Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020 Exécuté par charr (administrateur) sur LAPTOP-1S0AMNQ0 (Acer Aspire E5-774G) (22-12-2020 12:09:57) Exécuté depuis C:\Users\charr\Desktop Profils chargés: charr Platform: Windows 10 Home Version 2004 19041.685 (X64) Langue: Français (France) Navigateur par défaut: Chrome Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Acer Incorporated -> acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe (Acer Incorporated -> TODO: ) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2> (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe (F-Secure Corporation -> Darty Corporation) C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe <3> (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe <2> (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\FsPisces.exe (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe (ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) CN -> Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxext.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\updater-ws.exe (LULU Software -> LULU Software) C:\Program Files\Soda PDF Desktop 11\ws.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\charr\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <5> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe <2> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (SweetLabs Inc. -> SweetLabs, Inc) C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe (Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe (Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390912 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506176 2018-11-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé] HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Darty Cloud] => C:\Users\charr\AppData\Local\Pack Sérénité\Darty Cloud\bin\DartyCloud.exe [1144448 2019-05-10] (Oodrive -> Oodrive) HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [FSKeyAutoStart] => C:\Program Files (x86)\Darty\Darty Mot de Passe\fskey.exe [6952416 2018-07-04] (F-Secure Corporation -> Darty Corporation) HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32711056 2020-12-12] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\charr\AppData\Local\Microsoft\Teams\Update.exe [2453688 2020-11-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\Run: [Spotify] => C:\Users\charr\AppData\Roaming\Spotify\Spotify.exe [23233936 2020-12-05] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-1333090055-3807291771-4262163453-1001\...\MountPoints2: {cf8fbe72-e530-11e9-8f41-3ca0679167de} - "G:\HiSuiteDownLoader.exe" HKLM\...\Windows x64\Print Processors\Canon MX530 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDC3.DLL [30208 2013-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Soda PDF Desktop 11 Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\soda_pdfpmon_v.4.12.26.3.dll [932984 2020-03-09] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com)) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-08] (Google LLC -> Google LLC) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0410318A-4D9D-4CEF-A82D-2CA48BA0080E} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer) Task: {04CF2EBC-8D13-4AEB-8C9B-0E1FAF38DA89} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [40352 2016-06-24] (Acer Incorporated -> ) Task: {0905A605-1B56-484A-9D4B-B9ED739DBDEF} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation) Task: {18BB7ABA-BC9D-4859-8264-A0B78D138880} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation) Task: {3CC172CB-0F87-4324-B779-EA164BD9F3BC} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> ) Task: {3F61DDD1-12EC-4487-9A85-78C44546CE1E} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation) Task: {48800AF4-E74C-4FBC-AF32-6FC36829348F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation) Task: {4B52A1E1-347A-4FE6-BB4F-C31EBD9BE80F} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\WINDOWS\system32\EOSNotify.exe Task: {541CBC37-5C4D-47CC-97EE-544A80791093} - System32\Tasks\F-Secure\F-Secure Hotfix => C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fs_hotfix.exe [308608 2020-11-03] (F-Secure Corporation -> F-Secure Corporation) Task: {54C79489-DAD7-48D9-B67D-0AE8084F2DBD} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [422704 2016-09-13] (Acer Incorporated -> Acer Incorporated) Task: {5804CF46-8CC0-49D0-8CAC-CB55AF24C19C} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2016-09-13] (Acer Incorporated -> Acer Incorporated) Task: {58EE4B15-C5C7-4BCF-88B7-A90FFD7BBE4A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.) Task: {5C22EA54-D41D-4962-981C-FD89FC794D33} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-15] (Microsoft Corporation -> Microsoft Corporation) Task: {5F1E8EB6-24CF-42BD-B8B8-92A90FBBAF23} - System32\Tasks\Acer Collection Application => C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe [479024 2017-12-14] (Acer Incorporated -> ) Task: {6984CA35-2053-4E8D-94A1-4A6E1130EA48} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296 2014-03-12] (Acer Incorporated -> TODO: ) Task: {6DACFD6D-745D-4E25-B3C8-BF04D778B9F0} - System32\Tasks\Opera scheduled Autoupdate 1600540508 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe Task: {6EB5BF64-362B-4F51-8E78-3FF137DD1D6E} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated) Task: {8A700F4E-0E55-4964-BFE8-92E15BF46CCC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation) Task: {9200BB53-2BB7-4446-9404-FDB7460F3B79} - System32\Tasks\App Explorer => C:\Users\charr\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7968424 2020-12-03] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION Task: {9BF56B96-63E7-4C86-945D-DF8D5355D99C} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [417072 2017-12-13] (Acer Incorporated -> Acer Incorporated) Task: {AB763A04-1EA9-4E28-8F85-3694BDB46D69} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation) Task: {B49E89A1-8BCA-45A0-BCC5-CDA8764B8DCF} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe Task: {B770338B-E232-485E-9E44-8AA4646124CA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\WSCStub.exe [707624 2019-09-11] (Symantec Corporation -> Symantec Corporation) Task: {B88DB2C1-8F91-4D69-A5EF-9F2CE0563857} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-17] (Google Inc -> Google Inc.) Task: {C6E1E844-46C9-4931-89C4-B8CE301279CC} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2919840 2016-06-24] (Acer Incorporated -> ) Task: {CF25D159-2FCF-4347-B04A-A4CEAA9CA643} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4644256 2016-06-24] (Acer Incorporated -> ) Task: {D91E5E3D-54D7-402F-B219-240BE33ACF95} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2767152 2016-09-13] (Acer Incorporated -> Acer Incorporated) Task: {DB8A461D-7D14-4944-89B0-227A9BF02901} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> ) Task: {DDB78B42-73DA-48E3-9478-8F9C1DD04AFC} - System32\Tasks\Opera scheduled assistant Autoupdate 1600540521 => C:\Users\charr\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\charr\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {E451FC6F-04C2-4038-8258-205B83433E22} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {FB1EEE25-8412-49A0-8C46-2DA942647284} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\SymErr.exe [102424 2019-09-11] (Symantec Corporation -> Symantec Corporation) Task: {FD2AA348-8760-4077-AFA6-1BDDBCAD3B42} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-07] (Microsoft Corporation -> Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{0276e560-2451-4c76-acce-aade3a1fa80f}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{aca2f51c-c98b-476f-a53f-67f0130e5e0c}: [DhcpNameServer] 40.33.1.66 Edge: ====== Edge DefaultProfile: Default Edge Profile: C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-22] Edge Extension: (Browsing Protection by F-Secure) - C:\Users\charr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-10-13] Edge HKLM\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] Edge HKLM-x32\...\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] FireFox: ======== FF DefaultProfile: uijzdugu.default FF ProfilePath: C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default [2020-12-22] FF Homepage: Mozilla\Firefox\Profiles\uijzdugu.default -> hxxps://www.google.fr/search?q=google&ie=utf-8&oe=utf-8&gws_rd=cr&dcr=0&ei=IX3PWb_lDIn1aMzPlvgB FF Extension: (Français Language Pack) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2020-12-22] FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\sp@avast.com.xpi [2020-12-20] FF Extension: (Avast Online Security) - C:\Users\charr\AppData\Roaming\Mozilla\Firefox\Profiles\uijzdugu.default\Extensions\wrc@avast.com.xpi [2020-12-20] FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2020-12-20] [] FF Extension: (Français Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-fr@firefox.mozilla.org [2020-12-20] [] FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2020-12-20] [] FF HKLM\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi FF Extension: (Soda PDF Desktop 11 Creator) - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi [2019-10-09] FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-15] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default [2020-12-22] CHR StartupUrls: Default -> "hxxps://www.bing.com/?FORM=SLBRDF&PC=SL09" CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?FORM=SLBRDF&PC=SL10&q={searchTerms} CHR DefaultSearchKeyword: Default -> bing.com CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms} CHR Extension: (Slides) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-18] CHR Extension: (Safe Torrent Scanner) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2020-11-23] CHR Extension: (Docs) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-18] CHR Extension: (Google Drive) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-26] CHR Extension: (YouTube) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-17] CHR Extension: (Norton Security Toolbar) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2019-04-25] CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-09] CHR Extension: (Sheets) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-18] CHR Extension: (Fenetre Mailto) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gepijnnkhnilemhhacebnhcndgogkamc [2020-03-10] CHR Extension: (Google Docs hors connexion) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-16] CHR Extension: (Norton Identity Safe) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-09-17] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-14] CHR Extension: (Gmail) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-26] CHR Extension: (Chrome Media Router) - C:\Users\charr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-14] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb] CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\Exts\Chrome.crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2016-08-31] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-03-27] (BattlEye Innovations e.K. -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-12-01] (Microsoft Corporation -> Microsoft Corporation) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-08] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) R2 fshoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation) R2 fsnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation) R2 fsulhoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R2 fsulnethoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R2 fsulorsp; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsorsp64.exe [101248 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R2 fsulprothoster; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulprothoster.exe [624888 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R2 NortonSecurity; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\NortonSecurity.exe [225608 2019-09-11] (Symantec Corporation -> Symantec Corporation) R2 nsWscSvc; C:\Program Files (x86)\Norton Security\Engine\22.19.8.65\nsWscSvc.exe [936808 2019-09-11] (Symantec Corporation -> Symantec Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2329904 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts) S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3204912 2019-09-14] (Electronic Arts, Inc. -> Electronic Arts) R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [441136 2016-09-13] (Acer Incorporated -> Acer Incorporated) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [482608 2016-09-13] (Acer Incorporated -> Acer Incorporated) R3 Soda PDF Desktop 11; C:\Program Files\Soda PDF Desktop 11\ws.exe [2470160 2019-10-09] (LULU Software -> LULU Software) S3 Soda PDF Desktop 11 Creator; C:\Program Files\Soda PDF Desktop 11\creator\common\creator-ws.exe [575248 2019-10-09] (LULU Software -> LULU Software) R2 Soda PDF Desktop 11 Update Service; C:\Program Files\Soda PDF Desktop 11\updater-ws.exe [1784080 2019-10-09] (LULU Software -> LULU Software) R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [301872 2018-01-10] (Acer Incorporated -> acer) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20181204.001\BHDrvx64.sys [1925104 2018-11-19] (Symantec Corporation -> Symantec Corporation) R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\ccSetx64.sys [194416 2019-09-11] (Symantec Corporation -> Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [515792 2018-11-29] (Symantec Corporation -> Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153296 2018-12-09] (Symantec Corporation -> Symantec Corporation) R3 F-Secure Gatekeeper; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fsulgk.sys [321768 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R1 F-Secure UL HIPS; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\ulcore\1607432682\fshs.sys [104680 2020-12-08] (F-Secure Corporation -> F-Secure Corporation) R0 fsbts; C:\WINDOWS\System32\drivers\fsbts.sys [58752 2020-12-02] (F-Secure Corporation -> F-Secure Corporation) S0 fselms; C:\WINDOWS\System32\drivers\fselms.sys [15304 2020-07-18] (Microsoft Windows Early Launch Anti-malware Publisher -> F-Secure Corporation) R2 fsnif2; C:\Program Files (x86)\Pack Sérénité\Darty Sécurité\Ultralight\nif2\1606295644\nif2s64.sys [179440 2020-11-25] (F-Secure Corporation -> F-Secure Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\IPSDefs\20181207.061\IDSvia64.sys [1305072 2018-11-23] (Symantec Corporation -> Symantec Corporation) R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31000 2018-05-15] (Acer Incorporated -> Acer Incorporated) R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25368 2018-05-15] (Acer Incorporated -> Acer Incorporated) S3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSP64.SYS [885936 2019-09-11] (Symantec Corporation -> Symantec Corporation) R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SRTSPX64.SYS [50864 2019-09-11] (Symantec Corporation -> Symantec Corporation) S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45928 2017-06-29] (SteelSeries ApS -> SteelSeries ApS) R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SYMEFASI64.SYS [1963400 2019-09-11] (Symantec Corporation -> Symantec Corporation) S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\SymELAM.sys [25744 2019-09-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [100064 2019-03-30] (Symantec Corporation -> Symantec Corporation) S4 SymEvnt; C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\SymPlatform\SymEvnt.sys [114352 2018-10-27] (Symantec Corporation -> Symantec Corporation) R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\Ironx64.SYS [316656 2019-09-11] (Symantec Corporation -> Symantec Corporation) R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\symnets.sys [573448 2019-09-11] (Symantec Corporation -> Symantec Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [78216 2020-08-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [430320 2020-08-19] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-19] (Microsoft Windows -> Microsoft Corporation) S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1613080.041\wpCtrlDrv.sys [1012120 2019-09-11] (Symantec Corporation -> Symantec Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-12-22 12:09 - 2020-12-22 12:13 - 000031254 _____ C:\Users\charr\Desktop\FRST.txt 2020-12-22 12:04 - 2020-12-22 12:11 - 000000000 ____D C:\FRST 2020-12-20 16:39 - 2020-12-22 11:51 - 000000000 ____D C:\Users\charr\AppData\Local\IIIQF 2020-12-20 16:01 - 2020-12-20 16:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2020-12-20 12:28 - 2020-12-20 12:24 - 000051056 _____ C:\Users\charr\Documents\Addition.txt 2020-12-20 12:28 - 2020-12-20 12:24 - 000044377 _____ C:\Users\charr\Documents\FRST.txt 2020-12-20 12:14 - 2020-12-20 12:24 - 000051056 _____ C:\Users\charr\Downloads\Addition.txt 2020-12-20 11:51 - 2020-12-20 11:51 - 002286592 _____ (Farbar) C:\Users\charr\Desktop\FRST64(1).exe 2020-12-16 11:58 - 2020-12-16 11:58 - 000133454 _____ C:\Users\charr\Downloads\2020-2021_L1_UE104_ThéorieKaraté_Session1_SUJET (1).pdf 2020-12-15 21:26 - 2020-12-15 21:26 - 005044013 _____ C:\Users\charr\Downloads\Team_Psycho_-_GKR.pdf 2020-12-15 12:25 - 2020-12-15 12:25 - 000223127 _____ C:\Users\charr\Downloads\CLR - REGLAMENTO.pdf 2020-12-14 14:07 - 2020-12-14 14:07 - 000868305 _____ C:\Users\charr\Downloads\PJ_B01_22009723_2020.pdf 2020-12-13 12:33 - 2020-12-13 12:33 - 003630944 _____ C:\Users\charr\Downloads\TEF2018_141.pdf 2020-12-13 12:33 - 2020-12-13 12:33 - 000108032 _____ C:\Users\charr\Downloads\T18F141.xls 2020-12-12 17:00 - 2020-12-12 17:00 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-12-12 16:59 - 2020-12-12 16:59 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-12-12 16:58 - 2020-12-12 16:58 - 001333248 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2020-12-12 16:58 - 2020-12-12 16:58 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll 2020-12-12 16:58 - 2020-12-12 16:58 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl 2020-12-12 16:58 - 2020-12-12 16:58 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2020-12-12 16:58 - 2020-12-12 16:58 - 000010912 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2020-12-12 16:57 - 2020-12-12 16:57 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll 2020-12-12 16:57 - 2020-12-12 16:57 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe 2020-12-12 16:56 - 2020-12-12 16:56 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl 2020-12-12 16:56 - 2020-12-12 16:56 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe 2020-12-12 16:56 - 2020-12-12 16:56 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2020-12-12 16:55 - 2020-12-12 16:55 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-12-12 16:55 - 2020-12-12 16:55 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-12-12 16:55 - 2020-12-12 16:55 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt 2020-12-12 16:54 - 2020-12-12 16:54 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-12-12 16:54 - 2020-12-12 16:54 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll 2020-12-12 16:54 - 2020-12-12 16:54 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll 2020-12-12 16:54 - 2020-12-12 16:54 - 000165376 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2020-12-12 16:54 - 2020-12-12 16:54 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll 2020-12-12 16:54 - 2020-12-12 16:54 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll 2020-12-12 16:54 - 2020-12-12 16:54 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe 2020-12-10 11:17 - 2020-12-10 11:17 - 000166547 _____ C:\Users\charr\Downloads\Non confirmé 481865.crdownload 2020-12-09 11:53 - 2020-12-09 11:53 - 006755768 _____ C:\Users\charr\Downloads\anatomie_cours_entier_sa_mere_la_pute (1).odt 2020-12-09 11:51 - 2020-12-09 11:51 - 000868305 _____ C:\Users\charr\Downloads\AttestationCIP.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000653924 _____ C:\Users\charr\Downloads\UE 106 MAE ROCHE.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000577243 _____ C:\Users\charr\Downloads\UE 102 HISTOIRE DU MOUVEMENT SPORTIF.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000488611 _____ C:\Users\charr\Downloads\10 THÉORIE KARATE.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000464979 _____ C:\Users\charr\Downloads\UE 103 ECONOMIE ET GESTION.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000206797 _____ C:\Users\charr\Downloads\14 THÉORIE WATER POLO.pdf 2020-12-08 14:14 - 2020-12-08 14:14 - 000143408 _____ C:\Users\charr\Downloads\5 THÉORIE DANSE.pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000569847 _____ C:\Users\charr\Downloads\10 Théorie Karaté.pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000375903 _____ C:\Users\charr\Downloads\Sujet UE 102 Histoire.pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000303619 _____ C:\Users\charr\Downloads\SUJET UE 106 MAE Thomas .pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000296784 _____ C:\Users\charr\Downloads\13 Théorie water-polo.pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000202744 _____ C:\Users\charr\Downloads\Sujet UE 106 Passerelle staps-kiné session 1 déc 2017.pdf 2020-12-08 14:13 - 2020-12-08 14:13 - 000201752 _____ C:\Users\charr\Downloads\Sujet UE 103 Eco Gestion .pdf 2020-12-07 15:57 - 2020-12-07 15:58 - 001580292 _____ C:\Users\charr\Downloads\Textes Histoire 1.pdf 2020-12-07 15:48 - 2020-12-07 15:49 - 000018899 _____ C:\Users\charr\Downloads\LISTE STAGE ANGLAIS OUI SI STAPS Clermont - 6 groupes.xlsx 2020-12-07 15:43 - 2020-12-07 15:43 - 000252717 _____ C:\Users\charr\Downloads\AttestationJDC.zip 2020-12-07 15:43 - 2020-12-07 15:43 - 000252713 _____ C:\Users\charr\Downloads\AttestationJDC (1).zip 2020-12-04 16:58 - 2020-12-04 16:58 - 000307136 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN DISTANCIEL L1 CLERMONT FERRAND S1 2020 2021.pdf 2020-12-04 16:58 - 2020-12-04 16:58 - 000219759 _____ C:\Users\charr\Downloads\CONVOCATION EXAMENS EN PRESENTIEL L1 CLERMONT FERRAND S1 2020 2021.pdf 2020-12-04 15:57 - 2020-12-04 15:57 - 000177612 _____ C:\Users\charr\Downloads\AttestationJDCR.pdf 2020-12-02 16:52 - 2020-12-02 16:53 - 000794415 _____ C:\Users\charr\Downloads\tuto utilisation espace jeune sommaire.pdf 2020-12-01 20:49 - 2020-12-01 20:49 - 004834925 _____ C:\Users\charr\Downloads\Les Souvenirs Final.m4a 2020-11-26 18:44 - 2020-12-18 14:19 - 000000000 ____D C:\Users\charr\AppData\Local\Spotify 2020-11-26 18:44 - 2020-11-26 18:44 - 000001854 _____ C:\Users\charr\Desktop\Spotify.lnk 2020-11-26 18:44 - 2020-11-26 18:44 - 000001840 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2020-11-26 18:43 - 2020-12-18 14:11 - 000000000 ____D C:\Users\charr\AppData\Roaming\Spotify 2020-11-26 18:42 - 2020-11-26 18:42 - 000892232 _____ (Spotify Ltd) C:\Users\charr\Downloads\SpotifySetup.exe 2020-11-24 18:19 - 2020-11-24 18:19 - 001491093 _____ C:\Users\charr\Downloads\L1 présentation UFR STAPS rentrée 2020 version RENTREE 31-08-2020 (4).pptx 2020-11-23 18:04 - 2020-11-23 18:05 - 000012588 _____ C:\Users\charr\Downloads\Invoice-OD25063.pdf ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-12-22 12:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-12-22 11:51 - 2017-09-16 16:52 - 000000000 ____D C:\ProgramData\~0 2020-12-22 10:35 - 2019-05-12 10:09 - 000000000 ____D C:\ProgramData\Mozilla 2020-12-22 10:34 - 2020-09-25 01:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-12-22 10:34 - 2017-09-16 17:14 - 000000000 ____D C:\Users\charr\AppData\LocalLow\Mozilla 2020-12-22 09:45 - 2017-09-16 16:59 - 000000000 ____D C:\Users\charr\AppData\Local\Host App Service 2020-12-20 16:14 - 2017-03-23 03:37 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-12-20 16:01 - 2017-03-23 03:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-12-20 12:20 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2020-12-20 12:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-12-20 11:00 - 2020-06-20 14:20 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2020-12-20 11:00 - 2020-06-20 14:20 - 000002267 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2020-12-20 10:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-12-20 10:53 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2020-12-18 13:59 - 2017-09-16 17:05 - 000000000 __SHD C:\Users\charr\IntelGraphicsProfiles 2020-12-18 13:56 - 2017-03-23 03:11 - 000000000 ____D C:\ProgramData\NVIDIA 2020-12-18 13:55 - 2020-09-25 02:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-12-18 13:55 - 2020-09-25 01:05 - 000008192 ___SH C:\DumpStack.log.tmp 2020-12-17 12:11 - 2019-10-02 17:21 - 000002164 _____ C:\Users\Public\Desktop\Darty Sécurité.lnk 2020-12-17 12:11 - 2019-10-02 15:48 - 000000000 ____D C:\ProgramData\F-Secure 2020-12-17 11:27 - 2017-09-16 17:05 - 000000000 ____D C:\Users\charr\AppData\Local\Packages 2020-12-16 14:45 - 2017-09-17 18:55 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-12-16 14:05 - 2017-09-17 18:55 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-12-15 21:01 - 2017-03-23 02:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2020-12-15 13:11 - 2020-09-25 01:11 - 000000000 ____D C:\Users\charr 2020-12-14 22:15 - 2020-09-25 02:01 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1333090055-3807291771-4262163453-1001 2020-12-14 22:15 - 2020-09-25 01:11 - 000002409 _____ C:\Users\charr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-12-14 22:15 - 2017-09-16 17:11 - 000000000 ___RD C:\Users\charr\OneDrive 2020-12-14 09:33 - 2020-09-25 01:27 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-12-14 09:33 - 2019-12-07 15:49 - 000792838 _____ C:\WINDOWS\system32\perfh00C.dat 2020-12-14 09:33 - 2019-12-07 15:49 - 000149968 _____ C:\WINDOWS\system32\perfc00C.dat 2020-12-14 00:33 - 2020-09-25 01:05 - 000435232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-12-14 00:31 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz 2020-12-14 00:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender 2020-12-14 00:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2020-12-12 17:20 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-12-04 10:05 - 2020-09-25 02:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-12-04 10:05 - 2020-09-25 02:01 - 000003464 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-12-02 13:45 - 2019-10-02 17:27 - 000058752 _____ (F-Secure Corporation) C:\WINDOWS\system32\Drivers\fsbts.sys 2020-11-28 10:06 - 2020-09-25 02:01 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2020-11-28 10:06 - 2020-09-25 02:01 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2020-11-27 00:07 - 2020-11-17 21:25 - 000000000 ____D C:\Users\charr\AppData\Roaming\Molotov ==================== FCheck ================================ (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) FCheck: C:\WINDOWS\system32\eac_usermode_192940383298992.dll [2019-06-05] <==== ATTENTION (zéro octet Fichier/Dossier) FCheck: C:\WINDOWS\system32\eac_usermode_334110525781145.dll [2019-07-05] <==== ATTENTION (zéro octet Fichier/Dossier) FCheck: C:\WINDOWS\system32\eac_usermode_487699285482387.dll [2019-07-17] <==== ATTENTION (zéro octet Fichier/Dossier) FCheck: C:\WINDOWS\system32\eac_usermode_53072229187599.dll [2019-06-13] <==== ATTENTION (zéro octet Fichier/Dossier) ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================