Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-11-2023 02
Exécuté par VasseJulien (administrateur) sur JULIEN (LENOVO 90C2003QFR) (11-11-2023 12:22:17)
Exécuté depuis C:\Users\VasseJulien\Downloads\FRST64 (2).exe
Profils chargés: VasseJulien
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3570 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\Program Files\txgameassistant\appmarket\AppMarket.exe ->) (Tencent Technology(Shenzhen) Company Limited -> ) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe
(C:\Program Files\txgameassistant\appmarket\AppMarket.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\TBSWebRenderer.exe <2>
(C:\Program Files\txgameassistant\appmarket\QMEmulatorService.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\AppMarket.exe
(C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2023.1101.0_x64__8wekyb3d8bbwe\olk.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.44\msedgewebview2.exe <6>
(C:\Windows\jmesoft\Service.exe ->) () [Fichier non signé] C:\Windows\jmesoft\JME_LOAD.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(explorer.exe ->) (Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\VasseJulien\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler64.exe
(LENOVO -> Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo) [Fichier non signé] C:\Windows\jmesoft\hotkey.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [Fichier non signé] C:\Windows\jmesoft\Service.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Intel(R) Corporation) [Fichier non signé] C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(services.exe ->) (LENOVO -> LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\QMEmulatorService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2023.1101.0_x64__8wekyb3d8bbwe\olk.exe
(svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-26] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [jmekey] => C:\WINDOWS\jmesoft\hotkey.exe [118784 2013-07-24] (Lenovo) [Fichier non signé]
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-08-16] () [Fichier non signé]
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo (Beijing) Limited -> Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink -> CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] (VTech Electronics North America, LLC -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2098232 2020-09-24] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2020-06-05] (Adobe Inc. -> )
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29494400 2016-07-13] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [BingSvc] => C:\Users\VasseJulien\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4234088 2022-10-19] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Spotify] => C:\Users\VasseJulien\AppData\Roaming\Spotify\Spotify.exe [25972968 2018-12-24] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Discord] => C:\Users\VasseJulien\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [677512 2020-09-01] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33526752 2021-10-28] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [MicrosoftEdgeAutoLaunch_DAF6F0B3BD6749852D8B776BD93E2595] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3894824 2023-11-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [64958880 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Uninstall 23.209.1008.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\23.209.1008.0002" [0 2023-11-11] () <==== ATTENTION [zéro octet Fichier/Dossier]
HKLM\...\Windows x64\Print Processors\Canon MG2500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBX.DLL [30208 2023-07-07] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series: C:\WINDOWS\system32\CNMLMBX.DLL [391168 2023-07-07] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: CNMLMDR.DLL (Pas de fichier)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\119.0.6045.124\Installer\chrmstp.exe [2023-11-10] (Google LLC -> Google LLC)
Startup: C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2020-08-29]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\VasseJulien\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook, Inc. -> Facebook)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {6E92B909-D46D-4497-B2F0-F2E3D292ECC6} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {3DFA6A18-5701-4741-8C5F-E7229EF73380} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3807712 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {CA4ED855-0375-4846-9EBA-71D428B03DF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {C7598E26-7E2A-4DD8-B1D2-A140271C265B} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [754472 2021-04-05] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {9DC41C48-CCB6-4F46-A81B-DA21FC55585B} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2021-11-10] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {E0FF9DE0-9D87-4702-AA01-47E7A8BB5128} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-12-13] (Google Inc -> Google LLC)
Task: {A84B36DE-6D47-49F3-9F69-40D0D11930CD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-12-13] (Google Inc -> Google LLC)
Task: {04EAB539-65B7-48C0-AF9E-2028205B23E9} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [35584 2014-07-30] (LENOVO -> )
Task: {8D40B6DF-C020-41A7-8581-984C8CEB8E84} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16672 2014-12-01] (LENOVO -> Lenovo)
Task: {FC95844F-B642-49CF-A3C2-A242CB80F419} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [17184 2014-09-10] (LENOVO -> Lenovo)
Task: {21962240-ADF4-4D8E-A336-61198ACF2A3E} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [270208 2014-12-01] (LENOVO -> Lenovo)
Task: {A9725415-C1D8-462C-AB40-DD0C47F6B9D1} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1360672 2014-12-01] (LENOVO -> Lenovo)
Task: {5684D600-2E9B-453C-99A6-E10FE3639AD9} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-12-01] (LENOVO -> )
Task: {D29D3D1C-6C58-46CF-9464-06EC894B65D9} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-12-01] (LENOVO -> )
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {F057008B-09F3-4C38-8C9F-F963269E2622} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\rundll32.exe [71680 2023-10-11] (Microsoft Windows -> Microsoft Corporation) -> C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {994591F7-2272-4139-B9B8-5B6138124AED} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {55748932-35B2-461B-9C23-B6FAB8E3D8D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4AD8473-1E91-4B70-B485-DBE50276E31D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {76955865-DE98-4143-B01A-DFF99CA0A4D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {75A10F22-D54D-469F-832A-2E001D663582} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {275D995F-8827-4220-AF82-E8A325F4AB7C} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-11-06] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {58666A00-448E-4812-AB99-170863B0BE97} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [723872 2023-11-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {77C9F7E1-4C84-4761-B439-092AD76A2201} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [95192 2013-03-08] (CyberLink Corp. -> CyberLink Corp.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ba7357e7-2f69-4b99-a5de-5bc481adc745}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\VasseJulien\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-11]
Edge HomePage: Default -> hxxp://www.google.com
Edge Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-11-11]
Edge Extension: (Edge relevant text changes) - C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-11-11]
FireFox:
========
FF DefaultProfile: 5zprobti.default
FF ProfilePath: C:\Users\VasseJulien\AppData\Roaming\Mozilla\Firefox\Profiles\5zprobti.default [2023-03-29]
FF ProfilePath: C:\Users\VasseJulien\AppData\Roaming\Mozilla\Firefox\Profiles\84ketp3e.default-release [2023-09-06]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2021-04-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2021-04-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-09-24] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] (Apple Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-09-24] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default [2023-11-11]
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxp://www.trovigo.com/?gd=&ctid=CT3241952&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=61&CUI=&UM=&UP=SP744F5A02-BFE8-4274-9DD4-C3552DAB90A3&D=112415&SSPV=","hxxp://search.conduit.com/?ctid=CT3241952&SearchSource=48"
CHR Extension: (Adblock360) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjchineajlfhdlaonabjhlllhmdlmdc [2022-11-11]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2022-08-29]
CHR Extension: (Tampermonkey) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2023-06-23]
CHR Extension: (Return YouTube Dislike) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-10-19]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-11-03]
CHR Extension: (Roblox+) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfbnmfgkohlfclfnplnlenbalpppohkm [2023-07-06]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-29]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-08-23]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-08-29]
CHR HomePage: Profile 1 -> msn.com
CHR DefaultSearchURL: Profile 1 -> hxxps://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSuggestURL: Profile 1 -> hxxps://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Extension: (Docs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2020-08-28]
CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2020-08-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-08-28]
CHR Extension: (Chrome Media Router) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-08-28]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-08-29]
CHR HomePage: Profile 2 -> msn.com
CHR DefaultSearchURL: Profile 2 -> hxxps://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSuggestURL: Profile 2 -> hxxps://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Extension: (Slides) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-10-15]
CHR Extension: (Docs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2020-10-15]
CHR Extension: (Google Drive) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-15]
CHR Extension: (YouTube) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-10-15]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-03-02]
CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2020-10-15]
CHR Extension: (Sheets) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-10-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-02]
CHR Extension: (Gmail) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-28]
CHR Extension: (Chrome Media Router) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-02]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\System Profile [2022-08-29]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-09-24] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3966432 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-02] (BattlEye Innovations e.K. -> )
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2020-01-25] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 GameforgeClientService; C:\Program Files (x86)\GameforgeClient\gfservice.exe [562848 2020-08-06] (Gameforge 4D GmbH -> )
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] (Canon Inc. -> )
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-16] () [Fichier non signé]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (LENOVO -> Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-07-30] (LENOVO -> LENOVO INCORPORATED.)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-12-01] (LENOVO -> )
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes Corporation -> Malwarebytes)
R2 QMEmulatorService; C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe [198736 2020-08-15] (Tencent Technology(Shenzhen) Company Limited -> Tencent)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7793960 2021-04-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-06-13] (Bluestack Systems, Inc -> Bluestack System Inc.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320744 2021-11-10] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152688 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [126624 2019-01-28] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72536 2019-01-28] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [113016 2019-01-30] (Malwarebytes Corporation -> Malwarebytes)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85656 2016-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2020-06-28] () [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-11 12:22 - 2023-11-11 12:26 - 000031237 _____ C:\Users\VasseJulien\Downloads\FRST.txt
2023-11-11 12:21 - 2023-11-11 12:24 - 000000000 ____D C:\FRST
2023-11-11 12:20 - 2023-11-11 12:20 - 002383872 _____ (Farbar) C:\Users\VasseJulien\Downloads\FRST64 (2).exe
2023-11-11 12:18 - 2023-11-11 12:18 - 002383872 _____ (Farbar) C:\Users\VasseJulien\Downloads\Non confirmé 523666.crdownload
2023-11-11 12:16 - 2023-11-11 12:16 - 002084864 _____ (Farbar) C:\Users\VasseJulien\Downloads\FRST.exe
2023-11-10 17:39 - 2023-11-10 17:40 - 000772356 _____ C:\WINDOWS\Minidump\111023-41656-01.dmp
2023-11-06 20:54 - 2023-11-08 22:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-11-02 14:59 - 2023-11-02 14:59 - 000055723 _____ C:\Users\VasseJulien\Downloads\Pix_diapo (1).pptx
2023-11-02 14:59 - 2023-11-02 14:59 - 000013159 _____ C:\Users\VasseJulien\Downloads\Pix_diapo (1).odp
2023-10-15 20:01 - 2023-10-21 12:21 - 000000139 _____ C:\Users\VasseJulien\Downloads\tinytask.ini
2023-10-15 17:43 - 2023-10-15 17:43 - 000036352 _____ () C:\Users\VasseJulien\Downloads\tinytask.exe
2023-10-13 22:19 - 2023-10-13 22:19 - 000000000 ____D C:\ProgramData\PLUG
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-11-11 12:12 - 2018-07-03 19:32 - 000000000 ____D C:\ProgramData\Packages
2023-11-11 12:12 - 2018-05-26 12:40 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\PlaceholderTileLogoFolder
2023-11-11 12:12 - 2017-12-21 21:04 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\Packages
2023-11-11 12:07 - 2020-03-27 17:55 - 000000441 _____ C:\WINDOWS\BRWMARK.INI
2023-11-11 11:53 - 2021-12-17 00:29 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-11-11 11:53 - 2019-12-13 19:43 - 000000000 ____D C:\Program Files (x86)\Google
2023-11-11 11:50 - 2021-12-13 17:49 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1400478732-2064027374-4255688365-1001
2023-11-11 11:50 - 2021-05-16 10:39 - 000002487 _____ C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-11 11:50 - 2021-03-29 12:51 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1400478732-2064027374-4255688365-1001
2023-11-11 11:49 - 2023-01-18 14:27 - 000002291 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-11-11 11:49 - 2020-06-18 07:22 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-11-11 11:48 - 2021-03-29 12:51 - 000003916 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-11-11 11:48 - 2021-03-29 12:51 - 000003792 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-11-11 11:48 - 2020-04-02 10:16 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-11-11 11:41 - 2016-10-23 11:35 - 000000000 ____D C:\ProgramData\NVIDIA
2023-11-10 20:02 - 2021-03-29 12:21 - 000000000 ____D C:\Users\VasseJulien
2023-11-10 20:01 - 2021-03-29 12:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-11-10 19:39 - 2017-02-12 14:41 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\CrashDumps
2023-11-10 17:43 - 2021-03-29 12:34 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-10 17:43 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2023-11-10 17:43 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2023-11-10 17:43 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-11-10 17:41 - 2021-04-06 13:08 - 000000000 ____D C:\WINDOWS\Minidump
2023-11-10 17:39 - 2021-04-06 13:08 - 629660117 _____ C:\WINDOWS\MEMORY.DMP
2023-11-10 17:39 - 2021-03-29 12:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-10 17:39 - 2021-03-29 12:13 - 000008192 ___SH C:\DumpStack.log.tmp
2023-11-10 02:24 - 2019-12-13 19:45 - 000002310 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-11-09 21:49 - 2023-07-16 18:09 - 000001449 _____ C:\Users\VasseJulien\Desktop\Roblox Player.lnk
2023-11-09 21:49 - 2022-08-06 19:01 - 000001277 _____ C:\Users\VasseJulien\Desktop\Roblox Studio.lnk
2023-11-09 21:49 - 2019-12-21 14:32 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2023-11-08 22:00 - 2023-03-29 12:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-11-08 19:38 - 2020-03-27 17:55 - 000000034 _____ C:\WINDOWS\SysWOW64\BD2030.DAT
2023-11-07 16:03 - 2018-03-03 08:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-11-07 01:48 - 2023-03-29 12:48 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-11-03 22:53 - 2020-09-30 15:32 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-01 19:43 - 2015-11-21 18:26 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\.minecraft
2023-10-30 22:51 - 2019-11-30 13:27 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\Discord
2023-10-30 22:51 - 2019-11-30 13:26 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\Discord
2023-10-30 20:19 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-10-30 20:05 - 2021-03-29 12:51 - 000003688 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-30 20:05 - 2021-03-29 12:51 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-10-14 00:47 - 2019-12-21 14:32 - 000000255 _____ C:\Users\VasseJulien\AppData\LocalLow\rbxcsettings.rbx
2023-10-13 18:19 - 2022-02-18 13:20 - 000000000 ____D C:\Program Files\RUXIM
2023-10-12 19:57 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
==================== Fichiers à la racine de certains dossiers ========
2023-04-11 13:24 - 2023-04-11 13:24 - 000000910 _____ () C:\Users\VasseJulien\AppData\Roaming\AdobeWLCMR2Cache.dat
2015-11-22 00:41 - 2022-07-12 21:15 - 000000125 _____ () C:\Users\VasseJulien\AppData\Roaming\D2Info0
2015-12-06 21:37 - 2018-04-07 08:42 - 000000129 _____ () C:\Users\VasseJulien\AppData\Roaming\D2Info1
2015-11-22 00:41 - 2022-07-10 20:31 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_1
2015-11-22 01:11 - 2022-07-12 22:27 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_2
2015-11-22 01:12 - 2018-08-29 15:05 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_3
2015-11-22 01:12 - 2017-04-11 18:34 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_4
2015-11-22 11:20 - 2016-05-16 13:18 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_5
2016-05-16 13:32 - 2016-05-16 14:19 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_6
2015-12-06 21:37 - 2018-03-25 09:36 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_1
2015-12-13 15:10 - 2018-04-07 08:46 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_2
2016-01-24 12:40 - 2018-03-24 10:27 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_3
2016-03-06 19:02 - 2016-06-05 19:43 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_4
2016-06-05 23:06 - 2016-06-05 23:41 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_5
2022-09-23 20:41 - 2022-09-23 20:42 - 000000278 _____ () C:\Users\VasseJulien\AppData\Roaming\MelonLoader.Installer.cfg
2018-09-30 15:44 - 2018-10-03 13:00 - 000000011 _____ () C:\Users\VasseJulien\AppData\Roaming\RegPorts-0
2015-11-21 22:36 - 2015-11-21 22:36 - 000000045 _____ () C:\Users\VasseJulien\AppData\Roaming\WB.CFG
2020-04-02 10:14 - 2020-04-02 10:14 - 000000410 _____ () C:\Users\VasseJulien\AppData\Local\oobelibMkey.log
2018-02-15 10:24 - 2018-02-15 10:25 - 050090848 _____ (Sony) C:\Users\VasseJulien\AppData\Local\pcc.exe
2020-03-02 15:46 - 2020-03-02 15:50 - 000012477 _____ () C:\Users\VasseJulien\AppData\Local\PlariumPlay.log
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par VasseJulien (administrateur) sur JULIEN (LENOVO 90C2003QFR) (11-11-2023 12:22:17)
Exécuté depuis C:\Users\VasseJulien\Downloads\FRST64 (2).exe
Profils chargés: VasseJulien
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3570 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\Program Files\txgameassistant\appmarket\AppMarket.exe ->) (Tencent Technology(Shenzhen) Company Limited -> ) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe
(C:\Program Files\txgameassistant\appmarket\AppMarket.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\TBSWebRenderer.exe <2>
(C:\Program Files\txgameassistant\appmarket\QMEmulatorService.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\AppMarket.exe
(C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2023.1101.0_x64__8wekyb3d8bbwe\olk.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.44\msedgewebview2.exe <6>
(C:\Windows\jmesoft\Service.exe ->) () [Fichier non signé] C:\Windows\jmesoft\JME_LOAD.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(explorer.exe ->) (Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\VasseJulien\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler64.exe
(LENOVO -> Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo) [Fichier non signé] C:\Windows\jmesoft\hotkey.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [Fichier non signé] C:\Windows\jmesoft\Service.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Intel(R) Corporation) [Fichier non signé] C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(services.exe ->) (LENOVO -> LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files\txgameassistant\appmarket\QMEmulatorService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2023.1101.0_x64__8wekyb3d8bbwe\olk.exe
(svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-26] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [jmekey] => C:\WINDOWS\jmesoft\hotkey.exe [118784 2013-07-24] (Lenovo) [Fichier non signé]
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-08-16] () [Fichier non signé]
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo (Beijing) Limited -> Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-04] (CyberLink -> CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] (VTech Electronics North America, LLC -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2098232 2020-09-24] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2020-06-05] (Adobe Inc. -> )
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29494400 2016-07-13] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [BingSvc] => C:\Users\VasseJulien\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4234088 2022-10-19] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Spotify] => C:\Users\VasseJulien\AppData\Roaming\Spotify\Spotify.exe [25972968 2018-12-24] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [Discord] => C:\Users\VasseJulien\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [677512 2020-09-01] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33526752 2021-10-28] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\Run: [MicrosoftEdgeAutoLaunch_DAF6F0B3BD6749852D8B776BD93E2595] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3894824 2023-11-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [64958880 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1400478732-2064027374-4255688365-1001\...\RunOnce: [Uninstall 23.209.1008.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\VasseJulien\AppData\Local\Microsoft\OneDrive\23.209.1008.0002" [0 2023-11-11] () <==== ATTENTION [zéro octet Fichier/Dossier]
HKLM\...\Windows x64\Print Processors\Canon MG2500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBX.DLL [30208 2023-07-07] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2500 series: C:\WINDOWS\system32\CNMLMBX.DLL [391168 2023-07-07] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: CNMLMDR.DLL (Pas de fichier)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\119.0.6045.124\Installer\chrmstp.exe [2023-11-10] (Google LLC -> Google LLC)
Startup: C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2020-08-29]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\VasseJulien\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook, Inc. -> Facebook)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {6E92B909-D46D-4497-B2F0-F2E3D292ECC6} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {3DFA6A18-5701-4741-8C5F-E7229EF73380} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3807712 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {CA4ED855-0375-4846-9EBA-71D428B03DF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {C7598E26-7E2A-4DD8-B1D2-A140271C265B} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [754472 2021-04-05] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {9DC41C48-CCB6-4F46-A81B-DA21FC55585B} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2021-11-10] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {E0FF9DE0-9D87-4702-AA01-47E7A8BB5128} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-12-13] (Google Inc -> Google LLC)
Task: {A84B36DE-6D47-49F3-9F69-40D0D11930CD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-12-13] (Google Inc -> Google LLC)
Task: {04EAB539-65B7-48C0-AF9E-2028205B23E9} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [35584 2014-07-30] (LENOVO -> )
Task: {8D40B6DF-C020-41A7-8581-984C8CEB8E84} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16672 2014-12-01] (LENOVO -> Lenovo)
Task: {FC95844F-B642-49CF-A3C2-A242CB80F419} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [17184 2014-09-10] (LENOVO -> Lenovo)
Task: {21962240-ADF4-4D8E-A336-61198ACF2A3E} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [270208 2014-12-01] (LENOVO -> Lenovo)
Task: {A9725415-C1D8-462C-AB40-DD0C47F6B9D1} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1360672 2014-12-01] (LENOVO -> Lenovo)
Task: {5684D600-2E9B-453C-99A6-E10FE3639AD9} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-12-01] (LENOVO -> )
Task: {D29D3D1C-6C58-46CF-9464-06EC894B65D9} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-12-01] (LENOVO -> )
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {F057008B-09F3-4C38-8C9F-F963269E2622} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\rundll32.exe [71680 2023-10-11] (Microsoft Windows -> Microsoft Corporation) -> C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {994591F7-2272-4139-B9B8-5B6138124AED} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {55748932-35B2-461B-9C23-B6FAB8E3D8D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4AD8473-1E91-4B70-B485-DBE50276E31D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {76955865-DE98-4143-B01A-DFF99CA0A4D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {75A10F22-D54D-469F-832A-2E001D663582} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {275D995F-8827-4220-AF82-E8A325F4AB7C} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-11-06] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {58666A00-448E-4812-AB99-170863B0BE97} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [723872 2023-11-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {77C9F7E1-4C84-4761-B439-092AD76A2201} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [95192 2013-03-08] (CyberLink Corp. -> CyberLink Corp.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ba7357e7-2f69-4b99-a5de-5bc481adc745}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\VasseJulien\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-11]
Edge HomePage: Default -> hxxp://www.google.com
Edge Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-11-11]
Edge Extension: (Edge relevant text changes) - C:\Users\VasseJulien\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-11-11]
FireFox:
========
FF DefaultProfile: 5zprobti.default
FF ProfilePath: C:\Users\VasseJulien\AppData\Roaming\Mozilla\Firefox\Profiles\5zprobti.default [2023-03-29]
FF ProfilePath: C:\Users\VasseJulien\AppData\Roaming\Mozilla\Firefox\Profiles\84ketp3e.default-release [2023-09-06]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2021-04-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2021-04-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-09-24] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] (Apple Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-09-24] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default [2023-11-11]
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxp://www.trovigo.com/?gd=&ctid=CT3241952&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=61&CUI=&UM=&UP=SP744F5A02-BFE8-4274-9DD4-C3552DAB90A3&D=112415&SSPV=","hxxp://search.conduit.com/?ctid=CT3241952&SearchSource=48"
CHR Extension: (Adblock360) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjchineajlfhdlaonabjhlllhmdlmdc [2022-11-11]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2022-08-29]
CHR Extension: (Tampermonkey) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2023-06-23]
CHR Extension: (Return YouTube Dislike) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-10-19]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-11-03]
CHR Extension: (Roblox+) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfbnmfgkohlfclfnplnlenbalpppohkm [2023-07-06]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-29]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-08-23]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-08-29]
CHR HomePage: Profile 1 -> msn.com
CHR DefaultSearchURL: Profile 1 -> hxxps://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSuggestURL: Profile 1 -> hxxps://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Extension: (Docs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2020-08-28]
CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2020-08-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-08-28]
CHR Extension: (Chrome Media Router) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-08-28]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-08-29]
CHR HomePage: Profile 2 -> msn.com
CHR DefaultSearchURL: Profile 2 -> hxxps://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSuggestURL: Profile 2 -> hxxps://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Extension: (Slides) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-10-15]
CHR Extension: (Docs) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2020-10-15]
CHR Extension: (Google Drive) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-15]
CHR Extension: (YouTube) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-10-15]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-03-02]
CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2020-10-15]
CHR Extension: (Sheets) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-10-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-02]
CHR Extension: (Gmail) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-28]
CHR Extension: (Chrome Media Router) - C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-02]
CHR Profile: C:\Users\VasseJulien\AppData\Local\Google\Chrome\User Data\System Profile [2022-08-29]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-09-24] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3966432 2023-08-25] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-02] (BattlEye Innovations e.K. -> )
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2020-01-25] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 GameforgeClientService; C:\Program Files (x86)\GameforgeClient\gfservice.exe [562848 2020-08-06] (Gameforge 4D GmbH -> )
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] (Canon Inc. -> )
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-16] () [Fichier non signé]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (LENOVO -> Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-07-30] (LENOVO -> LENOVO INCORPORATED.)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-12-01] (LENOVO -> )
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes Corporation -> Malwarebytes)
R2 QMEmulatorService; C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe [198736 2020-08-15] (Tencent Technology(Shenzhen) Company Limited -> Tencent)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7793960 2021-04-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-06-13] (Bluestack Systems, Inc -> Bluestack System Inc.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320744 2021-11-10] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152688 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [126624 2019-01-28] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72536 2019-01-28] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [113016 2019-01-30] (Malwarebytes Corporation -> Malwarebytes)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85656 2016-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2020-06-28] () [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-11 12:22 - 2023-11-11 12:26 - 000031237 _____ C:\Users\VasseJulien\Downloads\FRST.txt
2023-11-11 12:21 - 2023-11-11 12:24 - 000000000 ____D C:\FRST
2023-11-11 12:20 - 2023-11-11 12:20 - 002383872 _____ (Farbar) C:\Users\VasseJulien\Downloads\FRST64 (2).exe
2023-11-11 12:18 - 2023-11-11 12:18 - 002383872 _____ (Farbar) C:\Users\VasseJulien\Downloads\Non confirmé 523666.crdownload
2023-11-11 12:16 - 2023-11-11 12:16 - 002084864 _____ (Farbar) C:\Users\VasseJulien\Downloads\FRST.exe
2023-11-10 17:39 - 2023-11-10 17:40 - 000772356 _____ C:\WINDOWS\Minidump\111023-41656-01.dmp
2023-11-06 20:54 - 2023-11-08 22:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-11-02 14:59 - 2023-11-02 14:59 - 000055723 _____ C:\Users\VasseJulien\Downloads\Pix_diapo (1).pptx
2023-11-02 14:59 - 2023-11-02 14:59 - 000013159 _____ C:\Users\VasseJulien\Downloads\Pix_diapo (1).odp
2023-10-15 20:01 - 2023-10-21 12:21 - 000000139 _____ C:\Users\VasseJulien\Downloads\tinytask.ini
2023-10-15 17:43 - 2023-10-15 17:43 - 000036352 _____ () C:\Users\VasseJulien\Downloads\tinytask.exe
2023-10-13 22:19 - 2023-10-13 22:19 - 000000000 ____D C:\ProgramData\PLUG
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-11-11 12:19 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-11-11 12:12 - 2018-07-03 19:32 - 000000000 ____D C:\ProgramData\Packages
2023-11-11 12:12 - 2018-05-26 12:40 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\PlaceholderTileLogoFolder
2023-11-11 12:12 - 2017-12-21 21:04 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\Packages
2023-11-11 12:07 - 2020-03-27 17:55 - 000000441 _____ C:\WINDOWS\BRWMARK.INI
2023-11-11 11:53 - 2021-12-17 00:29 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-11-11 11:53 - 2019-12-13 19:43 - 000000000 ____D C:\Program Files (x86)\Google
2023-11-11 11:50 - 2021-12-13 17:49 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1400478732-2064027374-4255688365-1001
2023-11-11 11:50 - 2021-05-16 10:39 - 000002487 _____ C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-11 11:50 - 2021-03-29 12:51 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1400478732-2064027374-4255688365-1001
2023-11-11 11:49 - 2023-01-18 14:27 - 000002291 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-11-11 11:49 - 2020-06-18 07:22 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-11-11 11:48 - 2021-03-29 12:51 - 000003916 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-11-11 11:48 - 2021-03-29 12:51 - 000003792 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-11-11 11:48 - 2020-04-02 10:16 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-11-11 11:41 - 2016-10-23 11:35 - 000000000 ____D C:\ProgramData\NVIDIA
2023-11-10 20:02 - 2021-03-29 12:21 - 000000000 ____D C:\Users\VasseJulien
2023-11-10 20:01 - 2021-03-29 12:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-11-10 19:39 - 2017-02-12 14:41 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\CrashDumps
2023-11-10 17:43 - 2021-03-29 12:34 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-10 17:43 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2023-11-10 17:43 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2023-11-10 17:43 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-11-10 17:41 - 2021-04-06 13:08 - 000000000 ____D C:\WINDOWS\Minidump
2023-11-10 17:39 - 2021-04-06 13:08 - 629660117 _____ C:\WINDOWS\MEMORY.DMP
2023-11-10 17:39 - 2021-03-29 12:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-10 17:39 - 2021-03-29 12:13 - 000008192 ___SH C:\DumpStack.log.tmp
2023-11-10 02:24 - 2019-12-13 19:45 - 000002310 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-11-09 21:49 - 2023-07-16 18:09 - 000001449 _____ C:\Users\VasseJulien\Desktop\Roblox Player.lnk
2023-11-09 21:49 - 2022-08-06 19:01 - 000001277 _____ C:\Users\VasseJulien\Desktop\Roblox Studio.lnk
2023-11-09 21:49 - 2019-12-21 14:32 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2023-11-08 22:00 - 2023-03-29 12:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-11-08 19:38 - 2020-03-27 17:55 - 000000034 _____ C:\WINDOWS\SysWOW64\BD2030.DAT
2023-11-07 16:03 - 2018-03-03 08:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-11-07 01:48 - 2023-03-29 12:48 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-11-03 22:53 - 2020-09-30 15:32 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-01 19:43 - 2015-11-21 18:26 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\.minecraft
2023-10-30 22:51 - 2019-11-30 13:27 - 000000000 ____D C:\Users\VasseJulien\AppData\Roaming\Discord
2023-10-30 22:51 - 2019-11-30 13:26 - 000000000 ____D C:\Users\VasseJulien\AppData\Local\Discord
2023-10-30 20:19 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-10-30 20:05 - 2021-03-29 12:51 - 000003688 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-30 20:05 - 2021-03-29 12:51 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-10-14 00:47 - 2019-12-21 14:32 - 000000255 _____ C:\Users\VasseJulien\AppData\LocalLow\rbxcsettings.rbx
2023-10-13 18:19 - 2022-02-18 13:20 - 000000000 ____D C:\Program Files\RUXIM
2023-10-12 19:57 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
==================== Fichiers à la racine de certains dossiers ========
2023-04-11 13:24 - 2023-04-11 13:24 - 000000910 _____ () C:\Users\VasseJulien\AppData\Roaming\AdobeWLCMR2Cache.dat
2015-11-22 00:41 - 2022-07-12 21:15 - 000000125 _____ () C:\Users\VasseJulien\AppData\Roaming\D2Info0
2015-12-06 21:37 - 2018-04-07 08:42 - 000000129 _____ () C:\Users\VasseJulien\AppData\Roaming\D2Info1
2015-11-22 00:41 - 2022-07-10 20:31 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_1
2015-11-22 01:11 - 2022-07-12 22:27 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_2
2015-11-22 01:12 - 2018-08-29 15:05 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_3
2015-11-22 01:12 - 2017-04-11 18:34 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_4
2015-11-22 11:20 - 2016-05-16 13:18 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_5
2016-05-16 13:32 - 2016-05-16 14:19 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId0_6
2015-12-06 21:37 - 2018-03-25 09:36 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_1
2015-12-13 15:10 - 2018-04-07 08:46 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_2
2016-01-24 12:40 - 2018-03-24 10:27 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_3
2016-03-06 19:02 - 2016-06-05 19:43 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_4
2016-06-05 23:06 - 2016-06-05 23:41 - 000000008 _____ () C:\Users\VasseJulien\AppData\Roaming\DofusAppId1_5
2022-09-23 20:41 - 2022-09-23 20:42 - 000000278 _____ () C:\Users\VasseJulien\AppData\Roaming\MelonLoader.Installer.cfg
2018-09-30 15:44 - 2018-10-03 13:00 - 000000011 _____ () C:\Users\VasseJulien\AppData\Roaming\RegPorts-0
2015-11-21 22:36 - 2015-11-21 22:36 - 000000045 _____ () C:\Users\VasseJulien\AppData\Roaming\WB.CFG
2020-04-02 10:14 - 2020-04-02 10:14 - 000000410 _____ () C:\Users\VasseJulien\AppData\Local\oobelibMkey.log
2018-02-15 10:24 - 2018-02-15 10:25 - 050090848 _____ (Sony) C:\Users\VasseJulien\AppData\Local\pcc.exe
2020-03-02 15:46 - 2020-03-02 15:50 - 000012477 _____ () C:\Users\VasseJulien\AppData\Local\PlariumPlay.log
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================