Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2022
Exécuté par tom.muet (administrateur) sur MUET-PC (HP HP EliteBook 840 G7 Notebook PC) (21-01-2022 12:31:35)
Exécuté depuis D:\Ce PC\Téléchargements
Profils chargés: tom.muet
Plate-forme: Microsoft Windows 10 Professionnel Version 21H1 19043.1466 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

() [Fichier non signé] C:\Program Files (x86)\teraterm\Collector\Collector.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Boris Maisuradze) [Fichier non signé] C:\Program Files (x86)\LogMeTT\LogMeTT.exe
(Discord Inc. -> Discord Inc.) C:\Users\tom.muet\AppData\Local\Discord\app-1.0.9003\Discord.exe <6>
(Eclipse.org Foundation, Inc. -> ) C:\Users\tom.muet\eclipse\java-2021-12\eclipse\eclipse.exe
(File-New-Project) C:\Program Files\WindowsApps\40459File-New-Project.EarTrumpet_2.1.9.0_x86__1sdd7yawvg6ne\EarTrumpet\EarTrumpet.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <43>
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_44633d75967bb427\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\BridgeCommunication.exe <23>
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\SysInfoCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dea730b932418dc2\HotKeyServiceUWP.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dea730b932418dc2\LanWlanWwanSwitchingServiceUWP.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemInformation_7.0.18.0_x64__v10z8vjag6ke6\HP System Information.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_baf36d4852e8e257\igfxCUIService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_baf36d4852e8e257\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_a439e07c373809e2\OneApp.IGCC.WinService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_00352e148f6a4096\IntelCpHDCPSvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_00352e148f6a4096\IntelCpHeciSvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_3e38e338bd327f33\LMS.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\tom.muet\AppData\Local\Programs\Microsoft VS Code\Code.exe <16>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2111.12605.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2111.12605.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Power Software Limited -> Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_11f809ac26966b9b\RtkAudUService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f31d3fd59f245137\RtkAudUService64.exe <2>
(S.Hayakawa, TeraTerm Project) [Fichier non signé] C:\Program Files (x86)\teraterm\ttpmenu.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_11f809ac26966b9b\RtkAudUService64.exe [1274736 2021-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [98261768 2020-05-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Duet Display] => C:\Program Files\Kairos\Duet Display\DuetLaunch.exe [501168 2021-09-13] (Duet, Inc. -> Duet Inc.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [460432 2021-11-04] (Power Software Limited -> Power Software Ltd)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [117536 2022-01-12] (VMware, Inc. -> VMware, Inc.)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [OneDrive] => "C:\Users\Mine\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background (Pas de fichier)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\tom.muet\AppData\Local\Microsoft\Teams\Update.exe [2459280 2021-11-03] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Steam] => D:\Steam\steam.exe [4267432 2021-12-16] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Spotify] => C:\Users\tom.muet\AppData\Roaming\Spotify\Spotify.exe [19184056 2022-01-07] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [EpicGamesLauncher] => "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent (Pas de fichier)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35373696 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5407968 2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [144008 2020-12-27] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [LogMeTT.exe] => C:\Program Files (x86)\LogMeTT\LogMeTT.exe [367616 2015-11-26] (Boris Maisuradze) [Fichier non signé]
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [CiscoMeetingDaemon] => C:\Users\tom.muet\AppData\Local\WebEx\ciscowebexstart.exe [4934984 2021-10-29] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Lync] => "C:\Program Files\Microsoft Office\root\Office16\lync.exe" /fromrunkey (Pas de fichier)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1087376 2021-12-17] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\Run: [Discord] => C:\Users\tom.muet\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2583152034-3386638547-344932489-1002\...\MountPoints2: {4a30e0fe-1988-11ec-9a05-287fcf23205c} - "E:\OnePlus_setup.exe" /s
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.71\Installer\chrmstp.exe [2022-01-07] (Google LLC -> Google LLC)
Startup: C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Collector.lnk [2021-04-29]
ShortcutTarget: Collector.lnk -> C:\Program Files (x86)\teraterm\Collector\Collector.exe () [Fichier non signé]
Startup: C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeraTerm Menu.lnk [2021-04-29]
ShortcutTarget: TeraTerm Menu.lnk -> C:\Program Files (x86)\teraterm\ttpmenu.exe (S.Hayakawa, TeraTerm Project) [Fichier non signé]

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0EC522FB-2493-4196-B5E0-9DA130A0840F} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {2843D037-8CD9-47A9-8468-ABB2D2D5B68E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-16] (Google LLC -> Google LLC)
Task: {2AE2B3B0-1C73-427D-898F-1B3C0B1692DE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {2FD6BB1B-9DC0-4314-827C-F171BFE1293D} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [880 2020-09-25] () [Fichier non signé]
Task: {3B219CB5-6CF8-4C98-AEEF-DA9FEE9CCC19} - System32\Tasks\DuetUpdater => C:\Program Files\Kairos\Duet Display\DuetUpdater.exe [9914800 2021-09-13] (Duet, Inc. -> Kairos)
Task: {3F66DAA9-99D3-4A22-BC14-AACDC65087A6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {45137291-1286-4E7A-BA34-86BEC8FE9E77} - \OneDrive Standalone Update Task-S-1-5-21-2583152034-3386638547-344932489-1001 -> Pas de fichier <==== ATTENTION
Task: {5EDD2474-3EE6-4746-9311-AD4F66F1F2DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {68F3EBD3-1104-4E64-8890-95ACAF0ABB4A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7FA91816-5C79-41A2-B98E-E8136C1CDE05} - System32\Tasks\update-S-1-5-21-2583152034-3386638547-344932489-1002 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {80E82068-66BD-46AA-AABA-B321E5CCB290} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {8C6C8600-50E0-4421-8278-CF921C3EAF2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {960B7045-17DB-4C2F-B71A-C6559384425A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {A26606D4-CB82-4D20-AFC9-3F4D16463974} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {ABAF91F0-4287-474A-8BA2-090285CC971A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {B66CFFFD-ABB0-45E1-B714-1F45D4383FEE} - System32\Tasks\CCleanerSkipUAC - tom.muet => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BDE84736-189B-4AA4-AADD-5C65A7C1E86E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-16] (Google LLC -> Google LLC)
Task: {EA2045B3-32FC-4C49-BE1D-95613B5C5B5B} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4191328 2021-12-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {F3790BB1-CF56-481A-8D3B-27E891B2A0E5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-16] (Microsoft Corporation -> Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\Windows\Tasks\update-S-1-5-21-2583152034-3386638547-344932489-1002.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe-runmode=checkupdateMUET-PC\tom.mue
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe-runmode=checkupdateMUET-PC\tom.mue

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Winsock: Catalog9 15 C:\Windows\SysWOW64\vsocklib.dll [44128 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\vsocklib.dll [44128 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\vsocklib.dll [48224 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 16 C:\Windows\system32\vsocklib.dll [48224 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.134.32.1 10.130.0.10
Tcpip\..\Interfaces\{d32f7d1f-4add-4724-b6ee-ed7210aede09}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{d7f75fd5-f590-4c86-bd11-453778f0d409}: [DhcpNameServer] 10.131.4.1 10.130.0.10
Tcpip\..\Interfaces\{e9119f55-7a2e-4bbd-9b72-4db196e6d91c}: [DhcpNameServer] 10.134.32.1 10.130.0.10

Edge: 
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge Profile: C:\Users\tom.muet\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-14]

FireFox:
========
FF DefaultProfile: n3visayw.default
FF ProfilePath: C:\Users\tom.muet\AppData\Roaming\Mozilla\Firefox\Profiles\n3visayw.default [2020-12-29]
FF ProfilePath: C:\Users\tom.muet\AppData\Roaming\Mozilla\Firefox\Profiles\kuaz62qe.default-release [2022-01-21]
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-06-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-06-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2583152034-3386638547-344932489-1002: LWAPlugin15.8 -> C:\Users\tom.muet\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll [2013-03-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\tom.muet\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll [2021-06-03]

Chrome: 
=======
CHR Profile: C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default [2022-01-21]
CHR Session Restore: Default -> est activé.
CHR Extension: (Slides) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-09-16]
CHR Extension: (BetterTTV) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-12-13]
CHR Extension: (Docs) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-09-16]
CHR Extension: (Google Drive) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (Turn Off the Lights) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2021-03-31]
CHR Extension: (YouTube) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-09-16]
CHR Extension: (Color Picker) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\cemonabbpebmicmgjgpefjnnandabbjn [2021-12-23]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-01-12]
CHR Extension: (Social Blade) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2021-06-01] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION
CHR Extension: (Watch2Gether) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\cimpffimgeipdhnhjohpbehjkcdpjolg [2021-12-13]
CHR Extension: (Sheets) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-09-16]
CHR Extension: (Google Docs hors connexion) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-19]
CHR Extension: (Papas Pastaria Game) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipgpdacoallahbdedblioplcgpkkgnig [2020-09-16]
CHR Extension: (Volume Master - contrôleur de volume) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\jghecgabfgfdldnmbfkhmffcabddioke [2022-01-07]
CHR Extension: (Domingo Live Extension) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdkbkaknlncjiplhgcaomjkcnhbpkiek [2020-09-16]
CHR Extension: (Adorable animal de hamster .) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhiilheedbaffkfhjjodneogdaehfa [2020-10-20]
CHR Extension: (Little Alchemy) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2020-09-16]
CHR Extension: (Twitch Now) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2020-09-16]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Netflix Party is now Teleparty) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2021-12-23]
CHR Extension: (Gmail) - C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Profile: C:\Users\tom.muet\AppData\Local\Google\Chrome\User Data\System Profile [2022-01-04]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12119432 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
S3 DuetUpdater; C:\Program Files\Kairos\Duet Display\DuetUpdater.exe [9914800 2021-09-13] (Duet, Inc. -> Kairos)
R2 FMAPOService; C:\Windows\System32\FMService64.exe [350008 2020-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HotKeyServiceUWP; C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dea730b932418dc2\HotKeyServiceUWP.exe [1512544 2021-10-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\AppHelperCap.exe [756216 2021-12-02] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\DiagsCap.exe [755192 2021-12-02] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\NetworkCap.exe [753184 2021-12-02] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-14] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_e8b8e47062b80a1f\x64\SysInfoCap.exe [755192 2021-12-02] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_44633d75967bb427\x64\TouchpointAnalyticsClientService.exe [494688 2021-11-21] (HP Inc. -> HP Inc.)
R2 LanWlanWwanSwitchingServiceUWP; C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dea730b932418dc2\LanWlanWwanSwitchingServiceUWP.exe [591968 2021-10-30] (HP Inc. -> HP Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6137040 2022-01-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TbtP2pShortcutService; C:\Windows\TbtP2pShortcutService.exe [254112 2021-07-14] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13271336 2021-09-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746504 2020-07-10] (Oracle Corporation -> Oracle Corporation)
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.46\bin\httpd.exe [29696 2020-08-02] (Apache Software Foundation) [Fichier non signé]
S3 wampmariadb64; c:\wamp64\bin\mariadb\mariadb10.4.13\bin\mysqld.exe [16058280 2020-05-09] (MariaDB Corporation Ab -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AlteraUSBBlaster; C:\Windows\system32\drivers\usbblstr.sys [70480 2013-06-13] (Altera Corporation -> FTDI Ltd.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 duetbus; C:\Windows\System32\DriverStore\FileRepository\duetbus.inf_amd64_66e44262fc0dd065\duetbus.sys [41736 2020-11-17] (Duet, Inc. -> Duet, Inc.)
S3 DuetWPDFilter; C:\Windows\System32\drivers\DuetWPDFilter.sys [21992 2021-02-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\Windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-15] (HP Inc. -> HP Inc.)
S3 msump64x64; C:\Windows\System32\DriverStore\FileRepository\msump64x64sta.inf_amd64_89698266d72b169e\msump64x64.sys [937472 2021-03-19] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 msux64w10; C:\Windows\System32\drivers\msux64w10.sys [385088 2017-03-03] (Microsoft Corporation -> Microsoft)
R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)
S3 SynStykFilterHID; C:\Windows\System32\drivers\SynTP.sys [810952 2021-09-02] (Synaptics Incorporated -> Synaptics Incorporated)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [237840 2020-07-11] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247232 2020-07-11] (Oracle Corporation -> Oracle Corporation)
R2 VMnetBridge; C:\Windows\system32\DRIVERS\vmnetbridge.sys [67072 2022-01-12] (VMware, Inc. -> VMware, Inc.)
R0 vsock; C:\Windows\System32\DRIVERS\vsock.sys [105912 2021-08-16] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [54712 2021-09-01] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\Windows\System32\DriverStore\FileRepository\wiman.inf_amd64_c288daa8087b2b2f\WiManH\WiManH.sys [172904 2020-10-29] (Intel Wireless Driver -> )
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U4 npcap_wifi; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-01-21 12:31 - 2022-01-21 12:31 - 000000000 ____D C:\FRST
2022-01-20 22:51 - 2022-01-20 22:51 - 000000505 _____ C:\Users\tom.muet\AppData\LocalLow\wbk208C.tmp
2022-01-20 11:45 - 2022-01-20 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2022-01-20 11:45 - 2022-01-12 21:06 - 001298712 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll
2022-01-20 11:45 - 2022-01-12 21:05 - 000426360 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
2022-01-20 11:45 - 2022-01-12 21:05 - 000378656 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
2022-01-20 11:45 - 2022-01-12 21:05 - 000119792 _____ (VMware, Inc.) C:\Windows\system32\vnetinst.dll
2022-01-20 11:45 - 2022-01-12 21:05 - 000044544 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys
2022-01-20 11:45 - 2022-01-12 21:00 - 000114232 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
2022-01-20 11:45 - 2021-10-11 04:26 - 000084480 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
2022-01-20 11:45 - 2021-08-16 18:23 - 000105912 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys
2022-01-20 11:45 - 2021-08-16 18:23 - 000048224 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll
2022-01-20 11:45 - 2021-08-16 18:23 - 000044128 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
2022-01-20 11:44 - 2022-01-20 11:44 - 000000000 ____D C:\Program Files\Common Files\VMware
2022-01-20 11:15 - 2022-01-20 11:15 - 000000000 ____D C:\Users\tom.muet\.ssh
2022-01-18 13:55 - 2022-01-20 13:32 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\StarUML
2022-01-18 13:55 - 2022-01-18 13:55 - 000001869 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarUML.lnk
2022-01-18 13:55 - 2022-01-18 13:55 - 000000000 ____D C:\Users\tom.muet\AppData\Local\staruml-updater
2022-01-18 13:55 - 2022-01-18 13:55 - 000000000 ____D C:\Program Files\StarUML
2022-01-17 10:55 - 2022-01-17 10:55 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2022-01-17 10:55 - 2022-01-17 10:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Games
2022-01-16 11:39 - 2022-01-16 11:39 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Boxman_s_Struggle
2022-01-12 21:05 - 2022-01-12 21:05 - 000097504 _____ (VMware, Inc.) C:\Windows\system32\vmnetbridge.dll
2022-01-12 21:05 - 2022-01-12 21:05 - 000067072 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetbridge.sys
2022-01-12 21:05 - 2022-01-12 21:05 - 000046576 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetadapter.sys
2022-01-12 21:05 - 2022-01-12 21:05 - 000046576 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnet.sys
2022-01-12 03:54 - 2022-01-12 03:54 - 000523776 _____ (curl, hxxps://curl.se/) C:\Windows\system32\curl.exe
2022-01-12 03:54 - 2022-01-12 03:54 - 000464384 _____ (curl, hxxps://curl.se/) C:\Windows\SysWOW64\curl.exe
2022-01-12 03:54 - 2022-01-12 03:54 - 000011797 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-01-12 03:50 - 2022-01-12 03:50 - 000000000 ___HD C:\$WinREAgent
2022-01-10 16:54 - 2022-01-10 16:59 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Deskreen
2022-01-10 16:54 - 2022-01-10 16:54 - 000002423 _____ C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Deskreen.lnk
2022-01-10 16:54 - 2022-01-10 16:54 - 000000000 ____D C:\Users\tom.muet\AppData\Local\deskreen-updater
2022-01-10 16:45 - 2022-01-10 16:49 - 000000000 ____D C:\Users\tom.muet\AppData\Local\AirParrot 3
2022-01-10 16:45 - 2022-01-10 16:45 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Squirrels
2022-01-10 16:45 - 2022-01-10 16:45 - 000000000 ____D C:\ProgramData\AirParrot3
2022-01-10 16:44 - 2022-01-10 16:45 - 000000000 ____D C:\ProgramData\AirParrot 3
2022-01-10 16:44 - 2022-01-10 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirParrot 3
2022-01-10 16:44 - 2022-01-10 16:44 - 000000000 ____D C:\Program Files\AirParrot 3
2022-01-10 16:39 - 2022-01-10 16:39 - 000000000 ____D C:\Users\tom.muet\AppData\Local\AirMyPC
2022-01-10 16:39 - 2022-01-10 16:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirMyPC
2022-01-10 16:39 - 2022-01-10 16:39 - 000000000 ____D C:\Program Files (x86)\AirMyPC
2022-01-10 14:01 - 2022-01-18 11:38 - 000000000 ____D C:\Users\tom.muet\eclipse-workspace
2022-01-10 14:01 - 2022-01-10 14:01 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse
2022-01-10 13:59 - 2022-01-20 16:08 - 000000000 ____D C:\Users\tom.muet\.p2
2022-01-10 13:59 - 2022-01-10 14:01 - 000000000 ____D C:\Users\tom.muet\.eclipse
2022-01-10 13:59 - 2022-01-10 13:59 - 000000000 ____D C:\Users\tom.muet\eclipse
2022-01-07 10:37 - 2022-01-07 10:37 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\PowerISO
2022-01-07 10:37 - 2022-01-07 10:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2022-01-07 10:37 - 2022-01-07 10:37 - 000000000 ____D C:\Program Files\PowerISO
2022-01-07 10:37 - 2017-06-07 01:36 - 000138296 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys
2022-01-07 09:24 - 2022-01-07 09:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2022-01-07 09:24 - 2020-07-11 11:47 - 001030096 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2022-01-07 09:24 - 2020-07-11 11:47 - 000187456 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2022-01-07 09:03 - 2022-01-07 09:03 - 000001722 _____ C:\Users\tom.muet\AppData\LocalLow\wbk93DF.tmp
2022-01-05 12:49 - 2021-09-02 10:56 - 020222936 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPRes.dll
2022-01-05 12:49 - 2021-09-02 10:56 - 004060616 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCpl.dll
2022-01-03 14:27 - 2022-01-03 14:38 - 000000000 ____D C:\Windows\system32\tp javascript
2022-01-03 14:19 - 2022-01-03 14:19 - 000000000 _____ C:\Windows\system32\untitled.py
2022-01-03 14:17 - 2022-01-03 14:27 - 000215506 _____ C:\Windows\system32\javascript.ipynb
2022-01-03 14:16 - 2022-01-03 14:23 - 000000000 ____D C:\Windows\system32\.ipynb_checkpoints
2022-01-03 14:16 - 2022-01-03 14:16 - 000000072 _____ C:\Windows\system32\Untitled.ipynb
2022-01-03 14:14 - 2022-01-03 14:15 - 000000000 ____D C:\Users\tom.muet\.jupyter
2022-01-03 14:14 - 2022-01-03 14:14 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Yarn
2022-01-03 14:08 - 2022-01-03 14:09 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10
2022-01-03 13:53 - 2022-01-03 15:01 - 000000000 ____D C:\Program Files\coursjavascript
2022-01-02 20:07 - 2022-01-21 12:29 - 000000000 ____D C:\SteamLibrary
2022-01-02 18:30 - 2022-01-02 19:40 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\audacity
2022-01-02 18:30 - 2022-01-02 18:30 - 000000872 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2022-01-02 18:30 - 2022-01-02 18:30 - 000000000 ____D C:\Users\tom.muet\AppData\Local\audacity
2022-01-02 18:29 - 2022-01-02 18:30 - 000000000 ____D C:\Program Files\Audacity
2022-01-02 17:58 - 2022-01-20 18:16 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-12-23 02:12 - 2021-12-23 02:12 - 000000000 ____D C:\Windows\SystemTemp

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-01-21 12:32 - 2020-10-02 21:50 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\discord
2022-01-21 12:30 - 2020-12-11 08:32 - 000004166 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{FDC83DFA-C351-469A-9674-0A64A91A4F52}
2022-01-21 12:30 - 2020-10-22 12:43 - 000000000 ____D C:\Program Files\CCleaner
2022-01-21 12:30 - 2020-09-16 17:41 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-21 12:29 - 2020-08-31 09:32 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-01-21 12:29 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-21 07:19 - 2020-09-16 20:22 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Code
2022-01-21 07:12 - 2021-10-25 18:25 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Discord
2022-01-21 04:43 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-21 04:43 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2022-01-21 04:43 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2022-01-21 00:19 - 2020-09-16 17:41 - 000003590 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-21 00:19 - 2020-09-16 17:41 - 000003466 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-20 23:03 - 2020-09-30 15:56 - 000000000 ____D C:\ProgramData\Riot Games
2022-01-20 13:30 - 2020-10-06 15:10 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\npm-cache
2022-01-20 13:29 - 2021-10-12 13:09 - 000000000 ____D C:\Users\tom.muet\AppData\Local\VMware
2022-01-20 13:29 - 2021-10-12 13:08 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\VMware
2022-01-20 12:27 - 2020-10-22 12:43 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2022-01-20 12:13 - 2021-10-12 12:53 - 000000000 ____D C:\ProgramData\VMware
2022-01-20 11:45 - 2021-10-12 12:54 - 001806596 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2022-01-20 11:45 - 2019-12-07 15:49 - 000797362 _____ C:\Windows\system32\perfh00C.dat
2022-01-20 11:45 - 2019-12-07 15:49 - 000152002 _____ C:\Windows\system32\perfc00C.dat
2022-01-20 11:44 - 2021-10-12 12:53 - 000000000 ____D C:\Program Files (x86)\VMware
2022-01-20 11:42 - 2021-04-24 23:19 - 000000000 ____D C:\Users\tom.muet\AppData\Local\CrashDumps
2022-01-20 11:15 - 2020-09-08 05:51 - 000000000 ____D C:\Users\tom.muet
2022-01-20 11:02 - 2021-11-02 14:12 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\duet
2022-01-18 13:32 - 2020-10-05 17:00 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Spotify
2022-01-18 13:30 - 2020-10-05 17:00 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Spotify
2022-01-18 04:47 - 2020-09-28 23:38 - 000003634 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-18 04:47 - 2020-09-28 23:38 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-16 11:21 - 2020-08-31 09:54 - 000000000 ____D C:\Program Files\Microsoft Office
2022-01-15 20:47 - 2020-09-28 23:38 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-14 15:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ServiceState
2022-01-14 13:41 - 2020-09-08 05:51 - 000000000 ____D C:\Users\tom.muet\.VirtualBox
2022-01-14 13:30 - 2020-08-31 09:54 - 000000000 ____D C:\ProgramData\VirtualBox
2022-01-14 11:39 - 2020-09-08 05:51 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Packages
2022-01-12 20:39 - 2021-09-06 19:32 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Battle.net
2022-01-12 12:37 - 2020-08-31 09:38 - 001779832 _____ C:\Windows\system32\PerfStringBackup.INI
2022-01-12 04:16 - 2020-11-03 19:02 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Notepad
2022-01-12 04:15 - 2020-10-28 21:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-01-12 04:15 - 2020-09-08 05:51 - 000000000 __SHD C:\Users\tom.muet\IntelGraphicsProfiles
2022-01-12 04:15 - 2020-08-31 09:46 - 000000000 ____D C:\Intel
2022-01-12 04:15 - 2020-08-31 09:32 - 000444072 _____ C:\Windows\system32\FNTCACHE.DAT
2022-01-12 04:15 - 2020-08-31 09:32 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-12 04:15 - 2020-08-31 09:32 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-01-12 04:14 - 2019-12-07 15:52 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2022-01-12 04:14 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2022-01-12 04:14 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI
2022-01-12 03:56 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2022-01-12 03:49 - 2020-08-31 09:43 - 000000000 ____D C:\Windows\system32\MRT
2022-01-12 03:47 - 2020-08-31 09:43 - 145765912 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-01-11 13:55 - 2020-09-28 10:30 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2022-01-11 13:55 - 2020-09-28 10:29 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2022-01-10 16:39 - 2020-12-27 11:18 - 000000000 ____D C:\ProgramData\TEMP
2022-01-10 14:01 - 2021-10-15 19:52 - 000000000 ____D C:\Users\tom.muet\.cache
2022-01-09 19:59 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\LiveKernelReports
2022-01-07 15:59 - 2020-10-06 14:51 - 000000000 ____D C:\ProgramData\Package Cache
2022-01-07 09:04 - 2020-09-16 17:42 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-03 14:52 - 2020-09-16 20:21 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2022-01-03 14:16 - 2020-11-24 00:20 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\jupyter
2022-01-03 14:11 - 2021-01-31 23:07 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Package Cache
2022-01-02 20:03 - 2020-09-08 05:51 - 000000000 ____D C:\Users\tom.muet\AppData\Local\D3DSCache
2022-01-02 19:59 - 2020-12-01 16:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STMicroelectronics
2022-01-02 19:57 - 2020-12-03 03:24 - 000000000 ____D C:\Program Files\Adobe
2022-01-02 19:54 - 2021-04-15 07:08 - 000000000 ____D C:\Windows\system32\appmgmt
2022-01-02 19:53 - 2020-12-29 11:22 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-02 19:51 - 2021-04-14 14:55 - 000000000 ____D C:\Program Files\Common Files\SOLIDWORKS Shared
2022-01-02 19:48 - 2021-04-14 14:55 - 000000000 ____D C:\Program Files\SOLIDWORKS Corp
2022-01-02 19:47 - 2021-04-27 08:50 - 000000000 ____D C:\Users\tom.muet\AppData\Local\cura
2022-01-02 19:47 - 2021-04-27 08:49 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\cura
2022-01-02 19:40 - 2020-12-15 11:46 - 000000000 ____D C:\Users\tom.muet\AppData\Roaming\vlc
2022-01-02 17:57 - 2021-11-13 19:02 - 000000000 ____D C:\Users\tom.muet\AppData\LocalLow\Ninja Kiwi
2022-01-02 17:57 - 2021-09-06 19:31 - 000000000 ____D C:\Users\tom.muet\AppData\Local\Blizzard Entertainment
2021-12-23 02:14 - 2021-09-06 19:31 - 000000000 ____D C:\Program Files (x86)\Battle.net
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lv-LV
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lt-LT
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\et-EE
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\es-MX
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning
2021-12-23 02:12 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions

==================== Fichiers à la racine de certains dossiers ========

2020-12-18 09:31 - 2020-12-18 09:31 - 000000117 _____ () C:\Users\tom.muet\AppData\Roaming\debug.log
2020-11-24 00:19 - 2021-11-09 15:56 - 000000000 _____ () C:\Users\tom.muet\AppData\Roaming\Spyder.launch.pyw.log
2020-10-09 08:48 - 2020-10-09 09:38 - 000000128 _____ () C:\Users\tom.muet\AppData\Local\PUTTY.RND
2021-11-19 20:29 - 2021-11-19 20:29 - 000003943 _____ () C:\Users\tom.muet\AppData\Local\recently-used.xbel
2020-10-30 13:51 - 2020-10-30 13:51 - 000000003 _____ () C:\Users\tom.muet\AppData\Local\updater.log
2020-10-30 13:51 - 2020-10-30 13:51 - 000000424 _____ () C:\Users\tom.muet\AppData\Local\UserProducts.xml
2021-04-27 10:53 - 2021-04-27 10:53 - 000000000 _____ () C:\Users\tom.muet\AppData\Local\zenmap.exe.log

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================