Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 12-10-2021 Exécuté par mercu (administrateur) sur DESKTOP-UNO8N7A (HP HP Pavilion Gaming Desktop TG01-0xxx) (15-10-2021 17:01:04) Exécuté depuis C:\Users\mercu\OneDrive\Bureau Profils chargés: mercu Platform: Microsoft Windows 10 Famille Version 21H1 19043.1237 (X64) Langue: Français (France) Navigateur par défaut: Chrome Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe <3> (Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.7531\Agent.exe (Discord Inc. -> Discord Inc.) C:\Users\mercu\AppData\Local\Discord\app-1.0.9003\Discord.exe <6> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <12> (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\BridgeCommunication.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe (HP Inc.) C:\Program Files\WindowsApps\ad2f1837.hpjumpstarts_1.10.1627.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe (HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.67.0_x64__wafk5atnkzcwy\mcafee-security.exe (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.67.0_x64__wafk5atnkzcwy\Win32\mcafee-security-ft.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe\GameBar.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.9022.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\alg.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_cb1d78abfa910621\Display.NvContainer\NVDisplay.Container.exe <2> (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtAudioServ.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c3f6cdb5c1120dad\RtkAudUService64.exe <2> (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe (Swift Media Entertainment, Inc. -> Blitz, Inc.) C:\Users\mercu\AppData\Local\Programs\Blitz\Blitz.exe <17> ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18727048 2018-10-05] (Logitech Inc -> Logitech Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-06-09] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-441300735-2344714808-467895329-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33434600 2021-10-14] (Epic Games, Inc -> Epic Games, Inc.) HKU\S-1-5-21-441300735-2344714808-467895329-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1079184 2021-09-28] (Blizzard Entertainment, Inc. -> Blizzard Entertainment) HKU\S-1-5-21-441300735-2344714808-467895329-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\mercu\AppData\Local\Microsoft\Teams\Update.exe [2454240 2021-09-04] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-441300735-2344714808-467895329-1001\...\Run: [com.blitz.app] => C:\Users\mercu\AppData\Local\Programs\Blitz\Blitz.exe [121742600 2021-10-15] (Swift Media Entertainment, Inc. -> Blitz, Inc.) HKU\S-1-5-21-441300735-2344714808-467895329-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\94.0.4606.81\Installer\chrmstp.exe [2021-10-14] (Google LLC -> Google LLC) ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {048E3797-4927-4F2C-8303-ACD37CA719BA} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {105D676A-D551-4274-81E7-97AC52E4FD87} - \Microsoft\Windows\Speech\HeadsetButtonPress -> Pas de fichier <==== ATTENTION Task: {10F69B29-FC94-4B2C-9BD5-D1D641E1C54B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1123504 2021-10-06] (HP Inc. -> HP Inc.) Task: {12861EE3-2BE7-4B32-A1D8-D9F94940A803} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-11] (Microsoft Corporation -> Microsoft Corporation) Task: {16BC4248-952F-4613-ABAA-9E860F13B74B} - \HP\Consent Manager Launcher -> Pas de fichier <==== ATTENTION Task: {18C6238E-3A07-46E1-BC7F-3DE9A05C6624} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1123504 2021-10-06] (HP Inc. -> HP Inc.) Task: {1949073A-8FDA-4EA4-8E59-407CDB02440F} - \Microsoft\Windows\WindowsUpdate\sihpostreboot -> Pas de fichier <==== ATTENTION Task: {20B8102F-FAED-4562-8836-AED212B04657} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-11] (Microsoft Corporation -> Microsoft Corporation) Task: {2A6B72EF-A401-4AFE-B9CF-888CA2BC05EE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {2A801C9C-3E83-4FE6-9F42-563F9DD0FDB0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log Task: {423BC9D2-AC01-4790-8D7E-5640357B80AE} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {502BFAFB-69C1-4CAF-BE29-ECE458EADF32} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-11] (Microsoft Corporation -> Microsoft Corporation) Task: {67DF8DE3-B920-4563-99D7-7486ECE01642} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154520 2021-07-18] (Google LLC -> Google LLC) Task: {6FE8E1C5-AD3D-47F6-A60A-631AB571CD35} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation) Task: {74BBD82B-C891-4B3B-AFA5-2CF8C35021E4} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {79257B11-16D0-47A1-AC94-8E2CE343EE63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [560816 2021-07-07] (HP Inc. -> HP Inc.) Task: {8D9E4A0F-B1C1-4B53-841C-7373E7DA7F68} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {8E9EA831-CB92-41F2-AF80-C326F002F8AF} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3977576 2021-10-08] (Microsoft Corporation -> Microsoft Corporation) Task: {9C2D4955-F917-41CD-B303-4D24440B65E4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation) Task: {A6D2CAA7-0D0F-418D-A086-B7081DFEC912} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {AF554DF4-19A8-4313-B998-2627D7604E08} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation) Task: {B845A1E9-0F32-414C-A657-3465D3548AB8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2021-09-01] (HP Inc. -> HP Inc.) Task: {B9D08A24-F743-41AA-9A2A-AF860D8A4F7B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {CBC369E4-984F-4C04-B260-79F48E3BE3D4} - System32\Tasks\ASC_SkipUac_mercu => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe Task: {CBFB6BE6-9828-4121-A91C-8ADE8B6B1C36} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> Pas de fichier <==== ATTENTION Task: {CC0BB479-625E-4CA9-85F5-92E767BDBCCC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D64FC912-F0C4-4D64-A6FF-20BC6412E0A8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-11] (Microsoft Corporation -> Microsoft Corporation) Task: {DF346D39-CDC2-4A5B-B587-4B3BA1914323} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c3f6cdb5c1120dad\RtkAudUService64.exe [1258568 2021-06-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {F1A63713-44DF-4753-8E1B-F00389BB4DC6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154520 2021-07-18] (Google LLC -> Google LLC) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{d4204f85-ac28-4ffc-ad50-789c1612ddbf}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Profile: C:\Users\mercu\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-14] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.301.2 -> C:\Program Files\Java\jre1.8.0_301\bin\dtplugin\npDeployJava1.dll [2021-09-05] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.301.2 -> C:\Program Files\Java\jre1.8.0_301\bin\plugin2\npjp2.dll [2021-09-05] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-07-25] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-09-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-07-25] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default [2021-10-15] CHR Extension: (Slides) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-07-18] CHR Extension: (Docs) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-07-18] CHR Extension: (Google Drive) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-07-18] CHR Extension: (YouTube) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-14] CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-09-01] CHR Extension: (wanteeed) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\emnoomldgleagdjapdeckpmebokijail [2021-10-13] CHR Extension: (Sheets) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-07-18] CHR Extension: (Google Docs hors connexion) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-14] CHR Extension: (Avast Online Security) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-07-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-14] CHR Extension: (IObit Surfing Protection) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\imgpenhngnbnmhdkpdfnfhdpmfgmihdn [2021-10-02] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-07-18] CHR Extension: (Gmail) - C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-14] CHR Profile: C:\Users\mercu\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-10-14] CHR Profile: C:\Users\mercu\AppData\Local\Google\Chrome\User Data\System Profile [2021-10-14] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3743984 2021-10-07] (philandro Software GmbH -> philandro Software GmbH) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-07-19] (BattlEye Innovations e.K. -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2021-07-19] (EasyAntiCheat Oy -> Epic Games, Inc) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-11] (Epic Games Inc. -> Epic Games, Inc.) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\FileSyncHelper.exe [3252584 2021-10-08] (Microsoft Corporation -> Microsoft Corporation) R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe [744000 2021-08-27] (HP Inc. -> HP Inc.) R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe [742480 2021-08-27] (HP Inc. -> HP Inc.) R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe [742488 2021-08-27] (HP Inc. -> HP Inc.) R2 HPOmenCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe [688160 2021-05-10] (HP Inc. -> HP Inc.) R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe [743512 2021-08-27] (HP Inc. -> HP Inc.) R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-10-05] (Logitech Inc -> Logitech Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7801016 2021-10-14] (Malwarebytes Inc -> Malwarebytes) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\OneDriveUpdaterService.exe [3721576 2021-10-08] (Microsoft Corporation -> Microsoft Corporation) S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2020144 2021-10-03] (Rockstar Games, Inc. -> Rockstar Games) R2 RtkBtAudioServ; C:\WINDOWS\RtkBtAudioServ.exe [233040 2020-09-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) S3 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [376272 2016-05-23] (Razer USA Ltd. -> Razer Inc.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X] R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_cb1d78abfa910621\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_cb1d78abfa910621\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem S3 WildTangentHelper; "C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe" [X] ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé] S3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2021-05-18] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) S3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2021-05-18] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) S3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2021-10-14] (CPUID -> CPUID) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [160176 2021-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.) R3 HPOmenCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys [23888 2019-05-03] (HP Inc. -> HP Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech) S3 LGJoyHidFilter; C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys [57368 2018-10-05] (Logitech Inc -> Logitech Inc.) S3 LGJoyHidLo; C:\WINDOWS\system32\drivers\LGJoyHidLo.sys [47256 2018-10-05] (Logitech Inc -> Logitech Inc.) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-10-05] (Logitech Inc -> Logitech Inc.) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [210344 2021-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [193448 2021-10-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [69040 2021-10-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-10-14] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [149424 2021-10-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [70560 2018-09-03] (Realtek Semiconductor Corp. -> Realtek) S3 RtkAvrcp; C:\WINDOWS\System32\drivers\RtkAvrcp.sys [96984 2019-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation) S3 rzbtendpt; C:\WINDOWS\System32\drivers\rzbtendpt.sys [51728 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzdaendpt; C:\WINDOWS\System32\drivers\rzdaendpt.sys [42008 2016-08-17] (Razer USA Ltd. -> Razer Inc) R3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [52240 2021-05-25] (Razer USA Ltd. -> Razer Inc) S3 rzhnet; C:\WINDOWS\System32\Drivers\rzhnet.sys [29720 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzjstk; C:\WINDOWS\System32\drivers\rzjstk.sys [36376 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzkeypadendpt; C:\WINDOWS\System32\drivers\rzkeypadendpt.sys [45592 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [48152 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzp1endpt; C:\WINDOWS\System32\drivers\rzp1endpt.sys [51736 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzvkeyboard; C:\WINDOWS\System32\drivers\rzvkeyboard.sys [43544 2016-08-17] (Razer USA Ltd. -> Razer Inc) S3 rzvmouse; C:\WINDOWS\System32\drivers\rzvmouse.sys [43544 2016-08-17] (Razer USA Ltd. -> Razer Inc) R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [165744 2020-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48520 2021-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [434424 2021-10-06] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-06] (Microsoft Windows -> Microsoft Corporation) S3 AscFileControl; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileControl.sys [X] S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X] S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X] U3 aspnet_state; pas de ImagePath ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-10-15 17:00 - 2021-10-15 17:01 - 000000000 ____D C:\FRST 2021-10-15 16:59 - 2021-10-15 16:59 - 002310656 _____ (Farbar) C:\Users\mercu\Downloads\FRST64.exe 2021-10-15 16:25 - 2021-10-15 16:25 - 000193448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2021-10-15 16:25 - 2021-10-15 16:25 - 000149424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2021-10-15 16:25 - 2021-10-15 16:25 - 000069040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2021-10-15 16:25 - 2021-10-15 16:25 - 000000000 ____D C:\Users\mercu\AppData\LocalLow\IGDump 2021-10-15 06:50 - 2021-10-15 06:50 - 000145382 _____ C:\Users\mercu\Downloads\204613840400001_Releve_de_Notes_V1_20210715.PDF 2021-10-15 06:49 - 2021-10-15 06:49 - 000000000 ___HD C:\$WinREAgent 2021-10-14 21:35 - 2021-10-14 21:35 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2021-10-14 21:35 - 2021-10-14 21:35 - 000210344 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2021-10-14 21:35 - 2021-10-14 21:35 - 000160176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2021-10-14 21:35 - 2021-10-14 21:35 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2021-10-14 21:35 - 2021-10-14 21:35 - 000002048 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-10-14 21:35 - 2021-10-14 21:35 - 000000000 ____D C:\Users\mercu\AppData\Local\mbam 2021-10-14 21:35 - 2021-10-14 21:35 - 000000000 ____D C:\ProgramData\Malwarebytes 2021-10-14 21:33 - 2021-10-14 21:33 - 002101944 _____ (Malwarebytes) C:\Users\mercu\Downloads\MBSetup (1).exe 2021-10-14 21:33 - 2021-10-14 21:33 - 000000000 ____D C:\Program Files\Malwarebytes 2021-10-14 21:32 - 2021-10-14 21:32 - 002101944 _____ (Malwarebytes) C:\Users\mercu\Downloads\MBSetup.exe 2021-10-14 21:26 - 2021-10-14 21:27 - 000000000 ____D C:\AdwCleaner 2021-10-14 21:25 - 2021-10-14 21:26 - 008553680 _____ (Malwarebytes) C:\Users\mercu\Downloads\adwcleaner_8.3.0 (1).exe 2021-10-14 21:08 - 2021-10-14 21:08 - 008553680 _____ (Malwarebytes) C:\Users\mercu\Downloads\adwcleaner_8.3.0.exe 2021-10-14 21:06 - 2021-10-14 21:07 - 003290264 _____ (Nicolas Coolman) C:\Users\mercu\Downloads\ZHPCleaner.exe 2021-10-14 20:10 - 2021-10-15 16:02 - 000000000 ____D C:\Users\mercu\AppData\Roaming\ZHP 2021-10-14 20:10 - 2021-10-14 21:07 - 000000000 ____D C:\Users\mercu\AppData\Local\ZHP 2021-10-14 20:09 - 2021-10-14 20:09 - 003476632 _____ (Nicolas Coolman) C:\Users\mercu\Downloads\ZHPSuite.exe 2021-10-14 19:39 - 2021-10-14 20:04 - 000000000 ___HD C:\$SysReset 2021-10-11 20:34 - 2021-10-11 20:34 - 000000000 ____D C:\Users\mercu\OneDrive\Documents\Regressi 2021-10-11 18:24 - 2021-10-11 18:24 - 000000000 ____D C:\Users\mercu\AppData\Local\EOSUserHelper 2021-10-10 19:30 - 2021-10-10 19:30 - 000000000 ____D C:\Users\Default\AppData\Local\Epic Games 2021-10-10 15:08 - 2021-10-10 15:08 - 008965384 _____ C:\Users\mercu\Downloads\#§4Deep Sky.zip 2021-10-10 10:06 - 2021-10-10 10:06 - 000009976 _____ C:\Users\mercu\Downloads\Pix_JO.xlsx 2021-10-10 09:59 - 2021-10-10 09:59 - 000010898 _____ C:\Users\mercu\Downloads\Pix-Boutique.xlsx 2021-10-10 09:55 - 2021-10-10 09:55 - 000026562 _____ C:\Users\mercu\Downloads\Pix_tri.xlsx 2021-10-09 20:29 - 2021-10-09 20:29 - 000599693 _____ C:\Users\mercu\Downloads\TutoBwim_-_WLAN_Optimizer.zip 2021-10-09 20:29 - 2021-10-09 20:29 - 000599693 _____ C:\Users\mercu\Downloads\TutoBwim_-_WLAN_Optimizer (1).zip 2021-10-09 20:27 - 2021-10-09 20:27 - 006234112 _____ C:\WINDOWS\system32\config\drivers.iobit 2021-10-09 20:27 - 2021-10-09 20:27 - 000835584 _____ C:\WINDOWS\system32\config\DEFAULT.iobit 2021-10-09 20:27 - 2021-10-09 20:27 - 000081920 _____ C:\WINDOWS\system32\config\SAM.iobit 2021-10-09 20:27 - 2021-10-09 20:27 - 000040960 _____ C:\WINDOWS\system32\config\SECURITY.iobit 2021-10-09 20:26 - 2021-10-09 20:27 - 100413440 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit 2021-10-03 22:01 - 2021-10-03 22:01 - 000505638 _____ C:\Users\mercu\Downloads\TP4_compte_rendu_PDF.pdf 2021-10-03 20:42 - 2021-10-03 20:42 - 006505021 _____ C:\Users\mercu\Downloads\ES_SVT.odt 2021-10-03 19:43 - 2021-10-03 19:43 - 015963671 _____ C:\Users\mercu\Downloads\drive-download-20211003T174311Z-001.zip 2021-10-03 19:39 - 2021-10-03 19:40 - 015961125 _____ C:\Users\mercu\Downloads\drive-download-20211003T173939Z-001.zip 2021-10-03 19:38 - 2021-10-03 19:38 - 000995656 _____ C:\Users\mercu\Downloads\IMG_4137.HEIC 2021-10-03 19:27 - 2021-10-03 19:27 - 000842896 _____ C:\Users\mercu\Downloads\TP_5 (1).odt 2021-10-03 19:16 - 2021-10-03 19:16 - 000842896 _____ C:\Users\mercu\Downloads\TP_5.odt 2021-09-28 21:07 - 2021-09-28 21:08 - 000000000 ____D C:\Users\mercu\AppData\Roaming\vlc 2021-09-28 21:07 - 2021-09-28 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2021-09-28 21:06 - 2021-09-28 21:06 - 000000000 ____D C:\Program Files\VideoLAN 2021-09-28 21:04 - 2021-09-28 21:06 - 042762464 _____ C:\Users\mercu\Downloads\vlc-3.0.16-win64.exe 2021-09-20 21:49 - 2021-09-20 21:49 - 001670632 _____ C:\Users\mercu\Downloads\ESTleG014-09-21 (1).pptx 2021-09-19 18:44 - 2021-09-19 18:44 - 001215603 _____ C:\Users\mercu\Downloads\IMG_4047.HEIC 2021-09-19 17:32 - 2021-09-19 17:32 - 001831988 _____ C:\Users\mercu\Downloads\TP2.odt 2021-09-19 09:57 - 2021-09-19 09:57 - 003678232 _____ C:\Users\mercu\Downloads\Cours-detaille-TSVT-the2A-chapitre1-Site.pdf 2021-09-19 09:56 - 2021-09-19 09:56 - 000039403 _____ C:\Users\mercu\Downloads\Plan-de-cours-TSVT-the2A-chapitre1.pdf 2021-09-18 17:54 - 2021-09-18 17:54 - 056901632 _____ C:\Users\mercu\Downloads\EpicInstaller-12.2.17.msi 2021-09-16 18:28 - 2021-09-16 18:28 - 000118631 _____ C:\Users\mercu\Downloads\Edt.ics 2021-09-16 18:23 - 2021-09-16 18:23 - 000000000 ____D C:\Users\mercu\AppData\LocalLow\Temp 2021-09-16 18:21 - 2021-09-16 18:21 - 000140149 _____ C:\Users\mercu\Downloads\Doc1.pdf 2021-09-15 23:10 - 2021-09-15 23:10 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll 2021-09-15 23:10 - 2021-09-15 23:10 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2021-09-15 23:10 - 2021-09-15 23:10 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll 2021-09-15 23:10 - 2021-09-15 23:10 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2021-09-15 23:10 - 2021-09-15 23:10 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2021-09-15 23:10 - 2021-09-15 23:10 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2021-09-15 23:10 - 2021-09-15 23:10 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2021-09-15 23:10 - 2021-09-15 23:10 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2021-09-15 23:10 - 2021-09-15 23:10 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll 2021-09-15 23:10 - 2021-09-15 23:10 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2021-09-15 23:10 - 2021-09-15 23:10 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2021-09-15 23:10 - 2021-09-15 23:10 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2021-09-15 23:10 - 2021-09-15 23:10 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2021-09-15 23:10 - 2021-09-15 23:10 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe 2021-09-15 23:10 - 2021-09-15 23:10 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe 2021-09-15 23:10 - 2021-09-15 23:10 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2021-09-15 23:10 - 2021-09-15 23:10 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2021-09-15 23:10 - 2021-09-15 23:10 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2021-09-15 23:10 - 2021-09-15 23:10 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys 2021-09-15 23:10 - 2021-09-15 23:10 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2021-10-15 17:01 - 2021-07-19 21:17 - 000000000 ____D C:\Users\mercu\AppData\Roaming\Blitz 2021-10-15 17:00 - 2021-07-18 21:09 - 000000000 ____D C:\Users\mercu\AppData\Roaming\discord 2021-10-15 16:59 - 2021-07-18 22:04 - 000000000 ____D C:\Users\mercu\AppData\Local\Battle.net 2021-10-15 16:59 - 2021-07-18 21:01 - 000000000 ____D C:\Program Files (x86)\Google 2021-10-15 16:47 - 2021-07-18 21:27 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-10-15 16:47 - 2021-07-18 21:15 - 000000000 ____D C:\Users\mercu\AppData\Local\Discord 2021-10-15 16:47 - 2021-07-18 20:57 - 000000000 ____D C:\Users\mercu\AppData\Local\D3DSCache 2021-10-15 16:32 - 2021-07-18 21:29 - 000791762 _____ C:\WINDOWS\system32\perfh00C.dat 2021-10-15 16:32 - 2021-07-18 21:29 - 000149928 _____ C:\WINDOWS\system32\perfc00C.dat 2021-10-15 16:32 - 2021-07-18 21:26 - 000000000 ____D C:\WINDOWS\INF 2021-10-15 16:32 - 2021-07-18 20:54 - 001795578 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-10-15 16:28 - 2021-07-18 21:27 - 000000798 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2021-10-15 16:27 - 2020-05-22 05:15 - 000000000 ____D C:\ProgramData\NVIDIA 2021-10-15 16:26 - 2021-07-19 21:17 - 000000032 _____ C:\Users\mercu\AppData\Roaming\.machineId 2021-10-15 16:25 - 2021-07-18 21:23 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2021-10-15 16:25 - 2021-07-18 20:29 - 000008192 ___SH C:\DumpStack.log.tmp 2021-10-15 16:25 - 2021-07-18 20:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-10-15 16:01 - 2021-07-18 21:17 - 000000000 ____D C:\Program Files (x86)\Steam 2021-10-15 06:48 - 2020-05-22 05:13 - 000000000 ____D C:\ProgramData\Hewlett-Packard 2021-10-15 00:52 - 2021-07-19 00:43 - 000000000 ____D C:\Users\mercu\AppData\Local\HP_Inc 2021-10-14 21:35 - 2021-07-18 21:27 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2021-10-14 21:28 - 2021-07-18 20:29 - 000000000 ____D C:\ProgramData\HP 2021-10-14 21:27 - 2021-07-18 21:17 - 000000000 ____D C:\Users\mercu\AppData\Roaming\IObit 2021-10-14 21:27 - 2021-07-18 21:17 - 000000000 ____D C:\Users\mercu\AppData\LocalLow\IObit 2021-10-14 21:27 - 2021-07-18 21:17 - 000000000 ____D C:\ProgramData\IObit 2021-10-14 21:27 - 2021-07-18 21:17 - 000000000 ____D C:\Program Files (x86)\IObit 2021-10-14 21:27 - 2021-07-18 21:15 - 000000000 ____D C:\Users\mercu\AppData\Roaming\Hewlett-Packard 2021-10-14 21:27 - 2020-05-22 04:41 - 000000000 ____D C:\Program Files (x86)\HP 2021-10-14 21:27 - 2019-10-29 20:52 - 000000000 ___HD C:\hp 2021-10-14 21:12 - 2021-07-18 20:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-10-14 20:04 - 2021-08-13 12:10 - 000000000 ____D C:\Users\mercu\AppData\Local\CrashDumps 2021-10-14 20:04 - 2021-07-18 21:24 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-10-14 19:01 - 2021-07-18 21:04 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-10-13 20:53 - 2021-07-18 21:34 - 000000000 ____D C:\ProgramData\Riot Games 2021-10-13 19:22 - 2021-07-18 21:27 - 000000000 ___HD C:\Program Files\WindowsApps 2021-10-13 19:22 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-10-13 18:40 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\NDF 2021-10-12 22:41 - 2021-07-18 20:54 - 000000000 ____D C:\Users\mercu 2021-10-11 21:40 - 2021-09-01 11:24 - 000000000 ____D C:\temp 2021-10-11 21:31 - 2020-05-22 04:44 - 000000000 ____D C:\Program Files\Microsoft Office 2021-10-11 20:34 - 2021-07-18 20:58 - 000000000 ____D C:\Users\mercu\AppData\Local\PlaceholderTileLogoFolder 2021-10-11 20:34 - 2021-07-18 20:57 - 000000000 ____D C:\Users\mercu\AppData\Local\Packages 2021-10-11 20:34 - 2020-05-22 05:15 - 000000000 ____D C:\ProgramData\Packages 2021-10-11 18:21 - 2021-07-28 15:15 - 000000000 ____D C:\Users\mercu\AppData\Local\Epic Games 2021-10-10 15:25 - 2021-07-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games 2021-10-10 15:19 - 2021-07-19 17:33 - 000000000 ____D C:\Users\mercu\AppData\Local\Ubisoft Game Launcher 2021-10-10 15:18 - 2021-09-05 12:55 - 000000000 ____D C:\Users\mercu\AppData\Roaming\.minecraft 2021-10-10 15:03 - 2021-08-28 22:53 - 000000000 ____D C:\Users\mercu\AppData\Roaming\lunarclient 2021-10-10 15:03 - 2021-08-28 22:53 - 000000000 ____D C:\Users\mercu\AppData\Local\lunarclient-updater 2021-10-10 10:17 - 2021-07-18 20:29 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-10-10 10:17 - 2021-07-18 20:29 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-10-09 20:43 - 2021-07-24 15:18 - 000000000 ____D C:\Program Files (x86)\AnyDesk 2021-10-09 20:43 - 2021-07-18 20:29 - 000540304 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2021-10-09 20:33 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\MsDtc 2021-10-09 20:11 - 2021-07-18 20:59 - 000000000 ___RD C:\Users\mercu\OneDrive 2021-10-09 19:46 - 2021-07-18 22:04 - 000000000 ____D C:\Users\mercu\AppData\Roaming\Battle.net 2021-10-09 11:36 - 2021-07-18 21:17 - 000000000 ____D C:\ProgramData\ProductData 2021-10-09 11:35 - 2021-09-10 18:04 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2021-10-08 21:36 - 2021-09-03 22:42 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2021-10-08 21:36 - 2021-09-03 22:42 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-10-08 18:01 - 2021-07-20 15:19 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-10-07 21:32 - 2021-07-25 14:35 - 000000000 ____D C:\Users\mercu\AppData\Roaming\molotov 2021-10-06 18:08 - 2021-07-18 20:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2021-10-03 12:03 - 2021-07-29 12:05 - 000000000 ____D C:\Program Files (x86)\Rockstar Games 2021-10-03 12:03 - 2021-07-29 08:32 - 000000000 ____D C:\Program Files\Rockstar Games 2021-09-30 20:54 - 2021-07-18 21:01 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2021-09-30 20:54 - 2021-07-18 21:01 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2021-09-29 17:22 - 2021-07-18 22:03 - 000000000 ____D C:\Program Files (x86)\Battle.net 2021-09-18 18:12 - 2021-09-05 13:33 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher 2021-09-18 18:03 - 2021-07-18 21:25 - 000000000 ____D C:\Users\mercu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2021-09-18 17:59 - 2021-07-24 15:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk 2021-09-18 17:55 - 2021-09-05 13:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher 2021-09-18 17:48 - 2021-07-18 21:30 - 000000000 ____D C:\WINDOWS\TextInput 2021-09-18 17:48 - 2021-07-18 21:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH 2021-09-18 17:48 - 2021-07-18 21:29 - 000000000 ____D C:\WINDOWS\SysWOW64\fr 2021-09-18 17:48 - 2021-07-18 21:29 - 000000000 ____D C:\WINDOWS\system32\fr 2021-09-18 17:48 - 2021-07-18 21:29 - 000000000 ____D C:\WINDOWS\HoloShell 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\system32\UNP 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\system32\F12 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\system32\dsc 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___RD C:\WINDOWS\PrintDialog 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\Com 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SystemResources 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\setup 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\migwiz 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\Keywords 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\downlevel 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\Dism 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\DDFs 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\Com 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\appraiser 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\ShellExperiences 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\ShellComponents 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\Provisioning 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\IME 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\DiagTrack 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files\Windows Portable Devices 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files\Windows Multimedia Platform 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files\Common Files\System 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2021-09-18 17:48 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2021-09-18 17:48 - 2021-07-18 21:23 - 000000000 ____D C:\WINDOWS\servicing 2021-09-18 17:47 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2021-09-18 17:47 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2021-09-18 17:47 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\SysWOW64\IME 2021-09-18 17:46 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\MUI 2021-09-18 17:46 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\InputMethod 2021-09-18 17:46 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\system32\IME 2021-09-18 17:39 - 2021-07-19 08:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch 2021-09-18 17:39 - 2021-07-18 22:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2021-09-18 17:39 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\Containers 2021-09-18 17:39 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\Branding 2021-09-18 17:39 - 2021-07-18 21:27 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2021-09-18 17:39 - 2019-04-15 17:39 - 000000000 __RHD C:\Users\Public\AccountPictures 2021-09-18 17:32 - 2021-07-18 21:27 - 000000000 ____D C:\WINDOWS\registration 2021-09-15 23:02 - 2021-07-20 15:18 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-09-15 23:01 - 2021-07-20 15:18 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Fichiers à la racine de certains dossiers ======== 2021-07-19 21:17 - 2021-10-15 16:26 - 000000032 _____ () C:\Users\mercu\AppData\Roaming\.machineId ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================