Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2022 01
Exécuté par se (administrateur) sur DESKTOP-NEN81S6 (LENOVO 80M0) (03-06-2022 14:42:10)
Exécuté depuis C:\Users\se\Downloads
Profils chargés: se
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1706 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpnd\expressvpnd.exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(LenovoBoostAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(LenovoBoostSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(SmartInteractAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Mathias Svensson) [Fichier non signé] [Fichier en cours d'utilisation] C:\Users\se\AppData\Local\Temp\MicrosoftEdgeDownloads\a9687b56-19ea-47ad-8dc7-e01fb96a4e3b\MultiCommander_x64_(11.6.0.2845).exe
(C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(C:\Program Files\Elantech\ETDService.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe
(explorer.exe ->) (Dolby Laboratories Inc.) [Fichier non signé] C:\Program Files\Dolby\DDP_F3\ddpf3.exe
(explorer.exe ->) (LENOVO -> Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <12>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <3>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(services.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (LENOVO -> Lenovo) C:\ProgramData\LenovoTransition\Server\x64\ymc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(services.exe ->) (TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2203.4603.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2016-03-15] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2016-03-15] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2016-03-15] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2016-03-15] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3743648 2015-06-25] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (LENOVO -> Lenovo(beijing) Limited)
HKLM\...\Run: [DDPF3] => C:\Program Files\Dolby\DDP_F3\ddpf3.exe [746496 2014-11-03] (Dolby Laboratories Inc.) [Fichier non signé]
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [642664 2013-12-24] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863848 2013-12-24] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [377256 2021-12-07] (EXPRSVPN LLC -> ExpressVPN)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKU\S-1-5-21-509422068-2561196116-865794310-1001\...\Run: [PhotoMasterImportAgent] => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [675608 2016-04-22] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-509422068-2561196116-865794310-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49799144 2018-08-24] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-509422068-2561196116-865794310-1001\...\Run: [MicrosoftEdgeAutoLaunch_C896AB192DDD625822CFDFE8C9191C94] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3547064 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-509422068-2561196116-865794310-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe  --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session -- microsoft-edge:hxxps://www.msn.com/spar (l'élément de données a 597 caractères en plus). [3547064 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558080 2011-08-30] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\system32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\system32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\91.1.10672.124\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\102.0.5005.63\Installer\chrmstp.exe [2022-06-02] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\86.1.6960.198\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\se\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - .lnk [2017-06-15]
ShortcutAndArgument: Alertes de surveillance de l'encre - .lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 3520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN27D120WL05SY;CONNECTION=USB;MONITOR=1;
Startup: C:\Users\se\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Deskjet 3520 series.lnk [2022-06-02]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Deskjet 3520 series.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 3520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN27D120WL05SY;CONNECTION=USB;MONITOR=1;
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {025627FC-295C-473D-9A91-F86A2E28203C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2016-02-02] (Google Inc -> Google Inc.)
Task: {0A52E516-6A8F-4680-B4AF-FD49090DDFB9} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\ScheduleEventAction.exe [26384 2022-03-20] (Lenovo -> Lenovo Group Ltd.)
Task: {108EBDB2-FB4D-4C2A-8213-A507D44B277A} - System32\Tasks\CyberLink\Photo Master Gadget startup => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [745240 2016-04-22] (CyberLink Corp. -> CyberLink Corp.)
Task: {10D7FA70-D275-46CD-938B-63326008126C} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {1BD27CF3-F46A-47E7-A2D2-199E71FB6ECC} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\ScheduleEventAction.exe [26384 2022-03-20] (Lenovo -> Lenovo Group Ltd.)
Task: {2216E84C-6D8F-4062-98B0-07A1A490578A} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe VantageTelemetryAddinTask (Pas de fichier)
Task: {25C5CB0D-2D10-4EDA-B2DE-4B557DCEE672} - System32\Tasks\Hewlett-Packard\HP Web Products Detection => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPWPD.exe [303792 2022-05-12] (HP Inc. -> HP Inc.)
Task: {2E8265F9-3C29-4883-A208-B05D0712E407} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {480918E1-FBBC-4D59-980A-ACE0C3FF4124} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [145480 2021-09-09] (Lenovo -> Lenovo Group Ltd.)
Task: {4CB22FA9-A1A6-4651-9065-975A65D3EC17} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {4F32CC38-84D4-463F-8086-A7B5EFEB58E4} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [287688 2015-12-25] (LENOVO -> Lenovo)
Task: {52F152C0-ACCF-45C7-9A10-9F3828F40189} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [221328 2022-05-12] (HP Inc. -> )
Task: {5385B7DB-56B7-4B83-BA62-F2E6B1C452C4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\e2e8c265-7d91-4a3f-b010-07d6c92d8e43 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {613F2A57-696D-4A3A-836B-2DE340FEB57C} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64256 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {685DCB7F-0FDC-4043-AE16-B3535025B880} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\c1138d96-b79e-4f88-a565-cdb2392cffdd => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {79A8DE8F-ADD1-40DD-99A8-E99C660D3403} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (Pas de fichier)
Task: {7CF303B7-E1DF-40EF-B95E-2899A4893FC5} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\ScheduleEventAction.exe [26384 2022-03-20] (Lenovo -> Lenovo Group Ltd.)
Task: {9421047D-5FBD-4CE9-A6EF-B79EF5F08A2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Pas de fichier)
Task: {94A512E5-72C0-4687-AB7D-D725DF2DBF1C} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {96ED4FB3-1307-4A70-A3E3-14746FC2A285} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\8f76f0f6-3003-460d-9b3d-01f5729c1b74 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {A301BBAE-453E-4B77-AEEB-56227664C451} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {B4AEE6C0-4541-4669-82CB-B77422E6EB41} - System32\Tasks\Hewlett-Packard\HPDeviceCheck => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPDeviceCheck\HPDeviceCheck.exe [304816 2022-05-12] (HP Inc. -> )
Task: {B6D1C8EB-ADE6-4704-BC35-98E149939334} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\ScheduleEventAction.exe [26384 2022-03-20] (Lenovo -> Lenovo Group Ltd.)
Task: {B7EE6B7C-66B4-4933-ACF3-CAF88396E31D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-08] (LENOVO -> Lenovo)
Task: {BED06535-7987-4B9A-9BD3-8B0E1E7D5F2E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2016-02-02] (Google Inc -> Google Inc.)
Task: {C213FEAE-B12B-4534-8DA5-C1B64596DF02} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [684032 2015-12-10] (Lenovo) [Fichier non signé]
Task: {C374C56F-30F8-4F19-B46C-7FFF66A187DD} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\b1b4d81e-c34b-4577-865f-fe6de16481cb => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {C3E80803-8F0A-4DFC-804B-334FFCC1293E} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {CB846C2C-B470-4986-B7A1-E3F7967E2913} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {E4E3A842-CD36-4696-BF49-6644A76C48A1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN27D120WL => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /ForDevice:CN27D120WL (Pas de fichier)
Task: {F4F4F812-6E90-48C8-A725-D0079E5746B7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-05-12] (HP Inc. -> HP Inc.)
Task: {F8ACCFA7-DEC7-4479-ABA5-CDFC11CEC3F6} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\ef26b550-04f7-42b9-a6ea-d756055ad59f => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0fd77c5a-d6cf-43ee-8f6c-6e2be6c21057}: [NameServer] 10.70.0.1
Tcpip\..\Interfaces\{1F91DE15-46D9-4264-BEE1-5DE46D8E2909}: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{4E996048-1980-45B1-9798-9020C7F6EABE}: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{5e48f7d6-eb1e-4f97-a218-4c382161ffa1}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{851df0b8-4d42-4ee3-abbd-402d04227e76}: [DhcpNameServer] 10.40.0.245 203.144.128.194 8.8.8.8
Tcpip\..\Interfaces\{b7d153d9-dc1e-4340-9d31-bdb972fcb121}: [DhcpNameServer] 192.168.1.254

Edge: 
=======
DownloadDir: C:\Users\se\Downloads
Edge Notifications: HKU\S-1-5-21-509422068-2561196116-865794310-1001 -> hxxps://forums.lecrabeinfo.net; hxxps://www.qatarairways.com; hxxps://www.forbes.fr; hxxps://thethaiger.com
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\se\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-03]
Edge Notifications: Default -> hxxps://toutelathailande.fr; hxxps://www.qatarairways.com
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: 58ktsqt7.default
FF ProfilePath: C:\Users\se\AppData\Roaming\Mozilla\Firefox\Profiles\58ktsqt7.default [2022-05-31]
FF NetworkProxy: Mozilla\Firefox\Profiles\58ktsqt7.default -> ftp", "212.83.164.85"
FF Notifications: Mozilla\Firefox\Profiles\58ktsqt7.default -> hxxps://www.vpnvision.com; hxxps://clicanimaux.by.wonderpush.com; hxxps://fr.thaivisa.com; hxxps://forums.lecrabeinfo.net
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\se\AppData\Roaming\Mozilla\Firefox\Profiles\58ktsqt7.default\Extensions\sp@avast.com.xpi [2021-09-16]
FF Extension: (Avast Online Security) - C:\Users\se\AppData\Roaming\Mozilla\Firefox\Profiles\58ktsqt7.default\Extensions\wrc@avast.com.xpi [2021-04-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_101.dll [2018-12-05] (Adobe Systems Incorporated -> )
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_101.dll [2018-12-05] () [Fichier non signé]
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin HKU\S-1-5-21-509422068-2561196116-865794310-1001: SkypePlugin -> C:\Users\se\AppData\Local\SkypePlugin\7.15.0.49\npGatewayNpapi.dll [2016-02-19] (Microsoft Corporation -> Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-509422068-2561196116-865794310-1001: SkypePlugin64 -> C:\Users\se\AppData\Local\SkypePlugin\7.15.0.49\npGatewayNpapi-x64.dll [2016-02-19] (Microsoft Corporation -> Skype Technologies S.A.)

Chrome: 
=======
CHR Profile: C:\Users\se\AppData\Local\Google\Chrome\User Data\Default [2022-05-27]
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Recherche Google) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-03]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-03-24]
CHR Extension: (ExpressVPN : proxy VPN pour une connexion sécurisée) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgddmllnllkalaagkghckoinaemmogpe [2021-12-18]
CHR Extension: (Google Docs hors connexion) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-05-22]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-04-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\se\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-02]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-12-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [437160 2021-12-07] (EXPRSVPN LLC -> ExpressVPN)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [764440 2022-05-12] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [763456 2022-05-12] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [759336 2022-05-12] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [762912 2022-05-12] (HP Inc. -> HP Inc.)
S2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc. -> HP Inc.)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.12.13.0\LenovoVantageService.exe [29968 2022-03-20] (Lenovo -> Lenovo Group Ltd.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8524512 2022-05-28] (Malwarebytes Inc. -> Malwarebytes)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer -> TeamViewer GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ymc; C:\ProgramData\LenovoTransition\Server\x64\ymc.exe [30136 2015-03-16] (LENOVO -> Lenovo)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [103888 2022-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [45640 2021-12-07] (ExprsVPN LLC -> ExpressVPN)
R3 expressvpntun; C:\WINDOWS\System32\drivers\expressvpn-tun.sys [46896 2021-12-07] (Express VPN International Ltd. -> ExpressVPN)
R3 GPIO; C:\WINDOWS\System32\drivers\iaiogpioe.sys [51128 2015-06-24] (WDKTestCert sys_dpebuild,130674149657513416 -> Intel Corporation)
R3 iaioi2c; C:\WINDOWS\System32\drivers\iaioi2ce.sys [83576 2015-06-24] (WDKTestCert sys_dpebuild,130676860727038218 -> Intel Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2022-05-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-05-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [194512 2022-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [74688 2022-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239560 2022-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181992 2022-05-31] (Malwarebytes Inc. -> Malwarebytes)
R1 sbnetsys; C:\WINDOWS\system32\DRIVERS\sbnetsys.sys [44648 2015-04-17] (Mainline Net Holdings Limited -> NT Kernel Resources)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2017-07-11] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [52904 2021-01-18] (ExprsVPN LLC -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-05-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-05-27] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-05-27] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-03 14:49 - 2022-06-03 14:49 - 000000000 ____D C:\Users\se\AppData\LocalLow\IGDump
2022-06-02 13:50 - 2022-06-02 13:50 - 002368000 _____ (Farbar) C:\Users\se\Downloads\Non confirmé 123370.crdownload
2022-06-02 13:36 - 2022-06-02 13:36 - 002368000 _____ (Farbar) C:\Users\se\Downloads\Non confirmé 951343.crdownload
2022-06-02 12:23 - 2022-06-02 12:23 - 000000234 _____ C:\Users\se\Downloads\Search.txt
2022-06-02 11:58 - 2022-06-02 12:10 - 000040639 _____ C:\Users\se\Downloads\Addition.txt
2022-06-02 11:48 - 2022-06-03 14:46 - 000032922 _____ C:\Users\se\Downloads\FRST.txt
2022-06-02 11:46 - 2022-06-03 14:44 - 000000000 ____D C:\FRST
2022-06-02 11:42 - 2022-06-02 11:44 - 002368000 _____ (Farbar) C:\Users\se\Downloads\FRST64 (1).exe
2022-06-02 11:39 - 2022-06-02 11:39 - 002368000 _____ (Farbar) C:\Users\se\Downloads\Non confirmé 41285.crdownload
2022-05-31 18:03 - 2022-05-31 18:03 - 000194512 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2022-05-31 18:03 - 2022-05-31 18:03 - 000074688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2022-05-30 20:54 - 2022-05-31 18:03 - 000181992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2022-05-29 17:13 - 2022-05-29 18:21 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2022-05-29 17:12 - 2022-05-29 21:03 - 000800154 _____ C:\WINDOWS\ntbtlog.txt
2022-05-28 16:07 - 2022-05-28 16:08 - 003253544 _____ (TechPowerUp (www.techpowerup.com)) C:\Users\se\Downloads\MemTest64.exe
2022-05-28 16:06 - 2022-05-28 16:06 - 000000000 ____D C:\WINDOWS\%LOCALAPPDATA%
2022-05-28 00:09 - 2022-05-28 00:09 - 000000000 ____D C:\Users\se\AppData\Local\mbam
2022-05-28 00:07 - 2022-05-28 00:07 - 000002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-05-28 00:07 - 2022-05-28 00:07 - 000002028 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-05-28 00:06 - 2022-05-30 20:53 - 000239560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-05-28 00:06 - 2022-05-29 18:21 - 000223176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-05-28 00:06 - 2022-05-28 00:05 - 000103888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-05-28 00:06 - 2022-05-28 00:04 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-05-28 00:04 - 2022-05-28 00:04 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-05-28 00:04 - 2022-05-28 00:04 - 000000000 ____D C:\Program Files\Malwarebytes
2022-05-28 00:03 - 2022-05-28 00:03 - 002546400 _____ (Malwarebytes) C:\Users\se\Downloads\MBSetup.exe
2022-05-27 22:57 - 2022-05-27 22:57 - 000003201 _____ C:\Users\se\Desktop\ZHPCleaner (R).txt
2022-05-27 22:43 - 2022-05-27 22:43 - 000009811 _____ C:\Users\se\Desktop\ZHPCleaner (S).html
2022-05-27 22:43 - 2022-05-27 22:43 - 000003003 _____ C:\Users\se\Desktop\ZHPCleaner (S).txt
2022-05-27 21:51 - 2022-05-27 21:51 - 000000879 _____ C:\Users\se\Desktop\ZHPCleaner.lnk
2022-05-27 21:50 - 2022-05-27 21:50 - 003297480 _____ (Nicolas Coolman) C:\Users\se\Downloads\ZHPCleaner (1).exe
2022-05-27 21:16 - 2022-05-27 22:57 - 000010118 _____ C:\Users\se\Desktop\ZHPCleaner (R).html
2022-05-27 20:02 - 2022-05-27 20:02 - 003297480 _____ (Nicolas Coolman) C:\Users\se\Downloads\ZHPCleaner.exe
2022-05-27 18:59 - 2022-05-27 18:59 - 000000000 _____ C:\WINDOWS\Minidump\052722-38453-01.dmp
2022-05-27 18:54 - 2022-05-27 18:54 - 000443887 _____ C:\Users\se\Downloads\acquittement.pdf
2022-05-27 16:32 - 2022-05-27 19:14 - 000000000 ____D C:\Users\se\Documents\Nouveau dossier
2022-05-27 11:09 - 2022-05-27 11:09 - 000002709 _____ C:\Users\se\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Barre Edge de Microsoft Edge.lnk
2022-05-25 12:34 - 2022-05-25 12:34 - 000036065 _____ C:\Users\se\Downloads\M2205240193.pdf
2022-05-25 08:37 - 2022-05-25 08:37 - 000104967 _____ C:\Users\se\Downloads\Devis_0175-130-1_SERAVALLI.pdf
2022-05-23 11:17 - 2022-05-23 11:17 - 000845104 _____ C:\Users\se\Downloads\A15-00282.pdf
2022-05-22 09:24 - 2022-05-22 10:10 - 001161244 _____ C:\WINDOWS\Minidump\052222-66171-01.dmp
2022-05-21 20:34 - 2022-05-21 20:35 - 000030365 _____ C:\Users\se\Downloads\Lettre N- 43049477 (1).pdf
2022-05-18 10:45 - 2022-05-18 10:45 - 000030365 _____ C:\Users\se\Downloads\Lettre N- 43049477.pdf
2022-05-18 10:38 - 2022-05-18 10:38 - 000022454 _____ C:\Users\se\Downloads\PJ_1 (1).pdf
2022-05-18 10:34 - 2022-05-18 10:34 - 000273615 _____ C:\Users\se\Downloads\PJ_2.pdf
2022-05-18 10:33 - 2022-05-18 10:33 - 000023813 _____ C:\Users\se\Downloads\PJ_1.pdf
2022-05-13 20:36 - 2022-05-13 20:37 - 000000000 ____D C:\Users\se\Documents\LOREIL (de Chats Libre - Isabelle)
2022-05-13 20:30 - 2022-05-13 20:41 - 000000000 ____D C:\Users\se\Documents\FANFAN et TOMY (de Nicole Amichiens)
2022-05-11 07:37 - 2022-05-11 07:37 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-11 07:34 - 2022-05-11 07:34 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-11 07:33 - 2022-05-11 07:33 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-11 06:43 - 2022-05-11 06:43 - 000000000 ___HD C:\$WinREAgent
2022-05-10 21:47 - 2022-05-22 14:55 - 000000000 ____D C:\Users\se\Documents\IFUS etc IMPOTS sur Revenus 2021 de DC et RM
2022-05-10 17:26 - 2022-05-10 17:27 - 000012072 _____ C:\Users\se\Documents\QUITTANCE Avril 2022 José et Cintia Pasteur.odt

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-03 14:28 - 2016-02-02 19:28 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-03 14:27 - 2020-09-29 02:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-03 14:27 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-02 13:17 - 2016-01-16 18:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-06-02 11:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-02 11:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-02 11:44 - 2020-06-20 01:03 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-02 11:44 - 2020-06-20 01:03 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-02 11:34 - 2018-07-11 14:25 - 000000000 ____D C:\ProgramData\Packages
2022-06-02 11:08 - 2015-12-25 18:31 - 000000000 __SHD C:\Users\se\IntelGraphicsProfiles
2022-06-02 11:07 - 2020-09-29 02:09 - 000000000 ____D C:\Users\se
2022-06-02 11:06 - 2020-09-29 02:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-02 11:06 - 2020-09-29 02:00 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-02 11:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-05-31 18:39 - 2018-03-26 07:24 - 000000000 ____D C:\Users\se\AppData\Local\AVAST Software
2022-05-31 18:39 - 2016-01-28 17:02 - 000000000 ____D C:\ProgramData\AVAST Software
2022-05-31 17:59 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-05-31 17:55 - 2020-09-29 02:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2022-05-30 21:43 - 2018-10-15 22:24 - 000000000 ____D C:\Users\se\AppData\Local\D3DSCache
2022-05-30 21:08 - 2021-12-11 19:58 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-509422068-2561196116-865794310-1001
2022-05-30 21:08 - 2020-09-29 02:51 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-509422068-2561196116-865794310-1001
2022-05-30 21:08 - 2020-09-29 02:09 - 000002415 _____ C:\Users\se\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-05-29 17:34 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-05-29 14:07 - 2018-07-06 10:44 - 000000000 ____D C:\Users\se\AppData\Local\CrashDumps
2022-05-28 00:09 - 2016-11-23 19:49 - 000000000 ____D C:\Users\se\AppData\LocalLow\Mozilla
2022-05-28 00:08 - 2019-02-15 10:03 - 000000000 ____D C:\ProgramData\Mozilla
2022-05-28 00:07 - 2021-09-16 18:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2022-05-28 00:06 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-27 23:56 - 2020-10-07 09:32 - 000000000 ____D C:\WINDOWS\Minidump
2022-05-27 23:56 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-05-27 22:57 - 2018-08-08 15:43 - 000000000 ____D C:\Users\se\AppData\Roaming\ZHP
2022-05-27 18:59 - 2021-04-21 16:48 - 875133566 _____ C:\WINDOWS\MEMORY.DMP
2022-05-27 11:57 - 2018-06-10 14:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-05-26 22:40 - 2020-09-29 02:51 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-05-26 22:40 - 2020-09-29 02:51 - 000003518 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-05-26 22:40 - 2020-09-29 02:51 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-05-26 22:40 - 2020-09-29 02:51 - 000003394 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-05-26 22:40 - 2020-09-29 02:51 - 000003294 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-05-23 01:20 - 2020-09-29 02:25 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-23 01:20 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-05-23 01:20 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-05-22 21:10 - 2021-04-10 16:48 - 000000000 ____D C:\Users\se\Documents\nvx THAILANDE 2021 A Vérifier
2022-05-22 16:20 - 2019-12-15 15:33 - 000000000 ____D C:\Users\se\Documents\NVX SCANS (de Chris) De arrêt maladie du 5.10.16  au 9.10.20 oreille Lilo)
2022-05-20 17:53 - 2016-01-18 19:18 - 000000000 ____D C:\Program Files\HP
2022-05-12 23:05 - 2019-12-15 18:39 - 000000000 ____D C:\Users\se\Documents\DOC POUR THAILANDE 2020 (voir aussi anciens scans et doc thail sur clé 7 si besoin)
2022-05-11 23:57 - 2020-09-29 02:00 - 000290912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-11 23:52 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-11 07:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-11 05:52 - 2015-12-25 13:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-11 05:35 - 2015-12-25 13:11 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-10 17:37 - 2021-04-29 13:24 - 000012082 _____ C:\Users\se\Documents\QUITTANCE Mai 2022 José et Cintia Pasteur.odt

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================