Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2021 Exécuté par arsen (administrateur) sur LAPTOP-22 (LENOVO 81FV) (22-06-2021 14:10:56) Exécuté depuis D:\DL FIREFOX Profils chargés: arsen Platform: Windows 10 Home Version 1909 18363.959 (X64) Langue: Français (France) Navigateur par défaut: FF Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Avid Technology, Inc.) [Fichier non signé] C:\Program Files\Avid\Pro Tools\MMERefresh.exe (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GlassWire.exe (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_7ecc5be6ca7b3b0d\esif_uf.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126952.inf_amd64_3a7aa448c1263333\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126952.inf_amd64_3a7aa448c1263333\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126952.inf_amd64_3a7aa448c1263333\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126952.inf_amd64_3a7aa448c1263333\IntelCpHeciSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (Malwarebytes Inc -> Malwarebytes) C:\Users\arsen\Desktop\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Users\arsen\Desktop\mbamtray.exe (Mark of the Unicorn, Inc -> MOTU) C:\Program Files (x86)\MOTU\CoreUAC\MOTUMSeries.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe <3> (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <3> (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12> (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_26b95d77df428d87\Display.NvContainer\NVDisplay.Container.exe <2> (PACE Anti-Piracy, Inc.) [Fichier non signé] C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [Fences] => C:\Program Files (x86)\Stardock\Fences\Fences.exe [3934168 2016-09-16] (Stardock Corporation -> Stardock Corporation) [Fichier non signé] HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools\MMERefresh.exe [117760 2016-05-09] (Avid Technology, Inc.) [Fichier non signé] HKLM\...\Run: [MOTUMSeries.exe] => C:\Program Files (x86)\MOTU\CoreUAC\MOTUMSeries.exe [239736 2021-03-26] (Mark of the Unicorn, Inc -> MOTU) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2623032 2019-07-05] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\Run: [Fences] => C:\program files (x86)\stardock\fences\Fences.exe [3934168 2016-09-16] (Stardock Corporation -> Stardock Corporation) [Fichier non signé] HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [34508416 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-10-04] (AVB Disc Soft, SIA -> Disc Soft Ltd) HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\Run: [GlassWire] => C:\Program Files (x86)\GlassWire\GlassWire.exe [8938392 2021-02-19] (GlassWire -> SecureMix LLC) HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\RunOnce: [Application Restart #2] => C:\Program Files\Focusriteusb\Focusrite Notifier.exe [5029376 2020-06-02] (Focusrite Audio Engineering, Ltd.) [Fichier non signé] HKU\S-1-5-21-1735210599-1301869193-3042438888-1001\...\MountPoints2: {c5cbc164-c80a-11e8-9311-8c1645ac29ee} - "E:\Setup.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickScan (OpticFilm 8100).lnk [2021-01-24] ShortcutTarget: QuickScan (OpticFilm 8100).lnk -> C:\Program Files (x86)\Plustek\OpticFilm 8100\QuickScan_x64.exe () [Fichier non signé] Startup: C:\Users\arsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2020-09-04] ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BootExecute: BootManautocheck autochk * Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0654BB18-F722-4DA8-AEED-486DE5EA395A} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\452c77ae-5879-4616-9e83-3ff58d728c73 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.) Task: {1348EBE5-3F91-44FC-A10E-E06DCF06D97D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118104 2021-06-21] (Microsoft Corporation -> Microsoft Corporation) Task: {1C956523-6D0C-4B32-B0D6-A6F30FF9798D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation) Task: {20671C1C-2465-42EE-A885-1A8E846EFD2C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3953096 2021-05-29] (Microsoft Corporation -> Microsoft Corporation) Task: {29319A39-4850-4AB8-9848-4AC197BDC03F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118104 2021-06-21] (Microsoft Corporation -> Microsoft Corporation) Task: {3218621B-542F-4008-9E40-DDBE6A8B836F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3dd9d638-1e2a-4b63-a91d-ba004dceb9bf => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.) Task: {34430371-60F5-42E2-962B-AB077F426624} - System32\Tasks\Lenovo\FBNetFilter PNP Task => C:\WINDOWS\System32\drivers\FBNetFilterInstall.exe Task: {4A72F8A1-0057-4E0E-932D-9453DE8D12BC} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {57DE4AF9-C8C7-4F48-9A0A-692C504276EE} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe Task: {59311E6D-A332-4997-B9F8-CB46488D2B8D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {6494271A-EF1C-4F48-9DD5-32C30368F530} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform) Task: {7E17D5AE-16C6-4C78-B0D8-AE45B6200D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd) Task: {85ADA3F9-D949-4034-B81D-30056C0AC9AC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-18] (Mozilla Corporation -> Mozilla Foundation) Task: {90FFC18D-99CC-4A4F-BDF1-E8A0341CBEA3} - System32\Tasks\Driver Booster SkipUAC (arsen) => C:\Program Files (x86)\IObit\Driver Booster\5.5.1\DriverBooster.exe Task: {98E1F7BD-F9D9-455C-89A1-0A3AAC17B4FA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {A0D728A5-2E59-420B-89F0-10A290460789} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-17] (Microsoft Corporation -> Microsoft Corporation) Task: {C712AE61-36B3-4ECF-A030-C51486CB3FA1} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK Task: {CCB32C6F-4372-417C-9442-434C653D3BB6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D144934C-3D72-4DAF-A9B7-3603E2BFAFCC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-17] (Microsoft Corporation -> Microsoft Corporation) Task: {DE5614E1-4FFD-4493-904C-12FCF79DF9B2} - System32\Tasks\LenovoUtility Task => C:\Windows\explorer.exe lenovo-utility:// Task: {DE91AD33-8980-47EE-8E08-9ED6EA0B7935} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-12] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E4392FA3-0A0F-4F11-8E72-4FB05294A489} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1069f3ab-3a0d-4720-8eb6-d3e4b41b5549 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.) Task: {EEBD0348-26C3-481C-936E-A9D45362F160} - System32\Tasks\Microsoft\Windows\AppID\mdm0412 => rundll32.exe C:\Users\arsen\AppData\Local\TempNotify\RurfjceIormat\Micssrt_Bcoiag.dll Spstdm_FiluctidySew32 Task: {F3DBCF1C-5F4F-4055-90F6-B4F74C1787E0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3953096 2021-05-29] (Microsoft Corporation -> Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{2f9c5870-7116-4eb3-89ca-c91f9cc0e069}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{3fb6b346-2175-499e-b155-083247894246}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{b1a0ba22-f453-4219-a242-186a33b9b44d}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Edge: ======= DownloadDir: C:\Users\arsen\Downloads FireFox: ======== FF DefaultProfile: ma7qypu4.default FF ProfilePath: C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\ma7qypu4.default [2021-06-22] FF ProfilePath: C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release [2021-06-22] FF DownloadDir: D:\DL FIREFOX FF NetworkProxy: Mozilla\Firefox\Profiles\v69fgj4y.default-release -> type", 0 FF Session Restore: Mozilla\Firefox\Profiles\v69fgj4y.default-release -> est activé. FF Notifications: Mozilla\Firefox\Profiles\v69fgj4y.default-release -> hxxps://mail.google.com; hxxps://drive.google.com FF Extension: (HTTPS partout) - C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release\Extensions\https-everywhere@eff.org.xpi [2021-04-15] FF Extension: (Decentraleyes) - C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-12-07] FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2021-06-08] FF Extension: (SponsorBlock pour YouTube - Supprime les publicités intégrées) - C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release\Extensions\sponsorBlocker@ajay.app.xpi [2021-05-24] FF Extension: (uBlock Origin) - C:\Users\arsen\AppData\Roaming\Mozilla\Firefox\Profiles\v69fgj4y.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-05-05] FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-07-05] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-29] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-29] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-07-05] (Adobe Inc. -> Adobe Systems) ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-07-05] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11279752 2021-06-17] (Microsoft Corporation -> Microsoft Corporation) R2 DigiRefresh; C:\Program Files\Avid\Pro Tools\MMERefresh.exe [117760 2016-05-09] (Avid Technology, Inc.) [Fichier non signé] S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [197632 2016-05-09] (Avid Technology, Inc.) [Fichier non signé] R2 DolbyDAXAPI; C:\Windows\system32\dolbyaposvc\DAX3API.exe [398352 2018-06-21] (Dolby Laboratories, Inc. -> ) S3 FastTrackSoloAudioDevMon; C:\Program Files (x86)\Avid\Fast Track Solo\AudioDevMon.exe [2040592 2013-05-24] (Avid Technology, Inc. -> Avid) R2 FMAPOService; C:\Windows\System32\FMService64.exe [305520 2018-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [6646680 2021-02-19] (GlassWire -> SecureMix LLC) R2 ImControllerService; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.) R2 MBAMService; C:\Users\arsen\Desktop\MBAMService.exe [7391408 2021-06-22] (Malwarebytes Inc -> Malwarebytes) R2 PaceLicenseDServices; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2938880 2012-05-18] (PACE Anti-Piracy, Inc.) [Fichier non signé] R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-06-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-06-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_26b95d77df428d87\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_26b95d77df428d87\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AVIDUSBFASTTRACKSOLO; C:\Windows\System32\drivers\AvidFastTrackSolo.sys [526096 2013-05-24] (Avid Technology, Inc. -> Avid) R1 dokan1; C:\Windows\System32\DRIVERS\dokan1.sys [131784 2019-12-16] (ADAPP SASU -> Dokan Project) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-10-05] (Disc Soft Ltd -> Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-10-05] (Disc Soft Ltd -> Disc Soft Ltd) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [199128 2021-06-22] (Malwarebytes Inc -> Malwarebytes) S3 FBNetFilter; C:\Windows\System32\drivers\FBNetFlt.sys [43896 2019-09-10] (Microsoft Windows Hardware Compatibility Publisher -> Lenovo Group Ltd.) S3 Focusriteusb; C:\Windows\System32\drivers\Focusriteusb.sys [123456 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.) R3 FocusriteusbSwRoot; C:\Windows\System32\drivers\FocusriteusbSwRoot.sys [92568 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.) S3 Focusriteusb_AUDIO; C:\Windows\system32\drivers\FocusriteusbAudio.sys [87912 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.) R1 gwdrv; C:\Windows\system32\DRIVERS\gwdrv.sys [33152 2015-05-29] (GlassWire -> SecureMix LLC) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-09-11] (Martin Malik - REALiX -> REALiX(tm)) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220752 2021-06-22] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2021-06-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [198888 2021-06-22] (Malwarebytes Inc -> Malwarebytes) R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [69016 2021-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-06-22] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [156880 2021-06-22] (Malwarebytes Inc -> Malwarebytes) S3 MOTUCoreUAC; C:\Windows\System32\Drivers\MOTUCoreUAC.sys [131096 2021-03-26] (Mark of the Unicorn, Inc -> MOTU, Inc) R3 necbatt; C:\Windows\System32\drivers\necbatt.sys [37240 2018-09-11] (NEC Personal Computers, Ltd. -> NEC Personal Computers, Ltd.) S3 usbscan; C:\Windows\SysWOW64\DRIVERS\usbscan.sys [8944 1999-05-05] (Microsoft Corporation) [Fichier non signé] S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49568 2021-06-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [425184 2021-06-12] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [76000 2021-06-12] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-06-22 14:08 - 2021-06-22 14:08 - 000442439 _____ C:\Users\Public\Desktop\ZHPDiag.txt 2021-06-22 13:33 - 2021-06-22 10:15 - 003816744 ____C (MalwareBytes) C:\Users\arsen\Desktop\ig.exe 2021-06-22 12:27 - 2021-06-22 12:27 - 000198888 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2021-06-22 12:27 - 2021-06-22 12:27 - 000156880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2021-06-22 12:27 - 2021-06-22 12:27 - 000069016 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2021-06-22 10:15 - 2021-06-22 12:27 - 000000000 ___DC C:\Users\arsen\Desktop\sdk 2021-06-22 10:15 - 2021-06-22 10:15 - 014219056 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbam.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 006606360 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbamtray.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 006567088 ____C (Malwarebytes) C:\Users\arsen\Desktop\CleanControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 006539736 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Core.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 006218976 ____C (Malwarebytes) C:\Users\arsen\Desktop\MBAMCore.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005955584 ____C (Malwarebytes) C:\Users\arsen\Desktop\BrowserSDKDLL.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005682760 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Widgets.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005589880 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Gui.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005498976 ____C (Malwarebytes) C:\Users\arsen\Desktop\ScanControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005185968 ____C (Malwarebytes) C:\Users\arsen\Desktop\MWACControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 005051144 ____C (Malwarebytes) C:\Users\arsen\Desktop\arwlib.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004983496 ____C (Malwarebytes) C:\Users\arsen\Desktop\TelemetryControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004699928 ____C (Malwarebytes) C:\Users\arsen\Desktop\CloudControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004488136 ____C (Malwarebytes) C:\Users\arsen\Desktop\Actions.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004352288 ____C (Malwarebytes) C:\Users\arsen\Desktop\UpdateControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004340440 ____C (Malwarebytes) C:\Users\arsen\Desktop\RTPControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004269688 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Quick.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 004253088 ____C (Malwarebytes) C:\Users\arsen\Desktop\LicenseControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003875064 ____C (Malwarebytes) C:\Users\arsen\Desktop\ArwControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003817728 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Qml.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003640048 ____C (Malwarebytes) C:\Users\arsen\Desktop\Swissarmy.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003636944 ____C () C:\Users\arsen\Desktop\QtANGLE.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003620968 ____C (Malwarebytes) C:\Users\arsen\Desktop\MwacLib.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003334792 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Network.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 003314720 ____C (Malwarebytes) C:\Users\arsen\Desktop\AEControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002986136 ____C C:\Users\arsen\Desktop\SelfProtectionSdk.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002912824 ____C (Malwarebytes) C:\Users\arsen\Desktop\rtp.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002857016 ____C (Malwarebytes) C:\Users\arsen\Desktop\SPControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002701064 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5XmlPatterns.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002685592 ____C (Malwarebytes) C:\Users\arsen\Desktop\MBAMShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002539400 ____C (Malwarebytes) C:\Users\arsen\Desktop\BrowserSDKDLLShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002533224 ____C (Malwarebytes) C:\Users\arsen\Desktop\PoliciesControllerImpl.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002510480 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbcut.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002498592 ____C (Malwarebytes) C:\Users\arsen\Desktop\SelfProtectionShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002376736 ____C (Malwarebytes) C:\Users\arsen\Desktop\MBAMWsc.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 002361144 ____C (Malwarebytes Corporation) C:\Users\arsen\Desktop\mbae-api-na.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002236704 ____C (Malwarebytes) C:\Users\arsen\Desktop\SwissarmyShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002187632 ____C (Malwarebytes) C:\Users\arsen\Desktop\ActionsShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002180432 ____C (Malwarebytes) C:\Users\arsen\Desktop\MwacSdkShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002171184 ____C (Malwarebytes) C:\Users\arsen\Desktop\RtpShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002167008 ____C (Malwarebytes) C:\Users\arsen\Desktop\AeShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 002161816 ____C (Malwarebytes) C:\Users\arsen\Desktop\ArwSdkShim.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 001706816 ____C (Igor Pavlov) C:\Users\arsen\Desktop\7z.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 001461464 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Charts.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 001337536 ____C (Malwarebytes) C:\Users\arsen\Desktop\assistant.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 001336512 ____C (Malwarebytes) C:\Users\arsen\Desktop\malwarebytes_assistant.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 001155144 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5QuickTemplates2.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000793176 ____C (Malwarebytes Corporation) C:\Users\arsen\Desktop\mbae64.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000687208 ____C (Malwarebytes) C:\Users\arsen\Desktop\MbamBgNativeMsg.exe 2021-06-22 10:15 - 2021-06-22 10:15 - 000656744 ____C (Malwarebytes Corporation) C:\Users\arsen\Desktop\mbae.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000544160 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5QmlModels.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000524520 ____C C:\Users\arsen\Desktop\sample.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000489928 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5WinExtras.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000478120 ____C (Malwarebytes) C:\Users\arsen\Desktop\UIPlugin.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000342200 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5Svg.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2021-06-22 10:15 - 2021-06-22 10:15 - 000220752 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2021-06-22 10:15 - 2021-06-22 10:15 - 000199128 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbae64.sys 2021-06-22 10:15 - 2021-06-22 10:15 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2021-06-22 10:15 - 2021-06-22 10:15 - 000196632 ____C (Malwarebytes) C:\Users\arsen\Desktop\TrayPlugin.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000185664 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5QuickControls2.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000104120 ____C (Microsoft Corporation) C:\Users\arsen\Desktop\offreg.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000065392 ____C (The Qt Company Ltd.) C:\Users\arsen\Desktop\Qt5QmlWorkerScript.dll 2021-06-22 10:15 - 2021-06-22 10:15 - 000001890 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-06-22 10:15 - 2021-06-22 10:15 - 000001860 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2021-06-22 10:15 - 2021-06-22 10:15 - 000000615 ____C C:\Users\arsen\Desktop\ServiceConfig.json.bak 2021-06-22 10:15 - 2021-06-22 10:15 - 000000615 ____C C:\Users\arsen\Desktop\ServiceConfig.json 2021-06-22 10:15 - 2021-06-22 10:15 - 000000188 ____C C:\Users\arsen\Desktop\SecurityProductInformation.ini 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\styles 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\QtWinExtras 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\QtQuick.2 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\QtQuick 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\QtQml 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\QtCharts 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\Qt 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\platforms 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\languages 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\imageformats 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ___DC C:\Users\arsen\Desktop\iconengines 2021-06-22 10:15 - 2021-06-22 10:15 - 000000000 ____D C:\ProgramData\Malwarebytes 2021-06-22 10:15 - 2021-06-22 10:14 - 007391408 ____C (Malwarebytes) C:\Users\arsen\Desktop\MBAMService.exe 2021-06-22 10:15 - 2021-06-22 10:14 - 002395856 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbshlext_proto 2021-06-22 10:15 - 2021-06-22 10:14 - 002395856 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbshlext.dll 2021-06-22 10:15 - 2021-06-22 10:14 - 002094168 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbuns.exe 2021-06-22 10:15 - 2021-06-22 10:14 - 000021008 ____C (Malwarebytes) C:\Users\arsen\Desktop\MbamPt.exe 2021-06-22 10:15 - 2021-06-22 10:14 - 000019912 ____C (Malwarebytes) C:\Users\arsen\Desktop\mbamelam.sys 2021-06-22 10:15 - 2021-06-22 10:14 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys 2021-06-22 10:15 - 2021-06-22 10:14 - 000010009 ____C C:\Users\arsen\Desktop\mbamelam.cat 2021-06-22 10:15 - 2021-06-22 10:14 - 000000268 ____C C:\Users\arsen\Desktop\mbam.manifest.json 2021-06-22 10:15 - 2021-06-22 10:14 - 000000009 ____C C:\Users\arsen\Desktop\srvversion.dat 2021-06-22 10:15 - 2021-06-22 10:14 - 000000008 ____C C:\Users\arsen\Desktop\ctlrvers.dat 2021-06-22 10:14 - 2021-06-22 10:14 - 006911104 ____C (Malwarebytes) C:\Users\arsen\Desktop\MBAMInstallerService.exe 2021-06-22 10:12 - 2021-06-22 10:12 - 000000008 __RSH C:\ProgramData\ntuser.pol 2021-06-21 17:02 - 2021-06-22 14:11 - 000000000 ____D C:\FRST 2021-06-21 16:42 - 2021-06-21 16:43 - 000000558 _____ C:\DelFix.txt 2021-06-20 22:45 - 2021-06-20 22:45 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2021-06-18 16:53 - 2021-06-21 06:58 - 000000000 ____D C:\Program Files\Mozilla Firefox 2021-06-10 11:28 - 2021-06-10 11:28 - 000000821 ____C C:\Users\arsen\Desktop\ASIO4ALL Web Site.lnk 2021-06-10 11:07 - 2021-06-10 11:07 - 000000000 ____D C:\ProgramData\Ubisoft 2021-06-10 09:14 - 2021-06-10 09:14 - 000000000 ____D C:\Windows\system32\lxss 2021-06-10 09:14 - 2021-06-10 09:14 - 000000000 ____D C:\Windows\LastGood 2021-06-10 09:10 - 2021-05-31 18:15 - 001855184 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe 2021-06-10 09:10 - 2021-05-31 18:15 - 001855184 _____ C:\Windows\system32\vulkaninfo.exe 2021-06-10 09:10 - 2021-05-31 18:15 - 001453360 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2021-06-10 09:10 - 2021-05-31 18:15 - 001435864 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2021-06-10 09:10 - 2021-05-31 18:15 - 001435864 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2021-06-10 09:10 - 2021-05-31 18:15 - 001192752 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2021-06-10 09:10 - 2021-05-31 18:15 - 001094864 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll 2021-06-10 09:10 - 2021-05-31 18:15 - 001094864 _____ C:\Windows\system32\vulkan-1.dll 2021-06-10 09:10 - 2021-05-31 18:15 - 000948936 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll 2021-06-10 09:10 - 2021-05-31 18:15 - 000948936 _____ C:\Windows\SysWOW64\vulkan-1.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 001514784 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 001166096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 000715536 _____ C:\Windows\system32\nvofapi64.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 000689952 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe 2021-06-10 09:10 - 2021-05-31 18:11 - 000675104 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 000626960 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 000575760 _____ C:\Windows\SysWOW64\nvofapi.dll 2021-06-10 09:10 - 2021-05-31 18:11 - 000563984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 008317200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 007434032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 002823472 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 002106160 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 001590576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 000811808 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 000656176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2021-06-10 09:10 - 2021-05-31 18:10 - 000445744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe 2021-06-10 09:10 - 2021-05-31 18:09 - 004795152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2021-06-10 09:10 - 2021-05-31 18:09 - 000848688 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe 2021-06-10 09:10 - 2021-05-31 18:08 - 006159160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2021-06-10 09:10 - 2021-05-28 01:01 - 000087164 _____ C:\Windows\system32\nvinfo.pb 2021-06-10 09:05 - 2020-08-14 09:59 - 000043416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\NvModuleTracker.sys 2021-06-10 08:58 - 2021-06-10 08:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com 2021-06-10 08:58 - 2021-06-10 08:58 - 000000000 ____D C:\Program Files\Cybelsoft 2021-06-10 08:56 - 2021-06-10 08:57 - 000000000 ____D C:\Users\arsen\AppData\Roaming\Cybelsoft 2021-06-08 14:27 - 2021-06-08 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite 2021-06-08 14:27 - 2021-06-08 14:27 - 000000000 ____D C:\Program Files\Focusriteusb 2021-06-08 14:27 - 2020-06-02 15:35 - 000123456 _____ (Focusrite Audio Engineering Ltd.) C:\Windows\system32\Drivers\Focusriteusb.sys 2021-06-08 14:27 - 2020-06-02 15:35 - 000092568 _____ (Focusrite Audio Engineering Ltd.) C:\Windows\system32\Drivers\FocusriteusbSwRoot.sys 2021-06-08 14:27 - 2020-06-02 15:35 - 000087912 _____ (Focusrite Audio Engineering Ltd.) C:\Windows\system32\Drivers\FocusriteusbAudio.sys 2021-06-08 12:08 - 2021-06-08 12:08 - 000000000 ___DC C:\Users\arsen\AppData\LocalLow\BitTorrent 2021-06-08 08:11 - 2021-06-08 08:19 - 000000598 ___SH C:\Users\arsen\AppData\Local\5z5pwicm7jiqep7jmf2ktgjiuioarha 2021-06-08 08:11 - 2021-06-08 08:11 - 000000000 __SHD C:\Users\arsen\AppData\Local\icsxml 2021-06-08 08:11 - 2021-06-08 08:11 - 000000000 __SHD C:\ProgramData\win-net 2021-06-08 08:11 - 2021-06-08 08:11 - 000000000 ____D C:\Users\arsen\AppData\Roaming\BaseHead Inc 2021-06-08 08:10 - 2021-06-10 11:05 - 000000000 ___DC C:\Users\arsen\Documents\BaseHead 5.x 2021-06-08 08:10 - 2021-06-08 08:10 - 000000000 ____D C:\Users\arsen\AppData\Roaming\BaseHead, LLC 2021-06-08 08:10 - 2021-06-08 08:10 - 000000000 ____D C:\ProgramData\Caphyon 2021-06-01 16:56 - 2021-06-01 16:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2021-06-01 16:56 - 2021-06-01 16:56 - 000000000 ____D C:\Program Files (x86)\QuickTime 2021-05-23 18:05 - 2021-05-23 18:05 - 000018631 _____ C:\Users\arsen\Documents\BOITE PANAME POSTPROD - PROD - PODCAST.xlsx 2021-05-23 18:04 - 2021-05-23 18:04 - 000018630 _____ C:\Users\arsen\Documents\Classeur1.xlsx 2021-05-23 11:46 - 2021-05-23 11:46 - 000002595 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise.lnk 2021-05-23 11:46 - 2021-05-23 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-06-22 14:08 - 2021-05-14 10:07 - 000000000 ____D C:\Users\arsen\AppData\Roaming\ZHP 2021-06-22 13:51 - 2021-05-14 10:07 - 000000000 ____D C:\Users\arsen\AppData\Local\ZHP 2021-06-22 13:28 - 2020-03-27 03:12 - 000000000 ____D C:\Windows\system32\SleepStudy 2021-06-22 13:28 - 2018-10-02 19:33 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\Molotov 2021-06-22 12:57 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-06-22 12:33 - 2020-03-27 03:24 - 001771410 _____ C:\Windows\system32\PerfStringBackup.INI 2021-06-22 12:33 - 2019-03-19 14:00 - 000794662 _____ C:\Windows\system32\perfh00C.dat 2021-06-22 12:33 - 2019-03-19 14:00 - 000150678 _____ C:\Windows\system32\perfc00C.dat 2021-06-22 12:33 - 2019-03-19 06:50 - 000000000 ____D C:\Windows\INF 2021-06-22 12:29 - 2018-09-04 14:00 - 000000000 ____D C:\Program Files\CCleaner 2021-06-22 12:28 - 2020-08-02 13:36 - 000000000 ____D C:\ProgramData\Mozilla 2021-06-22 12:27 - 2020-08-02 13:36 - 000000000 ___DC C:\Users\arsen\AppData\LocalLow\Mozilla 2021-06-22 12:27 - 2020-03-27 03:23 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2021-06-22 12:27 - 2018-09-04 13:56 - 000000000 __SHD C:\Users\arsen\IntelGraphicsProfiles 2021-06-22 12:27 - 2018-06-29 08:43 - 000000000 ____D C:\ProgramData\NVIDIA 2021-06-22 11:20 - 2019-03-19 06:37 - 001048576 _____ C:\Windows\system32\config\BBI 2021-06-22 11:15 - 2021-05-11 09:35 - 000000000 ___HD C:\ProgramData\Ptlzrz 2021-06-22 10:35 - 2018-09-12 10:40 - 000000000 ___DC C:\Users\arsen\AppData\Local\CrashDumps 2021-06-22 10:33 - 2019-10-03 09:31 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2021-06-22 10:15 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\ELAMBKUP 2021-06-22 10:08 - 2019-03-18 17:49 - 000000000 ___DC C:\Users\arsen\AppData\LocalLow\Temp 2021-06-22 10:08 - 2017-09-29 15:46 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2021-06-22 09:58 - 2020-03-27 03:23 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update 2021-06-21 23:18 - 2018-12-09 19:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2021-06-21 18:44 - 2019-09-06 22:27 - 000000000 ____D C:\Users\Public\Pro Tools 2021-06-21 18:42 - 2019-06-16 22:32 - 000000000 ____D C:\Users\arsen\AppData\Roaming\NUGEN Audio 2021-06-21 18:42 - 2018-09-13 20:57 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\vlc 2021-06-21 07:05 - 2020-11-02 11:25 - 000000000 ____D C:\Users\arsen\AppData\Local\NVIDIA Corporation 2021-06-21 07:05 - 2018-09-05 13:34 - 000000000 ___DC C:\Users\arsen\AppData\Local\NVIDIA 2021-06-21 07:05 - 2018-06-29 08:43 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2021-06-21 07:05 - 2018-06-29 08:42 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2021-06-21 07:05 - 2018-06-29 08:42 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2021-06-21 07:01 - 2020-11-02 11:24 - 000003044 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-06-21 07:01 - 2020-11-02 11:24 - 000002804 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-06-21 06:58 - 2020-08-02 13:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-06-20 22:45 - 2020-08-02 13:36 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-06-16 15:10 - 2018-09-04 19:14 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\Spotify 2021-06-16 14:40 - 2018-09-04 19:19 - 000000000 ___DC C:\Users\arsen\AppData\Local\Spotify 2021-06-15 17:38 - 2021-04-05 15:28 - 000000000 ____D C:\Users\arsen\Soundly Audio 2021-06-15 17:37 - 2021-04-05 15:28 - 000000000 ____D C:\Users\arsen\Soundly Data 2021-06-14 15:27 - 2019-10-10 17:17 - 000000000 ____D C:\Users\arsen\AppData\Roaming\audacity 2021-06-12 09:22 - 2018-09-04 14:15 - 000000000 ____D C:\Windows\system32\Drivers\wd 2021-06-11 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\NDF 2021-06-10 17:03 - 2021-03-12 00:00 - 000000000 ____D C:\Users\arsen\AppData\Roaming\REAPER 2021-06-10 16:32 - 2020-03-27 03:17 - 000000000 ____D C:\Users\arsen 2021-06-10 15:53 - 2019-04-17 08:28 - 000000000 ____D C:\Users\arsen\AppData\Roaming\Avid 2021-06-10 11:56 - 2018-09-04 20:29 - 000000000 ___DC C:\Users\arsen\AppData\Local\D3DSCache 2021-06-10 11:29 - 2021-04-19 11:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOTU 2021-06-10 11:28 - 2021-03-04 13:44 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2021-06-10 11:08 - 2019-04-17 20:20 - 000000000 ____D C:\Users\arsen\AppData\Local\Ubisoft Game Launcher 2021-06-10 11:07 - 2019-04-17 20:20 - 000001317 ____C C:\Users\arsen\Desktop\Ubisoft Connect.lnk 2021-06-10 11:07 - 2019-04-17 20:20 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2021-06-10 11:06 - 2018-09-04 14:36 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\discord 2021-06-10 11:06 - 2018-09-04 14:36 - 000000000 ___DC C:\Users\arsen\AppData\Local\Discord 2021-06-10 11:05 - 2021-01-21 11:28 - 000000000 ____D C:\Program Files\DxO 2021-06-10 11:05 - 2021-01-21 09:22 - 000000000 ____D C:\ProgramData\DxO 2021-06-10 11:05 - 2019-04-18 20:19 - 000000000 ____D C:\Program Files\Common Files\VST3 2021-06-10 11:05 - 2019-03-22 11:32 - 000000000 ____D C:\ProgramData\Audinate 2021-06-10 11:05 - 2018-06-29 08:40 - 000000000 ____D C:\ProgramData\Package Cache 2021-06-10 11:04 - 2021-02-19 19:27 - 000000150 _____ C:\Windows\SysWOW64\winsevr.dat 2021-06-10 11:04 - 2021-01-24 21:06 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LaserSoft Imaging 2021-06-10 11:04 - 2021-01-24 21:02 - 000000000 ____D C:\Program Files\SilverFast Application 2021-06-10 11:01 - 2020-07-10 23:59 - 000000000 ___DC C:\Users\arsen\Documents\Instant Gallery Maker 2021-06-10 11:01 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2021-06-10 11:01 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\AppReadiness 2021-06-10 11:01 - 2018-09-04 13:56 - 000000000 ___DC C:\Users\arsen\AppData\Local\Packages 2021-06-10 09:23 - 2021-02-19 19:27 - 000000416 _____ C:\Windows\SysWOW64\AbBakConfig.dat 2021-06-10 09:23 - 2020-03-27 03:12 - 000478248 _____ C:\Windows\system32\FNTCACHE.DAT 2021-06-10 09:20 - 2021-03-05 12:13 - 000000000 ___DC C:\Users\arsen\Desktop\DriversCloud_Install 2021-06-10 09:14 - 2018-09-15 20:32 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation 2021-06-10 09:06 - 2018-06-29 08:42 - 000000000 ____D C:\ProgramData\Intel 2021-06-10 08:58 - 2020-11-02 11:22 - 000001193 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk 2021-06-10 08:58 - 2020-11-02 11:22 - 000000000 ____D C:\ProgramData\DriversCloud.com 2021-06-09 19:31 - 2021-02-19 19:27 - 000001024 ____H C:\SYSTAG.BIN 2021-06-09 12:06 - 2018-09-12 08:33 - 000000000 ___DC C:\Users\arsen\AppData\Roaming\BitTorrent 2021-06-08 12:48 - 2021-02-09 01:16 - 000000000 ____D C:\Users\arsen\AppData\Local\BitTorrentHelper 2021-06-08 10:40 - 2021-01-27 23:33 - 000000000 ___DC C:\Users\arsen\Documents\Zoom 2021-05-31 18:08 - 2020-11-01 19:38 - 007212232 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2021-05-31 09:03 - 2021-03-12 00:04 - 000000000 ___DC C:\Users\arsen\Documents\REAPER Media 2021-05-27 21:08 - 2020-03-27 03:23 - 000000000 ____D C:\Windows\system32\Tasks\Lenovo 2021-05-23 11:46 - 2019-10-14 22:27 - 000002521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2021-05-23 11:46 - 2019-10-14 22:27 - 000002521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2021-05-23 11:46 - 2019-10-14 22:27 - 000002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2021-05-23 11:46 - 2019-10-14 22:27 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2021-05-23 11:46 - 2019-10-14 22:27 - 000002482 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2021-05-23 11:46 - 2019-10-14 22:27 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk ==================== Fichiers à la racine de certains dossiers ======== 2019-07-20 16:43 - 2019-08-15 10:55 - 000000033 _____ () C:\Users\arsen\AppData\Roaming\AdobeWLCMCache.dat 2020-03-10 20:34 - 2020-12-22 20:04 - 000000113 _____ () C:\Users\arsen\AppData\Roaming\D2Info0 2020-03-10 20:34 - 2020-12-22 20:09 - 000000008 _____ () C:\Users\arsen\AppData\Roaming\DofusAppId0_1 2020-03-10 20:43 - 2020-05-27 23:21 - 000000008 _____ () C:\Users\arsen\AppData\Roaming\DofusAppId0_2 2020-03-10 21:23 - 2020-03-18 00:39 - 000000008 _____ () C:\Users\arsen\AppData\Roaming\DofusAppId0_3 2021-06-08 08:11 - 2021-06-08 08:19 - 000000598 ___SH () C:\Users\arsen\AppData\Local\5z5pwicm7jiqep7jmf2ktgjiuioarha 2018-09-29 22:02 - 2018-09-29 22:02 - 000000000 ____C () C:\Users\arsen\AppData\Local\oobelibMkey.log 2018-12-22 15:17 - 2018-12-22 15:17 - 000000429 _____ () C:\Users\arsen\AppData\Local\read.bat ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ATTENTION: ==> Impossible d'accéder au BCD. -> Impossible d'ouvrir le magasin des donn‚es de configuration de d‚marrage. Le fichier ouvert n'est plus valide car le volume qui le contient a ‚t‚ endommag‚ de maniŠre externe. ==================== Fin de FRST.txt ========================