Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024
Exécuté par terri (administrateur) sur DESKTOP-BUUFLJM (Gigabyte Technology Co., Ltd. B760 GAMING X DDR4) (19-04-2024 14:28:56)
Exécuté depuis C:\Users\terri\Desktop\FRST64.exe
Profils chargés: terri
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4170 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngine.exe
(D:\MSI Afterburner\MSIAfterburner.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\RTSS.exe
(D:\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\EncoderServer.exe
(D:\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [Fichier non signé] D:\Program Files\Classic Shell\ClassicStartMenu.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <28>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_06c43e1ee675eae7\WMIRegistrationService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_618b150331c5f4ad\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Windows.Media.BackgroundPlayback.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) D:\MSI Afterburner\MSIAfterburner.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe [3495808 2022-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => D:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (Ivaylo Beltchev -> IvoSoft) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [367456 2023-11-28] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3023152 2024-03-06] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [738936 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Discord] => C:\ProgramData\SquirrelMachineInstalls\Discord.exe [95778080 2023-09-29] (Discord Inc. -> Discord Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [MicrosoftEdgeAutoLaunch_C4FA658D112F4D3FED5F8D393A9BFF4E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-04-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [BitTorrent] => "C:\Users\terri\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37397480 2024-03-12] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Pinaview] => C:\Users\terri\AppData\Local\Programs\Pinaview\Pinaview.exe (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [EstimateSpeedUp] => "C:\Users\terri\AppData\Local\EstimateSpeedUp\EstimateSpeedUp.exe" -startup (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Discord] => C:\Users\terri\AppData\Local\Discord\Update.exe [1525024 2023-09-18] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [70923296 2024-03-27] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\LIDIL hpzlllhn: c:\windows\system32\hpzlllhn.dll [58112 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2023-11-24]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {DC185B46-9347-46F7-A249-452BB671612C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {3B794C0D-7C73-48BD-9309-738A75C0CE42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [617096 2022-02-25] (Apple Inc. -> Apple Inc.)
Task: {61ABE5C8-7D99-412E-9E38-9816081F8CAC} - System32\Tasks\GBTECService => C:\Program Files (x86)\GIGABYTE\GBTECService\LiquidSensord.exe [253312 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {5C4071EE-EB43-49C7-A0AB-85E56A849B46} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35220080 2023-09-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {04F58EAE-5FE6-4DD2-AC1F-565D0359D398} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [237672 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {7687FB73-F123-4D9D-81E5-2A2FBCCB1E80} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3094595401-900069884-2822542233-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (l'élément de données a 6 caractères en plus).
Task: {40D7FAD1-3458-4806-8C2E-8D2ADC19F655} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-19] (Mozilla Corporation -> Mozilla Foundation)
Task: {538C4319-2F51-43E7-B78A-CA9754D5B1B7} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [804312 2023-04-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {1EA7E4FC-9564-41C2-B1D5-99FD3F7A6B1F} - System32\Tasks\Norton Security Scan for terri => C:\PROGRA~2\NORTON~2\Engine\461~1.179\Nss.exe -> C:\Program Files (x86)\Norton Security Scan\Engine\4.6.1.179\\/scan-quick /scheduled
Task: {D4752B8E-0F4D-41FB-8AF5-FD23987937B5} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E6AAED56-1F95-4B92-9438-743C2D3DAA16} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7371E277-AD45-459A-8671-56427362D9DA} - System32\Tasks\Opera scheduled assistant Autoupdate 1685181509 => C:\Users\terri\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\terri\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {5838E8C9-C29B-4E21-9891-3E7028B6FFD9} - System32\Tasks\Opera scheduled Autoupdate 1685181508 => C:\Users\terri\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ab463943-9843-4764-8601-1f8caeb2956d}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{ad1d5dc7-3eb5-4458-8a4b-65ced0d4686e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{bea7fb5a-452b-4db6-a698-2f23c04a8e08}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-19]
Edge Extension: (Google Docs hors connexion) - C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-27]
Edge Extension: (Edge relevant text changes) - C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF DefaultProfile: x2bzwssp.default
FF ProfilePath: C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\x2bzwssp.default [2024-04-19]
FF Homepage: Mozilla\Firefox\Profiles\x2bzwssp.default -> hxxps://links.malwarebytes.com/link/restorebrowser?lic=trial&product=MBAM-C/homepage?hp=1&pId=BT220103&iDate=2024-03-13 07:54:43&bitmask=9996
FF ProfilePath: C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release [2024-04-19]
FF DownloadDir: C:\Users\terri\Desktop
FF Homepage: Mozilla\Firefox\Profiles\aqh0cq9f.default-release -> hxxps://www.ecosia.org/
FF Extension: (Dictionnaire français) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org.xpi [2024-04-19]
FF Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2024-04-19]
FF Extension: (Language: Français (French)) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2024-04-19]
FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-04-11] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [makcojoppodhcgmmchohadhpkicoafka]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2023-08-22] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15737128 2024-03-13] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1136552 2023-06-06] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [955816 2023-09-26] (EasyAntiCheat Oy -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe [150632 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029456 2023-06-06] (Epic Games Inc. -> Epic Games, Inc.)
S2 GBTECService; C:\Program Files (x86)\Gigabyte\GBTECService\OLEDDisplayService.exe [16768 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Fichier non signé]
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_4911ed214bf8cf23\lib\PlatformLicenseManagerService.exe [740960 2023-06-22] (Intel Corporation -> Intel(R) Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8887264 2024-04-19] (Malwarebytes Inc. -> Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_618b150331c5f4ad\Display.NvContainer\NVDisplay.Container.exe [1275000 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [130152 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe [5084200 2024-01-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9614144 2024-03-06] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [12458336 2024-03-27] (KRAFTON, Inc. -> KRAFTON, Inc)
R2 GigabyteUpdateService; %SystemRoot%\system32\GigabyteUpdateService.exe 2\c:\windows\system32\ [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ACE-BASE; C:\Windows\system32\drivers\ACE-BASE.sys [1869904 2023-12-15] (HIGH MORALE DEVELOPMENTS LIMITED -> ANTICHEATEXPERT.COM)
R3 AmdTools64; C:\Windows\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [32880 2023-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R3 gdrv3; C:\Windows\system32\drivers\gdrv3.sys [45248 2023-03-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 HoYoProtect; C:\Windows\system32\HoYoKProtect.sys [3742360 2023-10-30] (Microsoft Windows Hardware Compatibility Publisher -> miHoYo)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2024-04-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKslc37c427b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{56F72A6B-C33E-408A-9FB5-B233B31427F4}\MpKslDrv.sys [301336 2024-04-19] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 Netaapl; C:\Windows\System32\drivers\netaapl64.sys [23040 2020-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 RivaTuner64; D:\RivaTuner v2.24\RivaTuner64.sys [19952 2024-01-18] (techPowerUp -> )
R3 RTCore64; D:\MSI Afterburner\RTCore64.sys [36824 2020-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R1 rtf64; C:\Windows\system32\DRIVERS\rtf64x64.sys [70712 2021-09-29] (Realtek Semiconductor Corp. -> Realtek)
S3 scsiscan; C:\Windows\system32\DRIVERS\scsiscan.sys [21504 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [21861160 2024-02-22] (Riot Games, Inc. -> Riot Games, Inc.)
R0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20936 2024-04-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601376 2024-04-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-09] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [215864 2024-04-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S1 ibbhtpao; \??\C:\Windows\system32\drivers\ibbhtpao.sys [X]
S3 rsDwf; \SystemRoot\system32\DRIVERS\rsDwf.sys [X]
S3 VBAudioVMAUXVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmauxvaio64_win10.sys [X]
S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-19 14:28 - 2024-04-19 14:29 - 000022318 _____ C:\Users\terri\Desktop\FRST.txt
2024-04-19 14:28 - 2024-04-19 14:29 - 000000000 ____D C:\FRST
2024-04-19 14:27 - 2024-04-19 14:27 - 002394112 _____ (Farbar) C:\Users\terri\Desktop\FRST64.exe
2024-04-19 14:11 - 2024-04-19 14:11 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-04-19 14:11 - 2024-04-19 14:11 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-04-19 14:10 - 2024-04-19 14:24 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-19 14:08 - 2024-04-19 14:08 - 000000000 ___HD C:\$WinREAgent
2024-04-19 14:05 - 2024-04-19 14:05 - 000000000 ____D C:\ProgramData\Google
2024-04-19 12:27 - 2024-04-19 12:27 - 002394112 _____ (Farbar) C:\Users\terri\Downloads\FRST64.8FC5FUsC.exe.part
2024-04-18 16:49 - 2024-04-18 16:51 - 000000000 ____D C:\Users\terri\Documents\3DMark
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Users\terri\AppData\Local\UL
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Users\Default\AppData\LocalLow\NVIDIA
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\ProgramData\UL
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Program Files (x86)\Futuremark
2024-04-18 16:43 - 2024-04-18 16:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2024-04-18 16:43 - 2024-04-18 16:43 - 000000000 ____D C:\Program Files\Geeks3D
2024-04-18 16:39 - 2024-04-18 16:39 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1(2).apk
2024-04-18 16:37 - 2024-04-18 16:37 - 028275856 _____ C:\Users\terri\Downloads\FurMark_2.2.0.1_win64.zip
2024-04-18 16:36 - 2024-04-18 16:36 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1(1).apk
2024-04-18 16:35 - 2024-04-18 16:35 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1.apk
2024-04-17 17:01 - 2024-04-19 14:20 - 000000000 ____D C:\Users\terri\AppData\Local\Malwarebytes
2024-04-17 17:00 - 2024-04-19 14:10 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-04-17 17:00 - 2024-04-19 14:10 - 000000000 ____D C:\Program Files\Malwarebytes
2024-04-17 16:00 - 2024-04-17 16:00 - 000000000 ____D C:\Users\terri\AppData\Local\NVIDIA
2024-04-17 15:12 - 2024-04-17 15:12 - 000000000 ____D C:\Users\terri\AppData\Roaming\NVIDIA
2024-04-17 15:11 - 2024-04-19 14:05 - 000000000 ____D C:\Users\terri\AppData\Roaming\iTop Screen Recorder
2024-04-17 15:11 - 2024-04-19 14:05 - 000000000 ____D C:\Program Files\iTop Screen Recorder
2024-04-17 15:11 - 2024-04-17 15:11 - 000000000 ____D C:\ProgramData\iTop Screen Recorder
2024-04-16 18:57 - 2024-03-02 18:00 - 001045520 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2024-04-16 18:57 - 2024-03-02 17:56 - 006943440 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2024-04-15 21:59 - 2024-04-15 22:51 - 000000000 ____D C:\Users\terri\AppData\LocalLow\uTorrent
2024-04-15 21:53 - 2024-04-15 22:48 - 000000000 ____D C:\Users\terri\Downloads\Witchfire
2024-04-11 06:40 - 2024-04-11 06:40 - 000000000 ____D C:\Users\terri\AppData\Local\Backup
2024-04-09 18:22 - 2024-04-09 18:22 - 000000000 ____D C:\Users\terri\AppData\LocalLow\SoulGame
2024-04-06 20:36 - 2024-04-06 20:36 - 000001405 _____ C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Roblox Player.lnk
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-19 14:27 - 2024-03-12 14:23 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2024-04-19 14:24 - 2023-11-14 08:46 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-19 14:24 - 2023-03-08 21:37 - 001193776 _____ C:\Windows\system32\wpbbin.exe
2024-04-19 14:24 - 2023-03-08 21:37 - 001166072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteUpdateService.exe
2024-04-19 14:24 - 2023-03-08 21:37 - 000008192 ___SH C:\DumpStack.log.tmp
2024-04-19 14:24 - 2023-03-08 21:37 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-04-19 14:24 - 2023-03-08 15:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-19 14:24 - 2023-03-08 15:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-19 14:24 - 2023-03-08 14:59 - 000003448 _____ C:\Windows\system32\Tasks\GCC
2024-04-19 14:24 - 2023-03-08 14:47 - 000093432 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteDownloadAssistant.exe
2024-04-19 14:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-19 14:23 - 2024-01-18 08:30 - 000003102 _____ C:\Windows\system32\Tasks\MSIAfterburner
2024-04-19 14:23 - 2023-03-08 20:21 - 000000000 ____D C:\Users\terri\AppData\Local\ClassicShell
2024-04-19 14:23 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2024-04-19 14:13 - 2024-02-16 07:37 - 000263784 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_4.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 002708984 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000710248 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000218616 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000206440 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000108136 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-04-19 14:13 - 2023-04-28 19:32 - 000075368 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-04-19 14:13 - 2023-03-08 14:44 - 000004502 _____ C:\Windows\system32\PerfStringBackup.INI
2024-04-19 14:13 - 2019-12-07 16:49 - 002546200 _____ C:\Windows\system32\perfh00C.dat
2024-04-19 14:13 - 2019-12-07 16:49 - 000682042 _____ C:\Windows\system32\perfc00C.dat
2024-04-19 14:13 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-19 14:13 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-04-19 14:13 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-04-19 14:12 - 2024-03-13 21:53 - 000000000 ____D C:\Users\terri\AppData\Roaming\uTorrent
2024-04-19 14:12 - 2023-11-15 16:13 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-04-19 14:12 - 2023-11-15 16:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-04-19 14:12 - 2023-08-25 16:53 - 000000000 ____D C:\Users\terri\AppData\Local\LaughmkoSoftware
2024-04-19 14:12 - 2023-03-08 21:37 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-19 14:10 - 2023-11-14 12:10 - 000000000 ____D C:\Users\terri\AppData\Local\NVIDIA Corporation
2024-04-19 14:10 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-04-19 14:09 - 2023-03-21 20:36 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2024-04-19 14:08 - 2023-03-08 14:44 - 000000000 ____D C:\Users\terri
2024-04-19 14:07 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-04-19 14:06 - 2023-03-18 15:58 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2024-04-19 14:06 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2024-04-19 14:05 - 2024-03-13 10:16 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-04-19 14:05 - 2024-02-23 17:05 - 000000000 ____D C:\Program Files (x86)\Steam
2024-04-19 14:05 - 2024-01-24 17:20 - 000000000 ____D C:\Windows\system32\lxss
2024-04-19 14:05 - 2024-01-24 17:20 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2024-04-19 14:05 - 2023-12-13 11:59 - 000000000 ____D C:\Windows\InboxApps
2024-04-19 14:05 - 2023-09-29 12:09 - 000000000 ____D C:\Users\terri\AppData\Local\Discord
2024-04-19 14:05 - 2023-07-27 13:02 - 000000000 ____D C:\ProgramData\iTop
2024-04-19 14:05 - 2023-03-18 15:58 - 000000000 ____D C:\Users\terri\AppData\Local\Roblox
2024-04-19 14:05 - 2023-03-09 18:18 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS
2024-04-19 14:05 - 2023-03-08 16:37 - 000000000 ____D C:\Users\terri\AppData\Local\WELLBIA
2024-04-19 14:05 - 2023-03-08 15:55 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2024-04-19 14:05 - 2023-03-08 15:55 - 000000000 ____D C:\Users\terri\AppData\Roaming\discord
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ____D C:\ProgramData\Package Cache
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ____D C:\Program Files\ENE
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Portable Devices
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2024-04-19 14:05 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\OpenSSH
2024-04-19 14:05 - 2019-12-07 16:49 - 000000000 ____D C:\Windows\SysWOW64\fr
2024-04-19 14:05 - 2019-12-07 16:49 - 000000000 ____D C:\Windows\system32\fr
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\dsc
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\InstallShield
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\downlevel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Sysprep
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\icsxml
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\downlevel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Com
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\IME
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Globalization
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Containers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2024-04-19 14:05 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2024-04-19 13:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Web
2024-04-19 13:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\registration
2024-04-19 13:58 - 2023-04-28 14:08 - 000000000 ____D C:\Users\terri\AppData\Roaming\.minecraft
2024-04-19 13:58 - 2023-03-08 15:43 - 000000000 ____D C:\Program Files (x86)\Realtek
2024-04-19 13:58 - 2023-03-08 15:00 - 000000000 ____D C:\Program Files (x86)\Gigabyte
2024-04-19 13:58 - 2023-03-08 14:43 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-04-19 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat
2024-04-19 13:46 - 2023-03-08 21:37 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-04-18 16:49 - 2023-11-14 08:50 - 000000000 ____D C:\Users\terri\AppData\Local\D3DSCache
2024-04-18 13:19 - 2023-03-08 14:47 - 000000000 ____D C:\Users\terri\AppData\Local\Packages
2024-04-12 18:02 - 2023-04-28 19:32 - 000000000 ____D C:\Users\terri\AppData\Local\MinecraftInstaller
2024-04-10 13:03 - 2023-03-08 17:27 - 000000000 ____D C:\Windows\system32\MRT
2024-04-10 13:02 - 2023-03-08 17:27 - 192651728 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-04-09 22:07 - 2023-03-08 21:37 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-04-09 21:51 - 2023-03-08 16:37 - 000000000 ____D C:\Program Files\Common Files\PUBG
2024-04-09 20:12 - 2023-03-08 16:38 - 000215864 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2024-04-04 07:15 - 2023-03-08 21:37 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-04 07:15 - 2023-03-08 21:37 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-01 19:27 - 2023-09-22 07:49 - 000000000 ____D C:\game
2024-04-01 19:25 - 2023-03-08 16:00 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-04-01 18:07 - 2023-03-22 11:11 - 000000000 ____D C:\Users\terri\AppData\Local\CrashDumps
2024-03-28 07:25 - 2024-03-12 14:19 - 000000000 ____D C:\Program Files\Riot Vanguard
2024-03-27 15:58 - 2023-11-24 11:23 - 000001492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centre de solutions HP.lnk
2024-03-27 15:58 - 2023-11-24 11:23 - 000001106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement OCR I.R.I.S..lnk
2024-03-27 15:58 - 2023-10-13 21:10 - 000001208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lords of the Fallen.lnk
2024-03-27 15:58 - 2023-10-01 14:24 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2024-03-27 15:58 - 2023-08-30 07:38 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2024-03-27 15:57 - 2024-03-12 14:19 - 000000000 ____D C:\Users\terri\AppData\Roaming\riot-client-ux
2024-03-27 15:57 - 2024-03-12 14:19 - 000000000 ____D C:\ProgramData\Riot Games
2024-03-27 15:20 - 2023-03-08 15:56 - 000000000 ____D C:\Users\terri\AppData\Local\Steam
2024-03-25 21:49 - 2023-03-08 21:26 - 000000000 ____D C:\Users\terri\AppData\Roaming\Goldberg SteamEmu Saves
==================== Fichiers à la racine de certains dossiers ========
2023-06-29 17:18 - 2023-06-29 17:18 - 000008134 _____ () C:\Users\terri\AppData\Roaming\VoiceMeeterDefault.xml
2024-02-09 22:11 - 2024-02-09 22:11 - 000005534 _____ () C:\Users\terri\AppData\Local\92056688834
2023-09-06 08:38 - 2023-09-06 08:38 - 000007601 _____ () C:\Users\terri\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par terri (administrateur) sur DESKTOP-BUUFLJM (Gigabyte Technology Co., Ltd. B760 GAMING X DDR4) (19-04-2024 14:28:56)
Exécuté depuis C:\Users\terri\Desktop\FRST64.exe
Profils chargés: terri
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4170 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngine.exe
(D:\MSI Afterburner\MSIAfterburner.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\RTSS.exe
(D:\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\EncoderServer.exe
(D:\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) D:\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [Fichier non signé] D:\Program Files\Classic Shell\ClassicStartMenu.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <28>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_06c43e1ee675eae7\WMIRegistrationService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_618b150331c5f4ad\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Windows.Media.BackgroundPlayback.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) D:\MSI Afterburner\MSIAfterburner.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe [3495808 2022-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => D:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (Ivaylo Beltchev -> IvoSoft) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [367456 2023-11-28] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3023152 2024-03-06] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [738936 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Discord] => C:\ProgramData\SquirrelMachineInstalls\Discord.exe [95778080 2023-09-29] (Discord Inc. -> Discord Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [MicrosoftEdgeAutoLaunch_C4FA658D112F4D3FED5F8D393A9BFF4E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-04-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [BitTorrent] => "C:\Users\terri\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37397480 2024-03-12] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Pinaview] => C:\Users\terri\AppData\Local\Programs\Pinaview\Pinaview.exe (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [EstimateSpeedUp] => "C:\Users\terri\AppData\Local\EstimateSpeedUp\EstimateSpeedUp.exe" -startup (Pas de fichier)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [Discord] => C:\Users\terri\AppData\Local\Discord\Update.exe [1525024 2023-09-18] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3094595401-900069884-2822542233-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [70923296 2024-03-27] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\LIDIL hpzlllhn: c:\windows\system32\hpzlllhn.dll [58112 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2023-11-24]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {DC185B46-9347-46F7-A249-452BB671612C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {3B794C0D-7C73-48BD-9309-738A75C0CE42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [617096 2022-02-25] (Apple Inc. -> Apple Inc.)
Task: {61ABE5C8-7D99-412E-9E38-9816081F8CAC} - System32\Tasks\GBTECService => C:\Program Files (x86)\GIGABYTE\GBTECService\LiquidSensord.exe [253312 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {5C4071EE-EB43-49C7-A0AB-85E56A849B46} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35220080 2023-09-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {04F58EAE-5FE6-4DD2-AC1F-565D0359D398} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [237672 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {7687FB73-F123-4D9D-81E5-2A2FBCCB1E80} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3094595401-900069884-2822542233-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (l'élément de données a 6 caractères en plus).
Task: {40D7FAD1-3458-4806-8C2E-8D2ADC19F655} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34208 2024-04-19] (Mozilla Corporation -> Mozilla Foundation)
Task: {538C4319-2F51-43E7-B78A-CA9754D5B1B7} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [804312 2023-04-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {1EA7E4FC-9564-41C2-B1D5-99FD3F7A6B1F} - System32\Tasks\Norton Security Scan for terri => C:\PROGRA~2\NORTON~2\Engine\461~1.179\Nss.exe -> C:\Program Files (x86)\Norton Security Scan\Engine\4.6.1.179\\/scan-quick /scheduled
Task: {D4752B8E-0F4D-41FB-8AF5-FD23987937B5} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E6AAED56-1F95-4B92-9438-743C2D3DAA16} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7371E277-AD45-459A-8671-56427362D9DA} - System32\Tasks\Opera scheduled assistant Autoupdate 1685181509 => C:\Users\terri\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\terri\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {5838E8C9-C29B-4E21-9891-3E7028B6FFD9} - System32\Tasks\Opera scheduled Autoupdate 1685181508 => C:\Users\terri\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ab463943-9843-4764-8601-1f8caeb2956d}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{ad1d5dc7-3eb5-4458-8a4b-65ced0d4686e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{bea7fb5a-452b-4db6-a698-2f23c04a8e08}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e5a67b3a-7c23-4d93-b797-577e503b6117}: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-19]
Edge Extension: (Google Docs hors connexion) - C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-27]
Edge Extension: (Edge relevant text changes) - C:\Users\terri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF DefaultProfile: x2bzwssp.default
FF ProfilePath: C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\x2bzwssp.default [2024-04-19]
FF Homepage: Mozilla\Firefox\Profiles\x2bzwssp.default -> hxxps://links.malwarebytes.com/link/restorebrowser?lic=trial&product=MBAM-C/homepage?hp=1&pId=BT220103&iDate=2024-03-13 07:54:43&bitmask=9996
FF ProfilePath: C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release [2024-04-19]
FF DownloadDir: C:\Users\terri\Desktop
FF Homepage: Mozilla\Firefox\Profiles\aqh0cq9f.default-release -> hxxps://www.ecosia.org/
FF Extension: (Dictionnaire français) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org.xpi [2024-04-19]
FF Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2024-04-19]
FF Extension: (Language: Français (French)) - C:\Users\terri\AppData\Roaming\Mozilla\Firefox\Profiles\aqh0cq9f.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2024-04-19]
FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-04-11] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [makcojoppodhcgmmchohadhpkicoafka]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2023-08-22] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15737128 2024-03-13] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1136552 2023-06-06] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [955816 2023-09-26] (EasyAntiCheat Oy -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe [150632 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029456 2023-06-06] (Epic Games Inc. -> Epic Games, Inc.)
S2 GBTECService; C:\Program Files (x86)\Gigabyte\GBTECService\OLEDDisplayService.exe [16768 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Fichier non signé]
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_4911ed214bf8cf23\lib\PlatformLicenseManagerService.exe [740960 2023-06-22] (Intel Corporation -> Intel(R) Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8887264 2024-04-19] (Malwarebytes Inc. -> Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_618b150331c5f4ad\Display.NvContainer\NVDisplay.Container.exe [1275000 2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [130152 2023-06-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe [5084200 2024-01-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9614144 2024-03-06] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [12458336 2024-03-27] (KRAFTON, Inc. -> KRAFTON, Inc)
R2 GigabyteUpdateService; %SystemRoot%\system32\GigabyteUpdateService.exe 2\c:\windows\system32\ [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ACE-BASE; C:\Windows\system32\drivers\ACE-BASE.sys [1869904 2023-12-15] (HIGH MORALE DEVELOPMENTS LIMITED -> ANTICHEATEXPERT.COM)
R3 AmdTools64; C:\Windows\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [32880 2023-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R3 gdrv3; C:\Windows\system32\drivers\gdrv3.sys [45248 2023-03-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 HoYoProtect; C:\Windows\system32\HoYoKProtect.sys [3742360 2023-10-30] (Microsoft Windows Hardware Compatibility Publisher -> miHoYo)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2024-04-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKslc37c427b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{56F72A6B-C33E-408A-9FB5-B233B31427F4}\MpKslDrv.sys [301336 2024-04-19] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 Netaapl; C:\Windows\System32\drivers\netaapl64.sys [23040 2020-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 RivaTuner64; D:\RivaTuner v2.24\RivaTuner64.sys [19952 2024-01-18] (techPowerUp -> )
R3 RTCore64; D:\MSI Afterburner\RTCore64.sys [36824 2020-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R1 rtf64; C:\Windows\system32\DRIVERS\rtf64x64.sys [70712 2021-09-29] (Realtek Semiconductor Corp. -> Realtek)
S3 scsiscan; C:\Windows\system32\DRIVERS\scsiscan.sys [21504 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [21861160 2024-02-22] (Riot Games, Inc. -> Riot Games, Inc.)
R0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20936 2024-04-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601376 2024-04-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-09] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [215864 2024-04-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S1 ibbhtpao; \??\C:\Windows\system32\drivers\ibbhtpao.sys [X]
S3 rsDwf; \SystemRoot\system32\DRIVERS\rsDwf.sys [X]
S3 VBAudioVMAUXVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmauxvaio64_win10.sys [X]
S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-19 14:28 - 2024-04-19 14:29 - 000022318 _____ C:\Users\terri\Desktop\FRST.txt
2024-04-19 14:28 - 2024-04-19 14:29 - 000000000 ____D C:\FRST
2024-04-19 14:27 - 2024-04-19 14:27 - 002394112 _____ (Farbar) C:\Users\terri\Desktop\FRST64.exe
2024-04-19 14:11 - 2024-04-19 14:11 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-04-19 14:11 - 2024-04-19 14:11 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-04-19 14:10 - 2024-04-19 14:24 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-19 14:08 - 2024-04-19 14:08 - 000000000 ___HD C:\$WinREAgent
2024-04-19 14:05 - 2024-04-19 14:05 - 000000000 ____D C:\ProgramData\Google
2024-04-19 12:27 - 2024-04-19 12:27 - 002394112 _____ (Farbar) C:\Users\terri\Downloads\FRST64.8FC5FUsC.exe.part
2024-04-18 16:49 - 2024-04-18 16:51 - 000000000 ____D C:\Users\terri\Documents\3DMark
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Users\terri\AppData\Local\UL
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Users\Default\AppData\LocalLow\NVIDIA
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\ProgramData\UL
2024-04-18 16:49 - 2024-04-18 16:49 - 000000000 ____D C:\Program Files (x86)\Futuremark
2024-04-18 16:43 - 2024-04-18 16:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2024-04-18 16:43 - 2024-04-18 16:43 - 000000000 ____D C:\Program Files\Geeks3D
2024-04-18 16:39 - 2024-04-18 16:39 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1(2).apk
2024-04-18 16:37 - 2024-04-18 16:37 - 028275856 _____ C:\Users\terri\Downloads\FurMark_2.2.0.1_win64.zip
2024-04-18 16:36 - 2024-04-18 16:36 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1(1).apk
2024-04-18 16:35 - 2024-04-18 16:35 - 003380372 _____ C:\Users\terri\Downloads\adblockplusandroid-1-1.3.2.1.apk
2024-04-17 17:01 - 2024-04-19 14:20 - 000000000 ____D C:\Users\terri\AppData\Local\Malwarebytes
2024-04-17 17:00 - 2024-04-19 14:10 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-04-17 17:00 - 2024-04-19 14:10 - 000000000 ____D C:\Program Files\Malwarebytes
2024-04-17 16:00 - 2024-04-17 16:00 - 000000000 ____D C:\Users\terri\AppData\Local\NVIDIA
2024-04-17 15:12 - 2024-04-17 15:12 - 000000000 ____D C:\Users\terri\AppData\Roaming\NVIDIA
2024-04-17 15:11 - 2024-04-19 14:05 - 000000000 ____D C:\Users\terri\AppData\Roaming\iTop Screen Recorder
2024-04-17 15:11 - 2024-04-19 14:05 - 000000000 ____D C:\Program Files\iTop Screen Recorder
2024-04-17 15:11 - 2024-04-17 15:11 - 000000000 ____D C:\ProgramData\iTop Screen Recorder
2024-04-16 18:57 - 2024-03-02 18:00 - 001045520 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2024-04-16 18:57 - 2024-03-02 17:56 - 006943440 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2024-04-15 21:59 - 2024-04-15 22:51 - 000000000 ____D C:\Users\terri\AppData\LocalLow\uTorrent
2024-04-15 21:53 - 2024-04-15 22:48 - 000000000 ____D C:\Users\terri\Downloads\Witchfire
2024-04-11 06:40 - 2024-04-11 06:40 - 000000000 ____D C:\Users\terri\AppData\Local\Backup
2024-04-09 18:22 - 2024-04-09 18:22 - 000000000 ____D C:\Users\terri\AppData\LocalLow\SoulGame
2024-04-06 20:36 - 2024-04-06 20:36 - 000001405 _____ C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Roblox Player.lnk
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-19 14:27 - 2024-03-12 14:23 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2024-04-19 14:24 - 2023-11-14 08:46 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-19 14:24 - 2023-03-08 21:37 - 001193776 _____ C:\Windows\system32\wpbbin.exe
2024-04-19 14:24 - 2023-03-08 21:37 - 001166072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteUpdateService.exe
2024-04-19 14:24 - 2023-03-08 21:37 - 000008192 ___SH C:\DumpStack.log.tmp
2024-04-19 14:24 - 2023-03-08 21:37 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-04-19 14:24 - 2023-03-08 15:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-19 14:24 - 2023-03-08 15:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-19 14:24 - 2023-03-08 14:59 - 000003448 _____ C:\Windows\system32\Tasks\GCC
2024-04-19 14:24 - 2023-03-08 14:47 - 000093432 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteDownloadAssistant.exe
2024-04-19 14:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-19 14:23 - 2024-01-18 08:30 - 000003102 _____ C:\Windows\system32\Tasks\MSIAfterburner
2024-04-19 14:23 - 2023-03-08 20:21 - 000000000 ____D C:\Users\terri\AppData\Local\ClassicShell
2024-04-19 14:23 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2024-04-19 14:13 - 2024-02-16 07:37 - 000263784 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_4.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 002708984 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000710248 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000218616 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000206440 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-04-19 14:13 - 2023-04-28 19:32 - 000108136 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-04-19 14:13 - 2023-04-28 19:32 - 000075368 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-04-19 14:13 - 2023-03-08 14:44 - 000004502 _____ C:\Windows\system32\PerfStringBackup.INI
2024-04-19 14:13 - 2019-12-07 16:49 - 002546200 _____ C:\Windows\system32\perfh00C.dat
2024-04-19 14:13 - 2019-12-07 16:49 - 000682042 _____ C:\Windows\system32\perfc00C.dat
2024-04-19 14:13 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-19 14:13 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-04-19 14:13 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-04-19 14:12 - 2024-03-13 21:53 - 000000000 ____D C:\Users\terri\AppData\Roaming\uTorrent
2024-04-19 14:12 - 2023-11-15 16:13 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-04-19 14:12 - 2023-11-15 16:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-04-19 14:12 - 2023-08-25 16:53 - 000000000 ____D C:\Users\terri\AppData\Local\LaughmkoSoftware
2024-04-19 14:12 - 2023-03-08 21:37 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-19 14:10 - 2023-11-14 12:10 - 000000000 ____D C:\Users\terri\AppData\Local\NVIDIA Corporation
2024-04-19 14:10 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-04-19 14:09 - 2023-03-21 20:36 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2024-04-19 14:08 - 2023-03-08 14:44 - 000000000 ____D C:\Users\terri
2024-04-19 14:07 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-04-19 14:06 - 2023-03-18 15:58 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2024-04-19 14:06 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2024-04-19 14:05 - 2024-03-13 10:16 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-04-19 14:05 - 2024-02-23 17:05 - 000000000 ____D C:\Program Files (x86)\Steam
2024-04-19 14:05 - 2024-01-24 17:20 - 000000000 ____D C:\Windows\system32\lxss
2024-04-19 14:05 - 2024-01-24 17:20 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2024-04-19 14:05 - 2023-12-13 11:59 - 000000000 ____D C:\Windows\InboxApps
2024-04-19 14:05 - 2023-09-29 12:09 - 000000000 ____D C:\Users\terri\AppData\Local\Discord
2024-04-19 14:05 - 2023-07-27 13:02 - 000000000 ____D C:\ProgramData\iTop
2024-04-19 14:05 - 2023-03-18 15:58 - 000000000 ____D C:\Users\terri\AppData\Local\Roblox
2024-04-19 14:05 - 2023-03-09 18:18 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS
2024-04-19 14:05 - 2023-03-08 16:37 - 000000000 ____D C:\Users\terri\AppData\Local\WELLBIA
2024-04-19 14:05 - 2023-03-08 15:55 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2024-04-19 14:05 - 2023-03-08 15:55 - 000000000 ____D C:\Users\terri\AppData\Roaming\discord
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ____D C:\ProgramData\Package Cache
2024-04-19 14:05 - 2023-03-08 15:00 - 000000000 ____D C:\Program Files\ENE
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Portable Devices
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-04-19 14:05 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2024-04-19 14:05 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\OpenSSH
2024-04-19 14:05 - 2019-12-07 16:49 - 000000000 ____D C:\Windows\SysWOW64\fr
2024-04-19 14:05 - 2019-12-07 16:49 - 000000000 ____D C:\Windows\system32\fr
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\dsc
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\InstallShield
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\downlevel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Sysprep
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\icsxml
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\downlevel
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Com
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\IME
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Globalization
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Containers
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-04-19 14:05 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2024-04-19 14:05 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2024-04-19 13:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Web
2024-04-19 13:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\registration
2024-04-19 13:58 - 2023-04-28 14:08 - 000000000 ____D C:\Users\terri\AppData\Roaming\.minecraft
2024-04-19 13:58 - 2023-03-08 15:43 - 000000000 ____D C:\Program Files (x86)\Realtek
2024-04-19 13:58 - 2023-03-08 15:00 - 000000000 ____D C:\Program Files (x86)\Gigabyte
2024-04-19 13:58 - 2023-03-08 14:43 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-04-19 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat
2024-04-19 13:46 - 2023-03-08 21:37 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-04-18 16:49 - 2023-11-14 08:50 - 000000000 ____D C:\Users\terri\AppData\Local\D3DSCache
2024-04-18 13:19 - 2023-03-08 14:47 - 000000000 ____D C:\Users\terri\AppData\Local\Packages
2024-04-12 18:02 - 2023-04-28 19:32 - 000000000 ____D C:\Users\terri\AppData\Local\MinecraftInstaller
2024-04-10 13:03 - 2023-03-08 17:27 - 000000000 ____D C:\Windows\system32\MRT
2024-04-10 13:02 - 2023-03-08 17:27 - 192651728 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-04-09 22:07 - 2023-03-08 21:37 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-04-09 21:51 - 2023-03-08 16:37 - 000000000 ____D C:\Program Files\Common Files\PUBG
2024-04-09 20:12 - 2023-03-08 16:38 - 000215864 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2024-04-04 07:15 - 2023-03-08 21:37 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-04 07:15 - 2023-03-08 21:37 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-01 19:27 - 2023-09-22 07:49 - 000000000 ____D C:\game
2024-04-01 19:25 - 2023-03-08 16:00 - 000000000 ____D C:\Users\terri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-04-01 18:07 - 2023-03-22 11:11 - 000000000 ____D C:\Users\terri\AppData\Local\CrashDumps
2024-03-28 07:25 - 2024-03-12 14:19 - 000000000 ____D C:\Program Files\Riot Vanguard
2024-03-27 15:58 - 2023-11-24 11:23 - 000001492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centre de solutions HP.lnk
2024-03-27 15:58 - 2023-11-24 11:23 - 000001106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement OCR I.R.I.S..lnk
2024-03-27 15:58 - 2023-10-13 21:10 - 000001208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lords of the Fallen.lnk
2024-03-27 15:58 - 2023-10-01 14:24 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2024-03-27 15:58 - 2023-08-30 07:38 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2024-03-27 15:57 - 2024-03-12 14:19 - 000000000 ____D C:\Users\terri\AppData\Roaming\riot-client-ux
2024-03-27 15:57 - 2024-03-12 14:19 - 000000000 ____D C:\ProgramData\Riot Games
2024-03-27 15:20 - 2023-03-08 15:56 - 000000000 ____D C:\Users\terri\AppData\Local\Steam
2024-03-25 21:49 - 2023-03-08 21:26 - 000000000 ____D C:\Users\terri\AppData\Roaming\Goldberg SteamEmu Saves
==================== Fichiers à la racine de certains dossiers ========
2023-06-29 17:18 - 2023-06-29 17:18 - 000008134 _____ () C:\Users\terri\AppData\Roaming\VoiceMeeterDefault.xml
2024-02-09 22:11 - 2024-02-09 22:11 - 000005534 _____ () C:\Users\terri\AppData\Local\92056688834
2023-09-06 08:38 - 2023-09-06 08:38 - 000007601 _____ () C:\Users\terri\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================