Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 09-07-2022
Exécuté par isabe (administrateur) sur LAPTOP-35TMLQ46 (HP HP Notebook) (09-07-2022 22:30:14)
Exécuté depuis C:\Users\isabe\Downloads
Profils chargés: isabe
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1766 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(explorer.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(services.exe ->) () [Fichier non signé] C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (Hewlett-Packard Company -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc.) [Fichier non signé] C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8843784 2016-08-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6627720 2016-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [231640 2016-05-13] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [705784 2016-06-20] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324488 2016-08-02] (HP Inc. -> HP)
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {2bd664cd-6ee1-11e7-945f-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {2bd666ef-6ee1-11e7-945f-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {675ff3bb-aa7e-11eb-9459-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {675ff48c-aa7e-11eb-9459-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {675ffd24-aa7e-11eb-9459-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {675ffd67-aa7e-11eb-9459-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {8d63991d-b7a1-11ea-94eb-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-249246401-3182239738-1866317837-1001\...\MountPoints2: {ebdcee38-c051-11eb-945c-5800e383b954} - "F:\HiSuiteDownLoader.exe" 
HKLM\...\Print\Monitors\HP AF11 Status Monitor: C:\WINDOWS\system32\hpinkstsAF11LM.dll [331664 2012-06-12] (Hewlett Packard -> Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-09-24]
ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitchLC.vbs () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-11-24]
ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{B90CB0DE-2E60-41C4-9857-466EB98192BF}\HPlogo_blue.ico () [Fichier non signé]

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0730B4A3-2D4D-4427-A0E4-054B78A76257} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1014C7BB-2C07-4DED-A509-E4A3F1FFFBD2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {23F0C8F1-4D20-4EE7-8827-747711F1829F} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Pas de fichier <==== ATTENTION
Task: {291AFF2E-9691-4795-8473-FF51EBCB6D42} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2D7C7BB8-FE2D-4F6C-AFCB-9D255A86FED2} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [201080 2016-07-04] (Hewlett-Packard Company -> HP Inc.)
Task: {3CDF0E4C-68C8-4BCB-925B-93803767E12B} - \Microsoft\Windows\Setup\SetupCleanupTask -> Pas de fichier <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> Pas de fichier <==== ATTENTION
Task: {46F9EB14-20BF-4D17-BF82-9E41483AFB3A} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Pas de fichier <==== ATTENTION
Task: {4B6C6BE1-F4A8-441C-A796-3067EE724F4D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {53D7A34B-AE76-42B3-86DC-F17DAB5B8A45} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116656 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {56079061-40EF-4418-862A-25826374942E} - \HPJumpStartProvider -> Pas de fichier <==== ATTENTION
Task: {635A185A-88AD-4B41-9344-B07C284A75E9} - \Microsoft\Windows\WindowsUpdate\sih -> Pas de fichier <==== ATTENTION
Task: {63760945-30EE-4DBD-93CB-A86427B2FBEB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [621960 2016-07-04] (Hewlett-Packard Company -> HP Inc.)
Task: {63AAB8F1-65DC-4A0F-BECF-7F3360C3FD67} - \Intel PTT EK Recertification -> Pas de fichier <==== ATTENTION
Task: {70EA940A-ECAB-4512-855E-EDC11B43C9D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {763E2870-8A90-4BF9-92F3-8CEAAF9EA439} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116656 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {776E96C7-C12E-40FB-8E2F-A98B231753AA} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Pas de fichier <==== ATTENTION
Task: {83BEEF29-66BF-472B-867E-179B1379A99C} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Pas de fichier <==== ATTENTION
Task: {86A6611C-E26B-4055-A728-DEFEA627A832} - System32\Tasks\HPCeeScheduleForisabe => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392 2016-05-12] (Hewlett-Packard Company -> HP Development Company, L.P.)
Task: {8BF0E30B-CED7-44DE-8030-BA2652C13B9F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {93BCA715-4DF2-4C17-9600-BB648A67FB88} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> Pas de fichier <==== ATTENTION
Task: {99B0BFBC-2C1B-4BCF-B601-1D784CAED059} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {B055E77D-B6B7-4B85-AB1A-D3E73C52E79B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [106376 2016-07-04] (Hewlett-Packard Company -> HP Inc.)
Task: {B8CD811E-521F-4701-B013-AB8D971F549A} - \HPEA3JOBS -> Pas de fichier <==== ATTENTION
Task: {C3CC342C-D899-4628-B2F7-D0493B10F465} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Pas de fichier <==== ATTENTION
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> Pas de fichier <==== ATTENTION
Task: {CA6121A6-93F1-4B12-A070-10FA0554B44B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378880 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD19BC8A-E9FE-49ED-92A5-0E1194F69F00} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> Pas de fichier <==== ATTENTION
Task: {D394BE25-2E16-45D4-AAB2-3E8861A09351} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Pas de fichier <==== ATTENTION
Task: {D63AAA9F-B1B1-4EE8-B8E4-06DFD401CEA0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378880 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3BB91B5-F554-4E76-BC72-B33379BEC068} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4186EDE-7A38-42B8-89AC-8547B60B8C14} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1151880 2016-07-04] (Hewlett-Packard Company -> HP Inc.)
Task: {ECA118A1-9A09-45FD-96EA-E160D5686F28} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [715208 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {EEA11AE2-2E36-401A-85A1-FBB532C73088} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> Pas de fichier <==== ATTENTION
Task: {F200B6AE-7AD3-4DF7-B3EB-F1356CA5D011} - \Microsoft\Windows\UpdateOrchestrator\Reboot -> Pas de fichier <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\HPCeeScheduleForisabe.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{01daff4c-a253-460b-a0ee-93d64e37a63b}: [DhcpNameServer] 172.168.0.7
Tcpip\..\Interfaces\{a42190b5-02fd-4f79-8d14-f7166621ebbc}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\isabe\AppData\Local\Microsoft\Edge\User Data\Default [2022-07-09]

FireFox:
========
FF DefaultProfile: m5v3nkuo.default
FF ProfilePath: C:\Users\isabe\AppData\Roaming\Mozilla\Firefox\Profiles\m5v3nkuo.default [2021-03-05]
FF ProfilePath: C:\Users\isabe\AppData\Roaming\Mozilla\Firefox\Profiles\ay3rrt3s.default-release [2022-07-09]
FF Notifications: Mozilla\Firefox\Profiles\ay3rrt3s.default-release -> hxxps://www.fnac.com; hxxps://www.ducatillon.com
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2016-05-23] (WildTangent Inc -> )

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S2 0185451657049899mcinstcleanup; C:\ProgramData\McInstTemp0185451657049899\mcinst.exe [864720 2021-01-14] (McAfee, LLC -> McAfee, LLC)
R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-07-27] () [Fichier non signé]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [125656 2016-05-13] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111264 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350064 2016-05-23] (WildTangent Inc -> WildTangent)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [894976 2016-08-04] (HP Inc.) [Fichier non signé]
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [461848 2016-08-05] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (Hewlett-Packard Company -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [631800 2016-06-20] (HP Inc. -> HP Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. -> CyberLink)
S2 Support.com Firebet Rang; C:\Program Files (x86)\supportdotcom\rang\ssrangsv.exe [3194928 2022-04-26] (Support.com, Inc. -> Support.com, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe" [X]
S2 mfemms; "C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe" [X]
S3 mfevtp; pas de ImagePath

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2020-09-11] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2020-12-05] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2020-12-05] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
S0 cfwids; system32\drivers\cfwids.sys [X]
R0 mfeaack; system32\drivers\mfeaack.sys [X]
R0 mfeavfk; system32\drivers\mfeavfk.sys [X]
S0 mfeelamk; system32\drivers\mfeelamk.sys [X]
S0 mfefirek; system32\drivers\mfefirek.sys [X]
R0 mfehidk; system32\drivers\mfehidk.sys [X]
R0 mfeplk; system32\drivers\mfeplk.sys [X]
R0 mfewfpk; system32\drivers\mfewfpk.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-07-09 22:30 - 2022-07-09 22:34 - 000022951 _____ C:\Users\isabe\Downloads\FRST.txt
2022-07-09 22:29 - 2022-07-09 22:32 - 000000000 ____D C:\FRST
2022-07-09 22:28 - 2022-07-09 22:28 - 002369024 _____ (Farbar) C:\Users\isabe\Downloads\FRST64.exe
2022-07-08 23:19 - 2021-10-08 11:00 - 000167544 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2022-07-08 23:18 - 2021-10-08 11:00 - 000160376 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2022-07-07 09:42 - 2022-07-07 09:42 - 000000000 ____D C:\WINDOWS\Panther
2022-07-06 20:38 - 2022-07-06 20:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-07-05 22:13 - 2022-07-05 23:01 - 000000000 ____D C:\Users\isabe\AppData\Roaming\ZHP
2022-07-05 22:13 - 2022-07-05 22:13 - 000000000 ____D C:\Users\isabe\AppData\Local\ZHP
2022-07-05 21:38 - 2022-07-05 21:38 - 000000000 ____D C:\Users\isabe\AppData\Local\CrashDumps
2022-07-05 21:38 - 2022-07-05 21:38 - 000000000 ____D C:\ProgramData\McInstTemp0185451657049899
2022-07-05 16:43 - 2022-07-05 16:43 - 000000000 ____D C:\Users\isabe\AppData\Local\mbam
2022-07-05 16:37 - 2022-07-05 21:26 - 000000000 ____D C:\Program Files\Malwarebytes
2022-07-05 16:19 - 2022-07-05 16:19 - 000145788 _____ C:\Users\isabe\Documents\assistance technique.pdf
2022-07-05 16:09 - 2022-07-05 16:09 - 000000017 _____ C:\Users\isabe\AppData\Local\resmon.resmoncfg
2022-07-05 15:37 - 2022-07-05 15:37 - 000000000 ____D C:\Program Files (x86)\supportdotcom
2022-06-28 21:34 - 2022-06-28 21:34 - 000085034 _____ C:\Users\isabe\Desktop\MOYET Isabelle.pdf
2022-06-27 09:11 - 2022-06-27 09:11 - 000026277 _____ C:\Users\isabe\Documents\Expedition-63965118.pdf
2022-06-26 10:27 - 2022-06-26 10:27 - 000244562 _____ C:\Users\isabe\Downloads\Relance indemnisation CNP.pdf
2022-06-26 10:27 - 2022-06-26 10:27 - 000027000 _____ C:\Users\isabe\Downloads\Relevé de situation CNP.pdf
2022-06-26 10:17 - 2022-06-26 10:17 - 000244562 _____ C:\Users\isabe\Downloads\Document.pdf
2022-06-26 10:17 - 2022-06-26 10:17 - 000244562 _____ C:\Users\isabe\Documents\Relance indemnisation CNP.pdf
2022-06-26 10:09 - 2022-06-26 10:09 - 000027000 _____ C:\Users\isabe\Documents\Relevé de situation CNP.pdf
2022-06-20 18:44 - 2022-06-20 18:44 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-20 18:43 - 2022-06-20 18:43 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-20 18:42 - 2022-06-20 18:42 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-20 18:41 - 2022-06-20 18:41 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-20 18:41 - 2022-06-20 18:41 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-20 17:45 - 2022-06-20 17:45 - 000000000 ___HD C:\$WinREAgent
2022-06-10 10:48 - 2022-06-10 10:48 - 000000000 ____H C:\Users\isabe\BITC82E.tmp
2022-06-10 09:46 - 2022-06-10 09:46 - 000092733 _____ C:\Users\isabe\Downloads\ordo moyet.pdf
2022-06-09 09:50 - 2022-06-09 09:50 - 000029870 _____ C:\Users\isabe\Downloads\12890796008(3).pdf
2022-06-09 09:50 - 2022-06-09 09:50 - 000029870 _____ C:\Users\isabe\Downloads\12890796008(2).pdf
2022-06-09 09:49 - 2022-06-09 09:49 - 000029870 _____ C:\Users\isabe\Downloads\12890796008(1).pdf
2022-06-09 09:44 - 2022-06-09 09:44 - 000029870 _____ C:\Users\isabe\Downloads\12890796008.pdf

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-07-09 22:36 - 2021-03-05 15:56 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-09 22:36 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-07-09 22:26 - 2022-02-11 09:26 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-07-09 22:26 - 2021-02-05 21:38 - 000000000 ____D C:\Users\isabe\AppData\LocalLow\Mozilla
2022-07-09 22:25 - 2021-03-05 15:56 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-07-09 22:23 - 2021-03-05 16:42 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2022-07-09 22:23 - 2017-03-14 21:08 - 000000000 __SHD C:\Users\isabe\IntelGraphicsProfiles
2022-07-09 13:24 - 2016-09-24 07:30 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-07-08 23:20 - 2021-03-05 15:53 - 000000000 ____D C:\WINDOWS\INF
2022-07-08 18:49 - 2021-03-05 17:32 - 001841124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-07-08 18:49 - 2021-03-05 16:01 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-07-08 18:49 - 2021-03-05 16:01 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-07-08 18:46 - 2021-03-05 16:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-07-08 09:16 - 2021-03-05 16:53 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-07-07 09:43 - 2021-10-10 16:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-07-07 09:42 - 2021-03-05 20:40 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-07-05 23:46 - 2021-03-05 15:56 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-07-05 22:23 - 2021-03-05 17:11 - 000000000 ____D C:\Users\defaultuser0
2022-07-05 22:12 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\registration
2022-07-05 21:41 - 2021-03-05 15:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-07-05 21:40 - 2016-11-24 15:04 - 000000000 ____D C:\ProgramData\mcafee
2022-07-05 21:39 - 2018-01-25 18:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2022-07-05 21:38 - 2016-11-24 15:04 - 000000000 ____D C:\Program Files\Common Files\McAfee
2022-07-05 21:38 - 2016-11-24 15:01 - 000000000 ____D C:\Users\Administrateur
2022-07-05 21:33 - 2017-03-14 21:12 - 000000000 ___RD C:\Users\isabe\OneDrive
2022-07-05 21:27 - 2021-03-05 17:11 - 000000000 ____D C:\Users\isabe
2022-07-05 21:26 - 2021-03-05 16:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-07-05 21:26 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\ServiceState
2022-07-05 21:26 - 2020-08-21 20:06 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-30 22:52 - 2021-03-05 20:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-28 17:02 - 2021-03-05 18:41 - 000000000 ____D C:\Users\isabe\AppData\Local\Packages
2022-06-28 12:04 - 2021-12-12 10:09 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-249246401-3182239738-1866317837-1001
2022-06-28 12:04 - 2021-03-05 18:49 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-249246401-3182239738-1866317837-1001
2022-06-28 12:04 - 2021-03-05 17:11 - 000002424 _____ C:\Users\isabe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-26 14:43 - 2021-03-05 15:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-06-25 13:50 - 2021-03-05 18:43 - 000000000 ____D C:\ProgramData\Packages
2022-06-23 09:18 - 2021-03-05 16:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-20 23:24 - 2016-11-24 15:04 - 000000000 ____D C:\Program Files (x86)\McAfee
2022-06-20 23:23 - 2022-02-01 18:36 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForisabe.job
2022-06-20 23:23 - 2021-03-05 16:26 - 000258768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-20 23:21 - 2021-03-05 16:44 - 000000000 ____D C:\ProgramData\Realtek
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-20 23:19 - 2021-03-05 15:56 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-20 23:19 - 2021-03-05 15:37 - 000000000 ____D C:\WINDOWS\servicing
2022-06-20 18:58 - 2021-03-05 15:45 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-20 18:40 - 2021-03-05 16:41 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-20 17:26 - 2021-03-08 00:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-20 17:19 - 2021-03-08 00:14 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-11 17:10 - 2021-03-05 16:53 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-11 17:10 - 2021-03-05 16:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-10 10:48 - 2022-02-01 18:36 - 000003256 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForisabe

==================== Fichiers à la racine de certains dossiers ========

2021-03-05 18:41 - 2022-07-09 22:25 - 002737843 _____ () C:\Users\isabe\AppData\Local\BTServer.log
2021-08-21 22:06 - 2021-08-21 22:06 - 000005632 _____ () C:\Users\isabe\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-07-05 16:09 - 2022-07-05 16:09 - 000000017 _____ () C:\Users\isabe\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================