Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-08-2021 Exécuté par PHEPHER (administrateur) sur DESKTOP-E4H5NSL (ASUSTeK COMPUTER INC. X756UQK) (21-08-2021 07:17:50) Exécuté depuis C:\Users\PHEPHER\Downloads Profils chargés: PHEPHER Platform: Windows 10 Home Version 21H1 19043.1165 (X64) Langue: Français (France) Navigateur par défaut: Chrome Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (Conexant Systems LLC -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe (Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <19> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe (Greatis Software LLC -> Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxCUIService.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxEM.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHDCPSvc.exe (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHeciSvc.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2> (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe <2> (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [604496 2017-11-24] (Conexant Systems LLC -> Conexant Systems, Inc.) HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [Fichier non signé] HKU\S-1-5-21-226898909-1936610168-3599806186-1001\...\Run: [76A2FD341AF3061B341D3AEE49DB46657F044944._service_run] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service /prefetch:8 HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-16] (Google LLC -> Google LLC) BootExecute: autocheck autochk * Partizan GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {018BAE23-3CD4-42AE-AE89-C7D1A67E88CE} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [Fichier non signé] Task: {03A7FF9E-F119-41A8-8E11-FC249645B594} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1546112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation) Task: {04535B88-40DF-4E9A-BD00-12A4F60E62D8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {0E0BED33-0066-4730-B89D-97C3C9FAED6A} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log Task: {0F6724DA-83E3-4AA5-9C49-41152119524F} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> Pas de fichier <==== ATTENTION Task: {10E5B95C-D208-4238-B0BD-9AB286F1057D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [855352 2016-02-19] (Intel(R) Trusted Connect Service -> Intel(R) Corporation) Task: {15FF2F7D-0C7A-4621-8471-F777D2FE5025} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {19222844-F750-415A-92AE-3902C1F46962} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {2C508260-280F-44C5-A6B3-5A1FDCA7BC53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {2C8E83F2-44A4-4127-9395-2A8F22D2FA2D} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [4876640 2021-08-04] (Greatis Software LLC -> Greatis Software) Task: {2F6D8F29-BD56-4EC9-B33B-AFC232AF4F7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.) Task: {2FBB0F24-8FE8-4307-9AA4-39268856A9ED} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {31770768-48F5-4485-9973-E27D46B0749C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19786024 2016-02-23] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) Task: {47F7C279-A84B-4C2A-9D57-1B1E2643D234} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4B2F862D-AD5F-487B-A99E-C5866BA827D4} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> Pas de fichier <==== ATTENTION Task: {4B9B1E3E-EFE4-4339-A88B-0012F1FCB68F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.) Task: {4FA50D8D-3738-45BA-8C4F-71129238A242} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation) Task: {507686E0-0259-49F0-9564-D827CE566842} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation) Task: {52A3A4C5-5E56-42FC-A0B5-C105805F5CC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {5E32186C-2482-4FD1-9E5C-564C246266C7} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {5F95701C-B027-4C2C-9CE1-4A18D20113AB} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5F98BDF9-A63D-40EB-BD12-2AEFECE65BDA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> Pas de fichier <==== ATTENTION Task: {6258EB10-CF83-4987-8C44-B51D6EF7E41B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation) Task: {634CD8D0-31C9-468D-91F0-BBE4CA3336B9} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe Task: {65C55535-1151-45CD-92C7-9C5DD85538B5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {76BC38FD-C8AA-4FB1-9958-1523347D66C0} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7F479F5A-9663-46B2-8BD9-0C4F0F1765F9} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {831AD955-8F4F-4681-BA8D-BB566F3AF8C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> Pas de fichier <==== ATTENTION Task: {92FDA719-CD80-489C-B745-BA875EA7568D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {BB41B311-F955-4B58-AEBE-A5EB9015D3C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> Pas de fichier <==== ATTENTION Task: {C2E2189A-7B92-4C7F-A7CB-9CE64E0ACBBD} - System32\Tasks\ViGEmBusUpdater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) Task: {CC5604C4-F34A-4786-A921-7454014FBDA9} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Pas de fichier <==== ATTENTION Task: {CE1C1AF7-A135-47D2-BD62-3FD3D259F22B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E3789123-8E65-469D-9B64-B5E7642B3BE0} - System32\Tasks\AdwCleaner_onReboot => C:\Users\PHEPHER\Downloads\adwcleaner_8.0.6.exe Task: {E8EBDE1D-05ED-4F57-A9DB-D9D8FD81F831} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.) Task: {EEDB3F56-2E5D-4184-86BE-29EBA989DD8D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F7957C70-3970-4491-8C98-E4680C13A491} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{4d5f34d2-3eea-4ee1-a79e-2351414d7160}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{92ae2b3c-81d4-4f28-b81a-99255f648a1e}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{a80d89a6-da4c-4a9e-b416-988d8d3ee3c9}: [DhcpNameServer] 192.168.0.254 Edge: ======= Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] Edge Profile: C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-21] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-02-21] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier] FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier] FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default [2021-08-21] CHR Notifications: Default -> hxxps://psprices.com; hxxps://www.youtube.com CHR HomePage: Default -> hxxps://www.google.com/ CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://encrypted.google.com" CHR DefaultSearchKeyword: Default -> google.com_ CHR Extension: (Google Traduction) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-14] CHR Extension: (Slides) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-19] CHR Extension: (Docs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-19] CHR Extension: (Google Drive) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22] CHR Extension: (WOT pour la sécurité des sites Web et une navigation sûre) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2021-08-05] CHR Extension: (YouTube) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-19] CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-07-28] CHR Extension: (Adblock pour Youtube™) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2021-05-19] CHR Extension: (Search by Image (by Google)) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2019-06-02] CHR Extension: (Tampermonkey) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-05-31] CHR Extension: (Logitech Smooth Scrolling) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2017-12-19] CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2021-07-17] CHR Extension: (Sheets) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-19] CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2020-03-13] CHR Extension: (Google Docs hors connexion) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-25] CHR Extension: (Vysor) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2020-09-05] CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-08-12] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-08-12] CHR Extension: (iGVault) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodndogomnfgmbapagempdcobhmjfbho [2020-10-04] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29] CHR Extension: (Gmail) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23] CHR Extension: (Chrome Media Router) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-22] CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-05-06] CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\System Profile [2020-05-06] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9142128 2021-08-05] (Microsoft Corporation -> Microsoft Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Fichier non signé] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Fichier non signé] S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7477704 2021-07-17] (Malwarebytes Inc -> Malwarebytes) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2523448 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts) S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3478336 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts) S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1705088 2020-06-07] (Rockstar Games, Inc. -> Rockstar Games) S3 ViGEmBusUpdater; C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe [2727416 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe [136656 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [22656 2016-02-23] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.) R3 AsusSGDrv; C:\WINDOWS\System32\drivers\AsusSGDrv.sys [140032 2019-08-19] (ASUSTek Computer Inc. -> ASUS Corporation) R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé] S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd) S3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd) S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] (FarStone Technology -> ) [Fichier non signé] R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-23] (Malwarebytes Inc -> Malwarebytes) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-08-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-08-04] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [78072 2021-08-04] (Microsoft Windows -> Microsoft Corporation) S3 MpKsl22274447; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3BC6154A-13D3-4EB8-8906-C9BE04AC0D6B}\MpKslDrv.sys [X] U0 Partizan; system32\drivers\Partizan.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-08-21 07:17 - 2021-08-21 07:20 - 000027769 _____ C:\Users\PHEPHER\Downloads\FRST.txt 2021-08-21 07:16 - 2021-08-21 07:20 - 000000000 ____D C:\FRST 2021-08-21 07:15 - 2021-08-21 07:15 - 002300416 _____ (Farbar) C:\Users\PHEPHER\Downloads\FRST64.exe 2021-08-21 06:40 - 2021-08-21 06:40 - 002592317 _____ C:\Users\PHEPHER\Downloads\Autoruns.zip 2021-08-21 06:32 - 2021-08-21 06:32 - 000002146 _____ C:\Users\PHEPHER\Desktop\VirusTotal Uploader 2.2.lnk 2021-08-21 06:32 - 2021-08-21 06:32 - 000000000 ____D C:\Program Files (x86)\VirusTotalUploader2 2021-08-21 06:31 - 2021-08-21 06:31 - 000142744 _____ C:\Users\PHEPHER\Downloads\vtuploader2.2.exe 2021-08-21 06:02 - 2021-08-21 06:02 - 000000714 _____ C:\WINDOWS\SysWOW64\PARTIZAN.TXT 2021-08-20 20:10 - 2021-08-21 06:28 - 000000000 ____D C:\Users\PHEPHER\Documents\RegRun2 2021-08-20 20:10 - 2021-08-21 06:27 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo 2021-08-20 20:10 - 2021-08-21 06:17 - 000003424 _____ C:\WINDOWS\system32\Tasks\UnHackMe Task Scheduler 2021-08-20 20:10 - 2021-08-21 06:16 - 000001078 _____ C:\Users\PHEPHER\Desktop\UnHackMe.lnk 2021-08-20 20:09 - 2021-08-21 06:23 - 000000000 ____D C:\Program Files (x86)\UnHackMe 2021-08-20 20:09 - 2021-08-21 06:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe 2021-08-20 20:09 - 2020-11-11 14:39 - 000016184 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys 2021-08-20 20:09 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe 2021-08-20 20:06 - 2021-08-20 20:07 - 027576614 _____ C:\Users\PHEPHER\Downloads\unhackme-12.zip 2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2021-08-11 02:25 - 2021-08-11 02:25 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2021-08-11 02:24 - 2021-08-11 02:24 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2021-08-11 02:23 - 2021-08-11 02:23 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2021-08-11 02:23 - 2021-08-11 02:23 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2021-08-11 02:22 - 2021-08-11 02:22 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll 2021-08-11 01:13 - 2021-08-11 01:13 - 000000000 ___HD C:\$WinREAgent 2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo.exe 2021-08-10 22:56 - 2021-08-06 10:45 - 001474672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2021-08-10 22:56 - 2021-08-06 10:45 - 001212536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll 2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2021-08-10 22:56 - 2021-08-06 10:42 - 000716928 _____ C:\WINDOWS\system32\nvofapi64.dll 2021-08-10 22:56 - 2021-08-06 10:42 - 000645248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll 2021-08-10 22:56 - 2021-08-06 10:42 - 000577152 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 002112144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 001595536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 001171088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe 2021-08-10 22:56 - 2021-08-06 10:41 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2021-08-10 22:56 - 2021-08-06 10:41 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 008854136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 005680768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2021-08-10 22:56 - 2021-08-06 10:40 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe 2021-08-10 22:56 - 2021-08-06 10:39 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe 2021-08-10 22:56 - 2021-08-06 10:38 - 006215808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2021-08-10 22:56 - 2021-08-05 23:12 - 000083062 _____ C:\WINDOWS\system32\nvinfo.pb 2021-08-10 00:07 - 2021-08-11 00:28 - 000000000 ____D C:\Users\PHEPHER\Downloads\The Sims 4 [FitGirl Repack] 2021-08-07 12:15 - 2021-08-13 14:15 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX10.1 2021-08-06 21:50 - 2021-08-06 21:50 - 000121586 _____ C:\Users\PHEPHER\Documents\Cerballiance_Res_20210806_C10806CC0111.pdf 2021-07-31 09:19 - 2021-07-31 09:19 - 000000000 ____D C:\Program Files\VideoLAN ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-08-21 07:13 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-08-21 06:27 - 2017-12-19 00:05 - 000000000 ____D C:\Program Files (x86)\Google 2021-08-21 06:08 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA 2021-08-21 06:04 - 2017-12-18 23:44 - 000000000 __SHD C:\Users\PHEPHER\IntelGraphicsProfiles 2021-08-21 06:02 - 2021-03-10 00:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-08-21 06:02 - 2021-03-10 00:16 - 000008192 ___SH C:\DumpStack.log.tmp 2021-08-21 06:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2021-08-21 06:02 - 2016-10-31 19:29 - 000000000 ___HD C:\Intel 2021-08-21 06:01 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2021-08-21 05:41 - 2017-12-19 04:54 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\vlc 2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\zaap 2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Ankama Launcher 2021-08-21 05:33 - 2021-03-10 00:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-08-21 01:14 - 2020-06-19 15:21 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-08-20 17:08 - 2017-12-19 01:01 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2 2021-08-20 17:01 - 2017-12-19 00:57 - 000000117 _____ C:\Users\PHEPHER\AppData\Roaming\D2Info0 2021-08-20 14:16 - 2017-12-19 00:57 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1 2021-08-20 14:14 - 2017-12-19 00:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus 2021-08-20 08:57 - 2021-05-06 10:51 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX9 2021-08-20 08:56 - 2020-07-23 04:47 - 000000000 ____D C:\Users\PHEPHER\Desktop\JEUX 2021-08-20 04:01 - 2018-06-03 14:34 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\D3DSCache 2021-08-19 20:34 - 2017-12-19 01:04 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3 2021-08-19 15:08 - 2021-07-02 02:30 - 000000000 ____D C:\Users\PHEPHER\AppData\LocalLow\IGDump 2021-08-18 22:07 - 2021-04-26 15:29 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d715353069e8e7 2021-08-18 22:07 - 2021-03-10 00:59 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-08-15 20:16 - 2019-11-29 00:46 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus Retro 2021-08-15 16:18 - 2016-10-31 20:09 - 000000000 ____D C:\Program Files\Microsoft Office 2021-08-14 15:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2021-08-14 09:28 - 2020-04-14 23:28 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\BitTorrent 2021-08-14 09:28 - 2019-04-20 20:07 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\BitTorrentHelper 2021-08-12 03:53 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2021-08-11 19:33 - 2021-03-10 00:42 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-08-11 19:33 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat 2021-08-11 19:33 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat 2021-08-11 09:10 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\NVIDIA 2021-08-11 03:12 - 2021-03-10 00:17 - 000431664 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents 2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-08-11 03:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing 2021-08-11 02:39 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-08-11 01:08 - 2017-12-19 01:31 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-08-11 01:01 - 2017-12-19 01:31 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-08-09 23:02 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\Packages 2021-08-06 10:38 - 2021-03-05 19:07 - 007280848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2021-08-04 22:22 - 2021-03-10 00:59 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2021-08-04 22:22 - 2021-03-10 00:59 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2021-08-04 21:50 - 2020-10-01 00:28 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-08-04 13:13 - 2018-02-25 09:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2021-07-31 09:21 - 2020-05-03 00:14 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk 2021-07-30 22:43 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2021-07-26 12:20 - 2017-12-18 23:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\CrashDumps 2021-07-22 23:25 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation ==================== Fichiers à la racine de certains dossiers ======== 2017-12-19 00:57 - 2021-08-20 17:01 - 000000117 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info0 2018-04-03 11:25 - 2021-07-21 00:22 - 000000121 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info1 2017-12-19 00:57 - 2021-08-20 14:16 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1 2018-04-04 22:35 - 2018-04-24 22:23 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_10 2018-04-24 21:02 - 2018-04-24 21:06 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_11 2017-12-19 01:01 - 2021-08-20 17:08 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2 2017-12-19 01:04 - 2021-08-19 20:34 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3 2017-12-19 02:07 - 2021-06-20 20:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_4 2017-12-19 02:08 - 2021-06-11 20:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_5 2017-12-19 03:57 - 2021-03-12 15:36 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_6 2018-01-17 01:59 - 2021-02-21 18:47 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_7 2018-04-04 21:18 - 2021-02-21 19:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_8 2018-04-04 21:22 - 2018-04-24 22:24 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_9 2018-04-03 11:25 - 2021-07-21 00:25 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_1 2018-04-03 15:36 - 2021-06-11 02:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_2 2018-04-08 01:09 - 2021-04-22 12:31 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_3 2018-09-21 23:24 - 2018-12-04 12:41 - 000000011 _____ () C:\Users\PHEPHER\AppData\Roaming\RegPorts-0 2017-12-18 23:54 - 2020-01-09 15:55 - 000000200 _____ () C:\Users\PHEPHER\AppData\Roaming\sp_data.sys 2021-02-21 15:35 - 2021-02-21 15:35 - 000000017 _____ () C:\Users\PHEPHER\AppData\Local\resmon.resmoncfg ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================