Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-12-2022 Exécuté par triav (administrateur) sur DESKTOP-45P4KKV (21-12-2022 19:09:54) Exécuté depuis C:\Users\triav\Downloads Profils chargés: triav Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.2364 (X64) Langue: Français (France) Navigateur par défaut: Brave Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler.exe (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64.exe (C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8> (C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (C:\Program Files\LGHUB\lghub.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe (C:\Program Files\LGHUB\lghub.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3> (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCopyAccelerator.exe (explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <31> (explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <3> (explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe (Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe (services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe (services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2> (services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe (services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3> (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_ee20464bb4ac57f4\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\triav\AppData\Local\Microsoft\OneDrive\22.238.1114.0002\FileCoAuth.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21238.0_x64__8wekyb3d8bbwe\HxOutlook.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21238.0_x64__8wekyb3d8bbwe\HxTsr.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe\GameBar.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.822.11281.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22102.229.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.2300_none_7e14edbc7c88b7d5\TiWorker.exe (svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe (svchost.exe ->) (Tweaking LLC -> Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2021-06-10] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [291080 2022-12-14] (Intel Corporation -> Intel) HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKU\S-1-5-21-3217603294-4090053947-2647101653-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4246376 2022-12-15] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-3217603294-4090053947-2647101653-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [152025856 2022-12-18] (Logitech Inc -> Logitech, Inc.) HKU\S-1-5-21-3217603294-4090053947-2647101653-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1090168 2022-12-09] (Blizzard Entertainment, Inc. -> Blizzard Entertainment) HKU\S-1-5-21-3217603294-4090053947-2647101653-1001\...\MountPoints2: {ddb95381-f897-11e9-b06c-806e6f6e6963} - "K:\setup.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\108.1.46.144\Installer\chrmstp.exe [2022-12-18] (Brave Software, Inc. -> Brave Software, Inc.) GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {1B11DE54-0A61-4660-9635-5AD0AF611B15} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [165120 2022-06-09] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {23C61F74-8A7F-4F36-8A90-81D95C487F9C} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {24893F4C-F2A5-47B4-A157-23AF0C45D5D3} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {26B1A4C7-17A0-4896-9F20-72CF719F9A79} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier) Task: {2F4C9F6A-A861-4459-A1D1-EF62DD59098B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4548AA6F-F4DF-492A-B61F-D989D40AD331} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {4AC3B8FB-256D-498C-BA38-550ADDA283FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4BECD095-B005-4BD4-9602-63D9CA2FCCC0} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {7D0F87C3-9E3E-478F-B454-D72CCB6D41F1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8B4D2219-2B50-47F2-888B-2C7F5BE1DCE4} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3464168 2022-11-09] (Intel Corporation -> Intel Corporation) Task: {953C9072-F5DF-485F-81E7-D17CCC3CB077} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-09-30] (Tweaking LLC -> Tweaking.com) Task: {9801C29D-31DB-46CC-93C8-1CF64AB27FFD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {AD913165-A482-4A5B-9A64-7DDB0E94F717} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2022-10-17] (Nvidia Corporation -> NVIDIA Corporation) Task: {BE0BAD85-0766-443D-89E2-2965B4254930} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908856 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {D926DDFC-DDA1-4D2F-9A85-B034D8AD5A6F} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs" Task: {DA0A6770-2545-4FC3-A9E6-083920A2ADF8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {E8F22B8D-97C1-4023-BAE8-E468E9D61E8E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908856 2022-10-13] (Nvidia Corporation -> NVIDIA Corporation) Task: {EADDC47F-C306-4FE5-A217-A855E78004E1} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [165120 2022-06-09] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {ED7223E0-ACC5-4143-80C0-64C763CB3721} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3464168 2022-11-09] (Intel Corporation -> Intel Corporation) Task: {FD4A05B5-EE97-459B-891B-D57B02CC5981} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-08-30] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Winsock: Catalog9 17 %windir%\system32\vsocklib.dll => Pas de fichier Winsock: Catalog9 18 %windir%\system32\vsocklib.dll => Pas de fichier Winsock: Catalog9-x64 17 %windir%\system32\vsocklib.dll => Pas de fichier Winsock: Catalog9-x64 18 %windir%\system32\vsocklib.dll => Pas de fichier Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{a8fd1440-bd88-47e2-8330-08118ce0360c}: [DhcpNameServer] 192.168.178.1 Edge: ======= Edge Profile: C:\Users\triav\AppData\Local\Microsoft\Edge\User Data\Default [2022-12-18] Brave: ======= BRA Profile: C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-12-21] BRA Extension: (Ultrawidify) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\dndehlekllfkaijdlokmmicgnlanfjbi [2022-12-04] BRA Extension: (Binance Wallet) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\fhbohimaelbohpjbbldcngcnapndodjp [2022-09-02] BRA Extension: (MetaMask) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-12-20] BRA Extension: (Brave Local Data Files Updater) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-12-21] BRA Extension: (Brave NTP background images) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-08-12] BRA Extension: (Wallet Data Files Updater) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-12-09] BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-11-30] BRA Extension: (Brave NTP sponsored images) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\ejhkplcmfikggnbclnmlknehecbgkpoc [2022-12-21] BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2022-11-30] BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2022-12-21] BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2022-12-02] BRA Extension: (Brave Ads Resources) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\gnamhdlealpfbanappoephfdjeoehggd [2022-12-09] BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2022-06-09] BRA Extension: (Brave Ads Resources) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\ijgkfgmfiinppefbonemjidmkhgbonei [2022-09-11] BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2022-12-21] BRA Extension: (Brave SpeedReader Updater) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-06-09] BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2022-12-18] BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\triav\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-12-21] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [165120 2022-06-09] (Brave Software, Inc. -> BraveSoftware Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [165120 2022-06-09] (Brave Software, Inc. -> BraveSoftware Inc.) R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [42248 2022-12-14] (Intel Corporation -> Intel) R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [207624 2022-12-14] (Intel Corporation -> Intel) S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [9981544 2022-12-14] (Electronic Arts, Inc. -> Electronic Arts) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2022-11-06] (EasyAntiCheat Oy -> Epic Games, Inc) R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10207488 2022-12-18] (Logitech Inc -> Logitech, Inc.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224184 2022-12-14] (Microsoft Windows Publisher -> Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe [3191264 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe [133592 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation) S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\108.1.46.144\elevation_service.exe" [X] S3 Browser; %SystemRoot%\System32\browser.dll [X] R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_ee20464bb4ac57f4\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_ee20464bb4ac57f4\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287232 2022-06-09] (Microsoft Corporation) [Fichier non signé] S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com) S3 LGJoyHidFilter; C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys [57368 2018-08-08] (Logitech Inc -> Logitech Inc.) S3 LGJoyHidLo; C:\WINDOWS\system32\drivers\LGJoyHidLo.sys [47256 2018-08-08] (Logitech Inc -> Logitech Inc.) S3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-08-08] (Logitech Inc -> Logitech Inc.) S3 LGSHidFilt; C:\WINDOWS\System32\drivers\LGSHidFilt.Sys [64280 2018-08-08] (Logitech -> Logitech Inc.) S3 LGSUsbFilt; C:\WINDOWS\System32\drivers\LGSUsbFilt.Sys [41752 2018-08-08] (Logitech -> Logitech Inc.) R3 logi_audio_surround; C:\WINDOWS\system32\drivers\logi_audio_surround.sys [52536 2022-12-18] (Logitech Inc -> Logitech) R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2022-10-04] (Logitech Inc -> Logitech) R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-10-04] (Logitech Inc -> Logitech) R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2022-10-04] (Logitech Inc -> Logitech) R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation) S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [65144 2021-10-08] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated) S3 tmhidusb; C:\WINDOWS\System32\drivers\tmhidusb.sys [340488 2018-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster) S3 tmResetMin; C:\WINDOWS\System32\Drivers\tmResetMin.sys [44552 2018-12-18] (Microsoft Windows Hardware Compatibility Publisher -> © Guillemot R&D, 2017. All rights reserved.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2022-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473376 2022-12-09] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99616 2022-12-09] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2022-12-21 19:09 - 2022-12-21 19:10 - 000022755 _____ C:\Users\triav\Downloads\FRST.txt 2022-12-21 19:07 - 2022-12-21 19:10 - 000000000 ____D C:\FRST 2022-12-21 19:07 - 2022-12-21 19:07 - 002375680 _____ (Farbar) C:\Users\triav\Downloads\FRST64-2.1.exe 2022-12-21 19:07 - 2022-12-21 19:07 - 000000000 ____D C:\Users\triav\Downloads\FRST-OlderVersion 2022-12-18 19:01 - 2022-12-18 19:01 - 000000000 ____D C:\Users\triav\AppData\Roaming\Frontier Developments 2022-12-18 19:01 - 2022-12-18 19:01 - 000000000 ____D C:\Users\triav\AppData\Local\Frontier Developments 2022-12-18 18:59 - 2022-12-20 19:03 - 000000000 ____D C:\Users\triav\AppData\Local\Frontier_Developments 2022-12-18 15:58 - 2022-12-18 15:58 - 000001510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk 2022-12-18 15:58 - 2022-12-18 15:58 - 000000000 ____D C:\Program Files (x86)\Intel 2022-12-18 15:30 - 2022-12-18 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi 2022-12-18 15:30 - 2022-12-18 15:30 - 000000000 ____D C:\Program Files\LGHUB 2022-12-18 15:29 - 2022-12-18 15:29 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2022-12-18 15:27 - 2022-12-18 15:27 - 001719368 _____ (Logitech) C:\WINDOWS\system32\logi_audio_speaker_render_apo.dll 2022-12-14 14:59 - 2022-12-14 14:59 - 000297472 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll 2022-12-14 14:59 - 2022-12-14 14:59 - 000012367 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2022-12-14 14:55 - 2022-12-14 14:55 - 000000000 ___HD C:\$WinREAgent 2022-12-04 14:14 - 2022-12-04 14:15 - 000000000 ____D C:\Users\triav\AppData\Local\STAR WARS Battlefront II 2022-12-02 22:42 - 2022-12-02 22:42 - 000466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2022-12-02 22:42 - 2022-12-02 22:42 - 000444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll 2022-12-02 22:42 - 2022-12-02 22:42 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll 2022-12-02 22:42 - 2022-12-02 22:42 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll 2022-12-02 22:42 - 2022-12-02 22:42 - 000000000 ____D C:\Program Files (x86)\OpenAL 2022-12-01 20:20 - 2022-11-11 18:08 - 000047240 _____ C:\WINDOWS\system32\Drivers\semav6msr64.sys 2022-12-01 20:19 - 2022-12-01 20:19 - 000003670 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK 2022-11-22 21:21 - 2022-11-22 21:21 - 000000000 ____D C:\Program Files (x86)\Windows Kits 2022-11-22 21:21 - 2022-11-22 21:21 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2022-12-21 19:09 - 2022-06-11 13:05 - 000000000 ____D C:\Program Files (x86)\Steam 2022-12-21 19:04 - 2022-06-09 08:43 - 001770970 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2022-12-21 19:04 - 2019-12-07 15:50 - 000791718 _____ C:\WINDOWS\system32\perfh00C.dat 2022-12-21 19:04 - 2019-12-07 15:50 - 000149884 _____ C:\WINDOWS\system32\perfc00C.dat 2022-12-21 19:04 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2022-12-21 18:59 - 2022-11-01 12:23 - 000000000 ____D C:\Users\triav\AppData\Local\Battle.net 2022-12-21 18:58 - 2021-06-13 09:51 - 000000000 ____D C:\Users\triav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2022-12-21 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2022-12-21 18:56 - 2022-06-09 08:34 - 000000000 ____D C:\ProgramData\NVIDIA 2022-12-21 18:54 - 2022-08-27 11:00 - 000000000 ____D C:\Users\triav\AppData\Roaming\LGHUB 2022-12-21 18:54 - 2022-08-27 11:00 - 000000000 ____D C:\Users\triav\AppData\Local\LGHUB 2022-12-21 18:54 - 2019-10-27 09:34 - 000000000 ___RD C:\Users\triav\OneDrive 2022-12-20 20:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2022-12-20 12:44 - 2022-06-09 08:36 - 000000000 ____D C:\Users\triav 2022-12-20 11:09 - 2022-06-09 08:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2022-12-20 11:09 - 2022-06-09 08:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2022-12-20 11:09 - 2020-08-23 10:32 - 000008192 ___SH C:\DumpStack.log.tmp 2022-12-18 17:13 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2022-12-18 15:58 - 2022-06-09 14:01 - 000000000 ____D C:\ProgramData\Package Cache 2022-12-18 15:32 - 2022-06-09 13:57 - 000002362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk 2022-12-18 15:32 - 2020-08-26 20:51 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2022-12-18 15:27 - 2022-06-09 08:33 - 000257912 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2022-12-18 15:27 - 2022-03-22 17:16 - 000052536 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_audio_surround.sys 2022-12-18 15:27 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2022-12-18 15:26 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemApps 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2022-12-18 15:26 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System 2022-12-14 15:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2022-12-14 14:59 - 2022-06-09 08:36 - 003014656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2022-12-14 14:53 - 2022-06-11 09:20 - 000000000 ____D C:\WINDOWS\system32\MRT 2022-12-14 14:52 - 2022-06-11 09:20 - 148633544 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2022-12-14 11:21 - 2022-10-16 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA 2022-12-14 11:18 - 2022-11-16 20:46 - 000000000 ____D C:\Users\triav\AppData\Roaming\.minecraft 2022-12-13 12:59 - 2022-06-09 09:22 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3217603294-4090053947-2647101653-1001 2022-12-13 12:59 - 2022-06-09 09:22 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3217603294-4090053947-2647101653-1001 2022-12-13 12:59 - 2022-06-09 08:36 - 000002421 _____ C:\Users\triav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2022-12-10 10:12 - 2022-11-01 12:23 - 000000000 ____D C:\Program Files (x86)\Battle.net 2022-12-09 20:38 - 2022-06-09 09:22 - 000000000 ____D C:\Users\triav\AppData\Local\D3DSCache 2022-12-09 18:35 - 2022-10-16 15:53 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller 2022-12-09 18:35 - 2022-10-16 15:36 - 000000000 ____D C:\Program Files\EA Games 2022-12-09 18:12 - 2022-06-09 08:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2022-12-03 09:49 - 2022-10-16 15:57 - 000000000 ____D C:\ProgramData\Origin 2022-12-03 09:49 - 2021-02-21 18:38 - 000000000 ____D C:\Users\triav\OneDrive\Documents\BioWare 2022-12-02 16:44 - 2022-06-18 14:08 - 000003834 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2022-12-01 20:19 - 2022-06-18 14:02 - 000003762 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 2022-12-01 20:19 - 2022-06-18 14:02 - 000003528 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon 2022-11-28 21:21 - 2022-06-09 17:30 - 000000000 ____D C:\Users\triav\AppData\Local\FlightSimulator 2022-11-26 09:40 - 2022-06-09 17:58 - 000000000 ____D C:\Users\triav\AppData\Local\CrashDumps 2022-11-22 21:21 - 2022-10-20 18:28 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe 2022-11-22 21:21 - 2022-10-20 18:28 - 000067064 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe 2022-11-22 21:21 - 2022-06-09 14:55 - 002815440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll 2022-11-22 21:21 - 2022-06-09 14:55 - 000460240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll 2022-11-22 21:21 - 2022-06-09 14:55 - 000243192 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll 2022-11-22 21:21 - 2022-06-09 14:55 - 000198136 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll 2022-11-22 21:21 - 2022-06-09 14:55 - 000165368 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll 2022-11-22 21:21 - 2022-06-09 14:55 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll ==================== Fichiers à la racine de certains dossiers ======== 2022-08-31 09:25 - 2022-08-31 09:25 - 000000016 _____ () C:\Users\triav\AppData\Roaming\obs-virtualcam.txt ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================