83D7A} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6b4587ae-5700-4611-b735-6905418dcb8f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\renov\AppData\Local\Microsoft\Edge\User Data\Default [2023-05-26]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\renov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-11-28]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: rc2zvvs7.default
FF ProfilePath: C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\rc2zvvs7.default [2021-09-09]
FF ProfilePath: C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349 [2023-05-26]
FF Notifications: Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349 -> hxxps://app.n26.com; hxxps://iss.shopimind.com; hxxps://drive.google.com
FF Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\appledev@soarinfotech.com.xpi [2023-04-24] [UpdateUrl:hxxps://www.coupert.com/api/v2/extension/ffupdate]
FF Extension: (Dreamer – Bold) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\dreamer-bold-colorway@mozilla.org.xpi [2023-04-24]
FF Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\firefox@ghostery.com.xpi [2023-05-26]
FF Extension: (uBlock Origin) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\uBlock0@raymondhill.net.xpi [2023-05-11]
FF Extension: (Avast Online Security & Privacy) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\wrc@avast.com.xpi [2023-03-03]
FF Extension: (have a fox dream) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{3f1aff6b-0363-410f-b81b-9a286ffb4b10}.xpi [2021-06-06]
FF Extension: (Video DownloadHelper) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-12-10]
FF Extension: (IGRAAL : Cashback & codes promo) - C:\Users\renov\AppData\Roaming\Mozilla\Firefox\Profiles\vyjiah9d.default-release-1568016421349\Extensions\{dbac9680-d559-4cd4-9765-059879e8c467}.xpi [2023-05-23]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [Pas de fichier]
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: Longse.cn/LsIPCCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsIPCCtl\npLsIPCCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> Longse)
FF Plugin-x32: lsjt.com/LsNetClientCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsWebPlugin\npLsNetClientCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
FF Plugin-x32: lsjt.com/LsRcxNetClientCtl -> C:\Program Files (x86)\EC-VISION\ocx\HsRcxWebPlugin\npLsRCXNetClientCtl.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
FF Plugin-x32: lsls.com/LsNvrNetClient -> C:\Program Files (x86)\EC-VISION\ocx\LsNXVRPlugin\npLsNvrNetClient.dll [2021-12-14] (Herospeed Digital Technology Limited -> ls)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-04-03] (Adobe Inc. -> Adobe Inc.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3103824 2021-02-01] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\113.0.21244.129\elevation_service.exe [2032688 2023-05-18] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1063840 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [138448 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [55712 2022-11-07] (Dell Inc -> )
R2 DellClientManagementService; c:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [49880 2023-01-18] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [134560 2022-02-19] (Dell Inc -> Dell)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [858064 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [857032 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [853920 2023-04-04] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-10] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [856992 2023-04-04] (HP Inc. -> HP Inc.)
R2 IVMS320MYSQL; C:\\Users\\Public\\longse_ivms\\Database\\my.ini [5111 ] () [Fichier non signé]
R2 iVMS320_Server; C:\Program Files (x86)\EC-VISION\iVMS320 Watch.exe [40728 2021-12-14] (Herospeed Digital Technology Limited -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9246536 2023-05-23] (Malwarebytes Inc. -> Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [336256 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182296 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-06-23] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-06-23] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [137056 2022-06-21] (Dell Inc -> Dell Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Fichier non signé]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16184216 2022-06-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\NisSrv.exe [3216064 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MsMpEng.exe [133544 2023-05-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BHTPCRDR; C:\WINDOWS\System32\drivers\bhtpcrdr.sys [180944 2019-04-03] (BayHub Technology Inc. -> BayHubTech/O2Micro)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287232 2022-06-20] (Microsoft Corporation) [Fichier non signé]
R3 DBUtilDrv2; C:\WINDOWS\System32\drivers\DBUtilDrv2.sys [24968 2023-05-26] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [35704 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [37808 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159760 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2022-11-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 imausbhpal; C:\WINDOWS\System32\drivers\imausbhpal.sys [671224 2017-05-19] (Intel(R) Wireless Connectivity Solutions -> )
S3 imausbhub; C:\WINDOWS\System32\drivers\imausbhub.sys [479736 2017-05-19] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 LSI_SAS3; C:\WINDOWS\System32\drivers\lsi_sas3.sys [136224 2018-04-17] (Avago Technologies U.S. Inc. -> Avago Technologies)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-11-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198584 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77752 2023-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181816 2023-05-23] (Malwarebytes Inc. -> Malwarebytes)
S3 megasas35; C:\WINDOWS\System32\drivers\megasas35.sys [87632 2018-10-10] (Avago Technologies U.S. Inc. -> Avago Technologies)
S3 percsas3; C:\WINDOWS\System32\drivers\percsas3.sys [75792 2016-09-20] (AVAGO TECHNOLOGIES U.S. INC. -> Avago Technologies)
S3 qcusbser; C:\WINDOWS\System32\drivers\dellusbser.sys [251880 2018-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167432 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43536 2021-06-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49616 2023-05-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-05-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99608 2023-05-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-05-26 13:21 - 2023-05-26 13:21 - 000148103 _____ C:\Users\renov\Downloads\commande-plt-sur-mesure_9c8a20acecdfdfe79d221321a90f0acf.pdf
2023-05-26 13:19 - 2023-05-26 13:23 - 000031944 _____ C:\Users\renov\Desktop\FRST.txt
2023-05-26 07:10 - 2023-05-26 13:21 - 000000000 ____D C:\FRST
2023-05-26 07:08 - 2023-05-26 07:10 - 002382848 _____ (Farbar) C:\Users\renov\Desktop\FRST64.exe
2023-05-26 07:02 - 2023-05-26 07:02 - 000000000 ____D C:\WINDOWS\{8BFE99CA-A048-445D-8771-1A1BD952EA37}
2023-05-26 06:58 - 2023-05-26 06:58 - 000000000 _____ C:\WINDOWS\invcol.tmp
2023-05-24 15:46 - 2023-05-24 15:46 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-905969777-43035773-1705488793-1002
2023-05-24 15:46 - 2023-05-24 15:46 - 000002413 _____ C:\Users\renov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-05-23 19:21 - 2023-05-23 19:21 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2023-05-23 17:43 - 2023-05-23 17:43 - 000181816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2023-05-23 16:38 - 2023-05-26 06:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-05-23 15:47 - 2023-05-23 15:47 - 000000000 ___HD C:\$WinREAgent
2023-05-21 19:17 - 2023-05-23 16:23 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-05-21 19:17 - 2023-05-21 19:17 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-05-21 19:17 - 2023-05-21 19:17 - 000003470 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-05-11 18:42 - 2023-05-25 15:04 - 000000000 ____D C:\Users\renov\AppData\Local\Malwarebytes
2023-05-11 18:21 - 2023-05-11 18:26 - 000000000 ____D C:\Users\renov\AppData\Local\Google
2023-05-11 18:16 - 2023-05-11 18:16 - 005562976 _____ (Piriform Ltd) C:\Users\renov\Downloads\rcsetup153(1).exe
2023-05-11 18:11 - 2023-05-11 18:11 - 005562976 _____ (Piriform Ltd) C:\Users\renov\Downloads\rcsetup153.exe
2023-05-01 21:51 - 2023-05-01 21:51 - 000000000 _____ C:\Users\renov\Documents\HPOJ8720_Fax_Port
2023-04-25 00:03 - 2023-04-25 00:03 - 000000000 ____D C:\WINDOWS\system32\Drivers\mde
2023-04-24 09:05 - 2023-04-24 09:05 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-03-23 12:37 - 2023-03-23 12:37 - 000000000 ____D C:\Users\renov\AppData\Roaming\HP
2023-03-03 17:33 - 2023-03-03 17:33 - 000318244 _____ C:\Users\renov\Downloads\show.pdf
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-05-26 13:20 - 2022-02-14 08:00 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-05-26 13:15 - 2021-12-17 11:06 - 000000000 ____D C:\Program Files\TeamViewer
2023-05-26 13:13 - 2021-08-21 15:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-05-26 07:37 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-05-26 07:34 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-05-26 07:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-05-26 07:17 - 2022-06-02 12:04 - 000000000 ____D C:\Program Files\CCleaner
2023-05-26 07:12 - 2019-08-30 18:43 - 000000000 ____D C:\Users\renov\AppData\Local\Packages
2023-05-26 07:10 - 2022-06-10 12:32 - 000000000 ____D C:\ProgramData\Temp
2023-05-26 07:06 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-05-26 07:06 - 2019-08-30 18:09 - 000000000 ____D C:\Program Files\Dell
2023-05-26 07:06 - 2019-08-30 18:09 - 000000000 ____D C:\Program Files (x86)\Dell
2023-05-26 06:59 - 2019-08-30 19:05 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-05-26 06:58 - 2019-09-01 10:41 - 000000000 ____D C:\ProgramData\Package Cache
2023-05-26 06:56 - 2019-09-16 09:30 - 000000000 ____D C:\Users\renov\AppData\Roaming\TeamViewer
2023-05-26 06:56 - 2019-09-16 09:30 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2023-05-26 06:55 - 2022-11-15 18:25 - 000000000 ____D C:\Users\renov\AppData\LocalLow\IGDump
2023-05-26 06:55 - 2019-10-20 06:15 - 000000000 ____D C:\Users\renov\AppData\Local\CrashDumps
2023-05-25 15:10 - 2022-07-21 15:30 - 000002361 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2023-05-25 15:10 - 2022-07-21 15:30 - 000002326 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2023-05-25 15:10 - 2020-08-19 06:16 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2023-05-25 15:04 - 2019-08-30 18:08 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2023-05-24 15:46 - 2021-12-11 08:14 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-905969777-43035773-1705488793-1002
2023-05-24 15:46 - 2019-08-30 18:45 - 000000000 ___RD C:\Users\renov\OneDrive
2023-05-23 19:24 - 2019-08-30 19:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-05-23 19:21 - 2019-08-30 18:43 - 000000000 __SHD C:\Users\renov\IntelGraphicsProfiles
2023-05-23 17:48 - 2021-08-21 15:26 - 000000000 ____D C:\Users\renov
2023-05-23 17:48 - 2020-06-25 18:31 - 000002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-05-23 17:41 - 2022-05-27 07:03 - 000008192 ___SH C:\DumpStack.log.tmp
2023-05-23 17:41 - 2021-08-21 16:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-05-23 17:40 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-05-23 16:33 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-05-23 16:28 - 2021-08-21 15:43 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-05-23 16:28 - 2019-12-07 16:50 - 000755174 _____ C:\WINDOWS\system32\perfh00C.dat
2023-05-23 16:28 - 2019-12-07 16:50 - 000141980 _____ C:\WINDOWS\system32\perfc00C.dat
2023-05-21 19:22 - 2021-08-21 16:13 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-05-21 19:22 - 2021-08-21 16:13 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-05-11 23:43 - 2021-08-21 15:12 - 005122360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-05-11 23:36 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-05-11 23:36 - 2019-12-07 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\fr
2023-05-11 23:36 - 2019-12-07 16:50 - 000000000 ____D C:\WINDOWS\system32\fr
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-05-11 23:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-05-11 23:07 - 2021-08-21 15:18 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-05-11 18:45 - 2020-03-30 09:22 - 000000000 ____D C:\Program Files (x86)\Google
2023-05-11 17:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-05-11 16:23 - 2019-02-06 02:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-05-11 16:22 - 2020-08-21 12:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-05-11 16:19 - 2019-08-31 04:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-05-11 16:05 - 2019-08-31 04:49 - 159583304 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-05-01 21:51 - 2019-09-01 08:39 - 000000000 ____D C:\Users\renov\AppData\Local\HP
2023-05-01 20:49 - 2019-09-10 09:54 - 000000000 ____D C:\Users\renov\AppData\Roaming\Microsoft\Word
2023-04-29 07:04 - 2021-11-29 09:58 - 000000000 ____D C:\Program Files\HP
==================== Fichiers à la racine de certains dossiers ========
2021-06-02 08:42 - 2022-03-22 19:36 - 000000132 _____ () C:\Users\renov\AppData\Roaming\Préfs Format PNG Adobe CS6
2020-12-02 07:38 - 2020-12-02 07:38 - 000000218 _____ () C:\Users\renov\AppData\Local\recently-used.xbel
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\WINDOWS\system32\wowreg32.exe [2021-09-15] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================