Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 10-10-2021
Exécuté par mamie (administrateur) sur LAPTOP-DDLJ20L7 (Acer Aspire A317-33) (10-10-2021 19:58:34)
Exécuté depuis C:\Users\mamie\Downloads
Profils chargés: mamie
Platform: Microsoft Windows 10 Famille Version 20H2 19042.1237 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Amundsen\2.1.20250\awc.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\ExpressVPN\wlanBroker.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QASvc.exe
(Acer Incorporated -> Microsoft) C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe
(GoTrustID Inc -> GOTrustID Inc.) C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe
(GOTrustID Inc.) [Fichier non signé] C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe
(Intel Corporation -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_3c43114c92103b1a\LMS.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxCUIServiceN.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxEMN.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxextN.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_3d18534d52d73f63\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_f67fa80490208ab5\IntelCpHDCPSvc.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <5>
(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Users\mamie\Downloads\NRnR.exe
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_6903f1a9d3b68dab\RtkAudUService64.exe <2>

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_6903f1a9d3b68dab\RtkAudUService64.exe [1259872 2021-05-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0D3AC168-A2BA-4807-A1D4-70CA28A628AE} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139096 2021-09-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {15F3FE05-2C04-4DBF-B569-23C0D14FFA56} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [447528 2020-11-10] (Acer Incorporated -> Acer Incorporated)
Task: {204041E5-F671-4C0A-BE79-51086CE92C81} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2770984 2020-11-10] (Acer Incorporated -> Acer Incorporated)
Task: {2EC6DA4E-73DA-440E-8848-B1CB14CCCC3B} - System32\Tasks\StorPSCTL => C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe [153640 2020-09-18] (Acer Incorporated -> Microsoft)
Task: {347FB84D-EC04-4E69-BA5A-C4078A21570F} - System32\Tasks\AcerCMUpdateTask2.1.20250 => C:\Program Files (x86)\Acer\Amundsen\2.1.20250\AWC.exe [153128 2020-09-02] (Acer Incorporated -> )
Task: {3D52AA56-F863-4930-A91B-C13A455305AD} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2962984 2020-07-27] (Acer Incorporated -> )
Task: {42F63FC7-9185-4703-B4C9-90FE9A4A4830} - System32\Tasks\Norton Remove and Reinstall\Norton Remove and Reinstall => C:\Users\mamie\Downloads\NRnR.exe [13038680 2021-10-10] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {5C8BDE0C-B42E-490E-B01B-9084C481D811} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21857672 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {669304D2-3230-49C8-A245-F81BE8AE2492} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4829224 2020-07-27] (Acer Incorporated -> )
Task: {677F099F-F310-4207-83E3-02CAD1115796} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473880 2020-11-06] (Acer Incorporated -> Acer Incorporated)
Task: {815DDEDB-D3A0-4220-A82F-D75DB16481F7} - System32\Tasks\Oem\wlanBrokerTask => C:\Program Files (x86)\Acer\ExpressVPN\wlanBroker.exe [18224 2021-03-12] (Acer Incorporated -> )
Task: {81DC529D-E4A2-4786-8A8C-065C420FF341} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-09-28] (Mozilla Corporation -> Mozilla Foundation)
Task: {924D7CCE-EFE8-4203-9B75-90EE2BF00057} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [42024 2020-07-27] (Acer Incorporated -> )
Task: {969E0AA2-8849-4F47-BD59-7A878506EFC6} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211368 2020-11-18] (Acer Incorporated -> Acer Incorporated)
Task: {B34BF9F9-BDE1-4727-AA1A-BAFDBE8E24D4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21857672 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {C08813E4-C08D-4E9B-B399-44F3CDDF90F0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139096 2021-09-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C72EE997-7C05-4CC7-A136-D3A365AE48BD} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268328 2020-11-18] (Acer Incorporated -> Acer Incorporated)
Task: {D7833844-CBA2-487A-A1D4-DB2D4E7107E5} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {F156F120-E534-4470-B854-6303B7BB2C1B} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security Ultra\Upgrade.exe [2352488 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{09ad9af3-e94c-449b-adb5-df301869508c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{bc12824e-e455-403c-ad94-bc9b60234e83}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\mamie\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-10]
Edge Notifications: Default -> hxxps://investmentguru.com; hxxps://www.facebook.com
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: 1baay4hv.default
FF ProfilePath: C:\Users\mamie\AppData\Roaming\Mozilla\Firefox\Profiles\1baay4hv.default [2021-10-10]
FF ProfilePath: C:\Users\mamie\AppData\Roaming\Mozilla\Firefox\Profiles\7mtzx4hr.default-release [2021-10-10]
FF Extension: (Français Language Pack) - C:\Users\mamie\AppData\Roaming\Mozilla\Firefox\Profiles\7mtzx4hr.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2021-10-09]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\mamie\AppData\Roaming\Mozilla\Firefox\Profiles\7mtzx4hr.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-10-10]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-01] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [300584 2020-07-27] (Acer Incorporated -> Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9179528 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
R2 GoTrust ID Plugin; C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe [15360 2020-09-08] (GOTrustID Inc.) [Fichier non signé]
R2 GoTrustID Service; C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe [336992 2020-09-08] (GoTrustID Inc -> GOTrustID Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7801016 2021-10-09] (Malwarebytes Inc -> Malwarebytes)
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [465960 2020-11-10] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [526888 2020-11-10] (Acer Incorporated -> Acer Incorporated)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [342568 2020-11-18] (Acer Incorporated -> Acer Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-08] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [160176 2021-10-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [210344 2021-10-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2021-10-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [193448 2021-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [69040 2021-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-10-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [149424 2021-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48520 2021-10-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [434424 2021-10-08] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-08] (Microsoft Windows -> Microsoft Corporation)
S3 nsvst_NGC; \SystemRoot\System32\drivers\NGCx64\1615080.03E\nsvst.sys [X]
S3 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.20.5.40\SymPlatform\SymEvnt.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-10-10 19:56 - 2021-10-10 19:56 - 000069040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2021-10-10 19:55 - 2021-10-10 19:55 - 000193448 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2021-10-10 19:55 - 2021-10-10 19:55 - 000149424 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2021-10-10 19:55 - 2021-10-10 19:55 - 000000000 ____D C:\Users\mamie\AppData\LocalLow\IGDump
2021-10-10 19:47 - 2021-10-10 19:47 - 000000000 ____D C:\ProgramData\PCSettings
2021-10-10 19:45 - 2021-10-10 19:51 - 000000000 ____D C:\ProgramData\NortonRnR
2021-10-10 19:44 - 2021-10-10 19:44 - 013038680 _____ (NortonLifeLock Inc.) C:\Users\mamie\Downloads\NRnR.exe
2021-10-10 18:41 - 2021-10-10 18:42 - 000000000 ____D C:\Users\mamie\Desktop\CrystalDiskInfo8_12_10
2021-10-10 18:40 - 2021-10-10 18:40 - 006721861 _____ C:\Users\mamie\Desktop\CrystalDiskInfo8_12_10.zip
2021-10-10 18:33 - 2021-10-10 18:34 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2021-10-10 18:33 - 2021-10-10 18:33 - 000001832 _____ C:\Users\mamie\Desktop\CrystalDiskInfo.lnk
2021-10-10 18:33 - 2021-10-10 18:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2021-10-10 18:29 - 2021-10-10 18:29 - 004729392 _____ (Crystal Dew World ) C:\Users\mamie\Downloads\crystaldiskinfo-8-12-10.exe
2021-10-10 18:11 - 2021-10-10 18:15 - 000001182 _____ C:\Users\Public\Desktop\INTERNET.lnk
2021-10-10 18:11 - 2021-10-10 18:11 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2021-10-10 18:08 - 2021-10-10 18:08 - 000333176 _____ (Mozilla) C:\Users\mamie\Downloads\Firefox Installer.exe
2021-10-10 18:00 - 2021-10-10 18:00 - 000000000 ____D C:\Windows\system32\Tasks\Remediation
2021-10-10 17:52 - 2021-10-10 17:52 - 000071597 _____ C:\Users\mamie\Downloads\PAIEMENT FEMME DEMENAGE OCTOBRE 2021.pdf
2021-10-10 17:52 - 2021-10-10 17:52 - 000000000 ____D C:\Users\mamie\AppData\LocalLow\Temp
2021-10-10 17:14 - 2021-10-10 17:21 - 000002013 _____ C:\Users\mamie\Downloads\Fixlog.txt
2021-10-10 17:12 - 2021-10-10 17:12 - 000000000 ____D C:\Users\mamie\Downloads\FRST-OlderVersion
2021-10-10 13:25 - 2021-10-10 13:25 - 000036680 _____ C:\Users\mamie\Desktop\Addition.txt
2021-10-10 13:25 - 2021-10-10 13:25 - 000029447 _____ C:\Users\mamie\Desktop\FRST.txt
2021-10-10 13:11 - 2021-10-10 13:16 - 000036680 _____ C:\Users\mamie\Downloads\Addition.txt
2021-10-10 13:03 - 2021-10-10 20:00 - 000015476 _____ C:\Users\mamie\Downloads\FRST.txt
2021-10-10 13:01 - 2021-10-10 19:59 - 000000000 ____D C:\FRST
2021-10-10 12:49 - 2021-10-10 17:12 - 002310144 _____ (Farbar) C:\Users\mamie\Downloads\FRST64.exe
2021-10-10 11:31 - 2021-10-10 11:31 - 000001527 _____ C:\Users\mamie\Desktop\malware.txt
2021-10-09 10:09 - 2021-10-09 10:09 - 000300400 _____ C:\Users\mamie\Desktop\ZHPDiag.html
2021-10-09 09:51 - 2021-10-09 09:51 - 000002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-10-09 09:51 - 2021-10-09 09:51 - 000002025 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-10-09 09:51 - 2021-10-09 09:51 - 000000000 ____D C:\Users\mamie\AppData\Local\mbam
2021-10-09 09:50 - 2021-10-09 09:50 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-10-09 09:50 - 2021-10-09 09:50 - 000210344 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2021-10-09 09:50 - 2021-10-09 09:49 - 000160176 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-10-09 09:50 - 2021-10-09 09:49 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2021-10-09 09:49 - 2021-10-09 09:49 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-10-09 09:48 - 2021-10-09 09:48 - 000000000 ____D C:\Program Files\Malwarebytes
2021-10-09 09:47 - 2021-10-09 09:47 - 002101944 _____ (Malwarebytes) C:\Users\mamie\Downloads\MBSetup.exe
2021-10-09 09:42 - 2021-10-09 09:41 - 000009589 _____ C:\Users\mamie\Desktop\ZHPCleaner (R).html
2021-10-09 09:41 - 2021-10-09 09:41 - 000003203 _____ C:\Users\mamie\Desktop\ZHPCleaner (R).txt
2021-10-09 09:38 - 2021-10-09 09:44 - 000000000 ____D C:\AdwCleaner
2021-10-09 09:37 - 2021-10-10 19:54 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-10-09 09:37 - 2021-10-09 09:37 - 008553680 _____ (Malwarebytes) C:\Users\mamie\Downloads\adwcleaner_8.3.0.exe
2021-10-09 09:35 - 2021-10-09 09:35 - 000009273 _____ C:\Users\mamie\Desktop\ZHPCleaner (S).html
2021-10-09 09:35 - 2021-10-09 09:35 - 000002996 _____ C:\Users\mamie\Desktop\ZHPCleaner (S).txt
2021-10-09 09:19 - 2021-10-09 09:19 - 000000879 _____ C:\Users\mamie\Desktop\ZHPCleaner.lnk
2021-10-09 09:18 - 2021-10-09 09:18 - 003289752 _____ (Nicolas Coolman) C:\Users\mamie\Downloads\ZHPCleaner.exe
2021-10-08 20:44 - 2021-10-09 10:09 - 000244629 _____ C:\Users\mamie\Desktop\ZHPDiag.txt
2021-10-08 20:23 - 2021-10-09 10:09 - 000000000 ____D C:\Users\mamie\AppData\Roaming\ZHP
2021-10-08 20:23 - 2021-10-09 09:19 - 000000000 ____D C:\Users\mamie\AppData\Local\ZHP
2021-10-08 20:23 - 2021-10-08 20:35 - 000000869 _____ C:\Users\mamie\Desktop\ZHPSuite.lnk
2021-10-08 20:22 - 2021-10-08 20:22 - 003476120 _____ (Nicolas Coolman) C:\Users\mamie\Downloads\ZHPSuite.exe
2021-09-15 14:13 - 2021-09-15 14:13 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-09-15 14:05 - 2021-09-15 14:05 - 000672768 _____ C:\Windows\system32\FsNVSDeviceSource.dll
2021-09-15 14:03 - 2021-09-15 14:03 - 000570368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-09-15 14:02 - 2021-09-15 14:02 - 001313608 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-09-15 14:02 - 2021-09-15 14:02 - 000122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2021-09-15 14:02 - 2021-09-15 14:02 - 000011355 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-09-15 13:58 - 2021-09-15 13:58 - 002111488 _____ (Digimarc) C:\Windows\SysWOW64\DMRCDecoder.dll
2021-09-15 13:58 - 2021-09-15 13:58 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-09-15 13:58 - 2021-09-15 13:58 - 001164288 _____ C:\Windows\system32\MBR2GPT.EXE
2021-09-15 13:58 - 2021-09-15 13:58 - 000426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-09-15 13:58 - 2021-09-15 13:58 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-09-15 13:57 - 2021-09-15 13:57 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2021-09-15 13:55 - 2021-09-15 13:55 - 001823304 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-09-15 13:55 - 2021-09-15 13:55 - 001393480 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-09-15 13:54 - 2021-09-15 13:54 - 002295296 _____ (Digimarc) C:\Windows\system32\DMRCDecoder.dll
2021-09-15 13:54 - 2021-09-15 13:54 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-09-15 13:54 - 2021-09-15 13:54 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-09-15 13:54 - 2021-09-15 13:54 - 000162816 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-09-15 13:54 - 2021-09-15 13:54 - 000098816 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-09-15 13:53 - 2021-09-15 13:53 - 000566784 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-09-15 13:19 - 2021-09-15 13:19 - 000000000 ___HD C:\$WinREAgent

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-10-10 19:59 - 2021-03-26 22:00 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-10 19:58 - 2021-05-26 21:07 - 000000000 ___RD C:\Users\mamie\OneDrive
2021-10-10 19:57 - 2021-05-26 21:09 - 000000000 ____D C:\Users\mamie\AppData\LocalLow\Mozilla
2021-10-10 19:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-10 19:55 - 2021-05-26 21:05 - 000000000 __SHD C:\Users\mamie\IntelGraphicsProfiles
2021-10-10 19:54 - 2021-03-26 22:22 - 000000000 ____D C:\ProgramData\Norton
2021-10-10 19:54 - 2021-03-26 22:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-10-10 19:54 - 2021-03-26 21:36 - 000000000 ___HD C:\Intel
2021-10-10 19:54 - 2021-03-26 20:57 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-10-10 19:54 - 2021-03-26 20:56 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-10 19:54 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2021-10-10 19:52 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2021-10-10 19:51 - 2021-03-26 22:24 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2021-10-10 19:47 - 2021-03-26 22:22 - 000000000 ____D C:\ProgramData\NortonInstaller
2021-10-10 18:11 - 2021-03-26 22:00 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-10-10 17:43 - 2021-03-26 21:56 - 000000000 ____D C:\ProgramData\Acer
2021-10-10 17:32 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2021-10-10 13:51 - 2021-03-26 20:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-10-10 13:18 - 2021-06-28 13:39 - 000000000 ____D C:\Users\mamie\AppData\Local\CrashDumps
2021-10-09 09:50 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-10-09 09:16 - 2021-03-26 21:02 - 000003634 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-09 09:16 - 2021-03-26 21:02 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-08 20:03 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-08 20:03 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-10-08 19:34 - 2021-03-26 20:57 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-10-07 15:53 - 2021-03-26 21:03 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-09-30 14:08 - 2021-05-26 21:07 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1812220801-2207553701-1386832641-1001
2021-09-30 14:08 - 2021-05-26 21:00 - 000002425 _____ C:\Users\mamie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-24 11:33 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-09-23 11:02 - 2021-05-30 15:23 - 000000000 ____D C:\Program Files\Common Files\AV
2021-09-22 18:11 - 2021-03-26 21:49 - 001770910 _____ C:\Windows\system32\PerfStringBackup.INI
2021-09-22 18:11 - 2020-11-19 11:23 - 000793016 _____ C:\Windows\system32\perfh00C.dat
2021-09-22 18:11 - 2020-11-19 11:23 - 000150146 _____ C:\Windows\system32\perfc00C.dat
2021-09-22 18:06 - 2021-03-26 22:22 - 000000000 ____D C:\Windows\system32\Drivers\NGCx64
2021-09-22 18:04 - 2021-03-26 20:57 - 000439128 _____ C:\Windows\system32\FNTCACHE.DAT
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2021-09-22 17:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2021-09-22 17:57 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-09-22 17:57 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2021-09-22 17:57 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2021-09-22 17:57 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2021-09-22 17:57 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2021-09-20 17:27 - 2021-05-26 21:00 - 000000000 ____D C:\Users\mamie
2021-09-19 13:23 - 2021-03-26 22:11 - 000000000 ____D C:\Program Files\Microsoft Office
2021-09-15 14:35 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2021-09-15 13:18 - 2021-06-01 12:22 - 000000000 ____D C:\Windows\system32\MRT
2021-09-15 13:15 - 2021-06-01 12:21 - 135637312 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================