Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 09-02-2023 01 Exécuté par moniq (administrateur) sur LAPTOP-USPQJ8VS (ASUSTeK COMPUTER INC. VivoBook S14 X430UA) (13-02-2023 19:44:42) Exécuté depuis C:\Users\moniq\OneDrive\Desktop Profils chargés: moniq Plate-forme: Microsoft Windows 11 Famille Version 22H2 22621.1105 (X64) Langue: Français (France) Navigateur par défaut: FF Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\ATKOSD2.exe (C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.3000.10.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\109.0.1518.78\msedgewebview2.exe <6> (DriverStore\FileRepository\asusnumpadfilter.inf_amd64_936e1b5b4303abdf\AsusNumPadService.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asusnumpadfilter.inf_amd64_936e1b5b4303abdf\AsusInputlocaleMonitor.exe (DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe (DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsLdrSrv64.exe ->) (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsMonStartupTask64.exe (DriverStore\FileRepository\cui_dch.inf_amd64_d2a0453c62b3b51a\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_d2a0453c62b3b51a\igfxEM.exe (explorer.exe ->) ((c)2022 Datacolor) [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7> (explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE (explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIWCE.EXE <2> (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2210.5.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <11> (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkRemote\AsusLinkRemote.exe (services.exe ->) (ASUSTek Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS GiftBox Service\GiftBoxService.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asusnumpadfilter.inf_amd64_936e1b5b4303abdf\AsusNumPadService.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\AsusAppService\AsusAppService.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkNear\AsusLinkNear.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\AsusOptimization\AsusOptimization.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSoftwareManager\AsusSoftwareManager.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSwitch\AsusSwitch.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemAnalysis\AsusSystemAnalysis.exe (services.exe ->) (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsHidSrv64.exe (services.exe ->) (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsLdrSrv64.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\icesoundapo64.inf_amd64_a5d3270da26fb113\ICEsoundService64.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe (services.exe ->) (Intel(R) pGFX -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_12bdb8127c4c0458\OneApp.IGCC.WinService.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_d2a0453c62b3b51a\igfxCUIService.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2f517840860c8f91\IntelCpHDCPSvc.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2f517840860c8f91\IntelCpHeciSvc.exe (services.exe ->) (Intel(R) Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\Sgrm\SgrmBroker.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe (services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (sihost.exe ->) (ASUSTeK COMPUTER INC.) C:\Program Files\WindowsApps\B9ECED6F.ASUSKeyboardHotkeys_1.0.12.0_x86__qmba6cd70vzyy\ATK Package\HControl.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [512000 2023-01-30] () [Fichier non signé] HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [445800 2021-10-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [670080 2021-04-08] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [897024 2023-01-30] () [Fichier non signé] HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé] HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [131072 2023-01-30] () [Fichier non signé] HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [38935376 2023-01-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114000240 2021-10-28] (Skype Software Sarl -> Skype Technologies S.A.) HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWCE.EXE [421736 2021-11-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWCE.EXE [421736 2021-11-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Run: [MicrosoftEdgeAutoLaunch_EBD1D1153615F1DAFE42826E251A298D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4243360 2023-02-09] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Windows x64\Print Processors\Canon iP2700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDA4.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP2700 series: C:\WINDOWS\system32\CNMLMA4.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\EPSON ET-2810 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBYVE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation) HKLM\...\Print\Monitors\EPSON PC-FAX Driver2 64Monitor: C:\WINDOWS\system32\EFXLM16A.DLL [182784 2021-04-08] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) HKLM\...\Print\Monitors\EPSON WF-2810 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBWCE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation) HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Fichier non signé] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2023-01-27] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk [2022-12-08] ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility.exe ((c)2022 Datacolor) [Fichier non signé] GroupPolicy: Restriction - Chrome <==== ATTENTION GroupPolicy-Firefox: Restriction <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc Task: {10348BA8-92E9-46D8-A53A-8C9D6659BAB4} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [661408 2023-02-04] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {1335FA61-F467-46A8-94BE-1312F20E9F6D} - System32\Tasks\Avira_FallbackUpdater => C:\WINDOWS\system32\sc.exe start AviraFallbackUpdater Delayed=false Task: {24BD5C6C-834D-40AE-B05E-A38709387781} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSoftwareManager\AsusUpdateChecker.exe [788104 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) Task: {2B75C210-2F2B-407C-9C98-70291B90E987} - System32\Tasks\EPSON WF-2810 Series Update {C872BC5D-C972-4D2E-91D7-01A8DF5003B9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWCE.EXE [684032 2023-01-30] () [Fichier non signé] Task: {2D39D1C2-163C-461E-843F-70E305219ABF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsHotkeyExec64.exe [176064 2019-03-03] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) Task: {2F0DD675-060D-41BA-AE59-0B62CDB83641} - System32\Tasks\ASUS Hello => C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe [642448 2018-05-31] (ASUSTeK Computer Inc. -> ) Task: {34786084-CC52-419B-A396-D1D124603AE4} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry Task: {34786084-CC52-419B-A396-D1D124603AE4} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog Task: {34786084-CC52-419B-A396-D1D124603AE4} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector Task: {34C7DDEF-4167-4E7C-AEDE-93111FD9D790} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155648 2023-01-30] () [Fichier non signé] Task: {3A224BCE-7932-4312-8FF0-4D38E8CC2CB8} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4714496 2023-01-30] () [Fichier non signé] -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "3fa8339d-e8b8-4c34-88aa-5edec11e67dc" --version "6.08.10255" --silent Task: {3F790096-181E-44F5-8008-80F06D051C38} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe /VERIFY /VERYSILENT /NOSTART /NODOTNET /NORESTART (Pas de fichier) Task: {4595EA8E-2E34-413E-A7A3-ECC373B26290} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155648 2023-01-30] () [Fichier non signé] Task: {4B64304A-AE28-4C68-BB26-FA6B978F7967} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606640 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) Task: {62F9B5F2-C88C-4634-AD6A-E504FDD5D143} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {6C0250CA-E00E-464C-BF30-07FC78FFBC47} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier) Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe ReadyToReboot (Pas de fichier) Task: {6FFFBCEE-4B94-49C6-97C5-DC4FFCF10C5F} - System32\Tasks\Avira_Security_Update => C:\WINDOWS\system32\net.exe [81920 2022-05-07] (Microsoft Windows -> Microsoft Corporation) Task: {8A0B1D92-49F3-4D65-B240-6E3D3C0F214A} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe HandleServiceControlManagerEvent 7000 (Pas de fichier) Task: {8C00C739-7169-492E-AB5B-0F71409EB780} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [710560 2023-02-04] (Mozilla Corporation -> Mozilla Foundation) Task: {99CCAAC4-0EE1-4DFF-8F63-10E198F3F864} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [688128 2023-01-30] () [Fichier non signé] Task: {9B1B04F4-83AC-404C-8294-116644E3E6F4} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe [5001152 2023-01-11] (Microsoft Windows -> Microsoft Corporation) Task: {C1EF45A1-44D2-48F3-862D-DCB5FA3AA96A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => C:\WINDOWS\system32\MusNotification.exe Display (Pas de fichier) Task: {C2130958-4D96-4E3E-9123-88F8CADAE13C} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\RtkAudUService64.exe [956704 2019-12-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {C40C6A2E-F6FA-47D1-A894-62294C6B718E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {C80FE49B-C459-447A-B1FC-69D1D749526B} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe (Pas de fichier) Task: {CCD58F6E-F37A-4DAE-AA18-F4A1DE30930E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\WINDOWS\system32\MusNotification.exe Display (Pas de fichier) Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier) Task: {CD5B5F64-272B-4BE8-8FBA-4D1387CFF844} - System32\Tasks\EPSON WF-2810 Series Update {6364078F-BE0C-4E0E-AB81-C13E8F4F57D6} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWCE.EXE [684032 2023-01-30] () [Fichier non signé] Task: {CEB35FDE-A3CF-44F1-96BE-79D8940B70D3} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier) Task: {D0B6B934-1B6B-4430-B56C-516A76FF081A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552384 2023-01-30] () [Fichier non signé] Task: {D479581A-8AC4-46AC-94B4-085B5A5D00A5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier) Task: {E6929359-9E01-4C5B-979F-F2419A2F3866} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {EBDED39B-334A-43FB-A181-76D676A35E89} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) Task: {EEB68431-EF8A-45A0-98A1-9C46BD350038} - System32\Tasks\CCleanerSkipUAC - moniq => C:\Program Files\CCleaner\CCleaner.exe [32620544 2023-01-30] () [Fichier non signé] (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\EPSON WF-2810 Series Update {6364078F-BE0C-4E0E-AB81-C13E8F4F57D6}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWCE.EXE:/EXE:{6364078F-BE0C-4E0E-AB81-C13E8F4F57D6} /F:UpdateWORKGROUP\LAPTOP-USPQJ8VS$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\EPSON WF-2810 Series Update {C872BC5D-C972-4D2E-91D7-01A8DF5003B9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWCE.EXE:/EXE:{C872BC5D-C972-4D2E-91D7-01A8DF5003B9} /F:UpdateWORKGROUP\LAPTOP-USPQJ8VS$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{5ac97fd2-05c8-4878-8a7e-9bc956531e60}: [DhcpNameServer] 40.53.1.12 Tcpip\..\Interfaces\{f5a2ffa8-e84c-4ffd-a138-4bdedd8f5a16}: [DhcpNameServer] 192.168.1.1 Edge: ======= DownloadDir: C:\Users\moniq\Downloads Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] Edge DefaultProfile: Default Edge Profile: C:\Users\moniq\AppData\Local\Microsoft\Edge\User Data\Default [2023-02-13] Edge DownloadDir: Default -> C:\Users\moniq\Downloads Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF DefaultProfile: 28q1ly20.default-1600668210570 FF ProfilePath: C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\28q1ly20.default-1600668210570 [2023-02-13] FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\28q1ly20.default-1600668210570\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-02-12] FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-01-21] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Pas de fichier] FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-557128043-3211486600-3372128446-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) Chrome: ======= CHR Profile: C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default [2023-02-13] CHR StartupUrls: Default -> "hxxp://www.google.com" CHR Extension: (Avira Password Manager) - C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-06-22] CHR Extension: (Protection Web Avira) - C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2022-02-11] CHR Extension: (Google Docs hors connexion) - C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-02-11] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\moniq\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-18] CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.) R2 AsHidService; C:\WINDOWS\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsHidSrv64.exe [173504 2019-03-03] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) R2 ASLDRService; C:\WINDOWS\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\AsLdrSrv64.exe [227776 2019-03-03] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\AsusAppService\AsusAppService.exe [901776 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 ASUSLinkNear; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkNear\AsusLinkNear.exe [1320080 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) R2 ASUSLinkRemote; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkRemote\AsusLinkRemote.exe [764512 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) R2 ASUSLiveUpdateAgent; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSoftwareManager\AsusSoftwareManager.exe [1113184 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 AsusNumPadService; C:\WINDOWS\System32\DriverStore\FileRepository\asusnumpadfilter.inf_amd64_936e1b5b4303abdf\AsusNumPadService.exe [257552 2022-03-15] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\AsusOptimization\AsusOptimization.exe [197376 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSwitch\AsusSwitch.exe [635504 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606640 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [526272 2022-11-29] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek COMPUTER INC.) R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-06-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) R2 GiftBox.Service; C:\Program Files (x86)\ASUS\ASUS GiftBox Service\GiftBoxService.exe [302416 2018-06-29] (ASUSTek Computer Inc. -> ASUSTeK Computer Inc.) S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155648 2023-01-30] () [Fichier non signé] S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155648 2023-01-30] () [Fichier non signé] R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-07] (HP Inc. -> HP Inc.) S3 InventorySvc; C:\WINDOWS\system32\inventorysvc.dll [304480 2022-11-30] (Microsoft Windows -> Microsoft Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8966256 2023-02-04] (Malwarebytes Inc. -> Malwarebytes) R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) R2 SgrmBroker; C:\WINDOWS\system32\Sgrm\SgrmBroker.exe [414632 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TextInputManagementService; C:\WINDOWS\System32\TabSvc.dll [266240 2022-11-30] (Microsoft Windows -> Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe [3191264 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe [133592 2023-02-04] (Microsoft Windows Publisher -> Microsoft Corporation) S3 wuauserv; C:\WINDOWS\system32\wuauserv.dll [137552 2022-12-14] (Microsoft Windows -> Microsoft Corporation) S2 AdobeUpdateService; "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" [X] S2 AviraFallbackUpdater; "C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe" FallbackUpdater=true [X] ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AsusKeyboard; C:\WINDOWS\System32\DriverStore\FileRepository\asuskeyboardfilter.inf_amd64_ae4a33986661571b\AsusKeyboardFilter.sys [71688 2022-03-15] (ASUSTeK COMPUTER INC. -> Human Interface Tech.) R3 AsusNumpadPTP; C:\WINDOWS\System32\DriverStore\FileRepository\asusnumpadfilter.inf_amd64_936e1b5b4303abdf\AsusNUMPADFilter.sys [200184 2022-03-15] (ASUSTeK COMPUTER INC. -> Human Interface Tech.) R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemAnalysis\AsusSAIO.sys [46696 2022-11-29] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\atkwmiacpiio.inf_amd64_30ffacb41f78f352\atkwmiacpi64.sys [36368 2019-03-03] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) S3 AX88179; C:\WINDOWS\System32\DriverStore\FileRepository\netax88179_178a.inf_amd64_a8bb8a6e92764769\ax88179_178a.sys [79872 2022-05-07] (Microsoft Windows -> ASIX Electronics Corp.) R2 bfs; C:\WINDOWS\system32\drivers\bfs.sys [91480 2022-11-30] (Microsoft Windows -> Microsoft Corporation) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S0 GenPass; C:\WINDOWS\System32\DriverStore\FileRepository\genpass.inf_amd64_bef88a423225ecdc\genpass.sys [62800 2022-05-07] (Microsoft Windows -> Microsoft Corporation) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-02-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-05-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MpKsl265cb379; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D9B445D5-3AC0-4FA3-A550-05E83079C852}\MpKslDrv.sys [214280 2023-02-13] (Microsoft Windows -> Microsoft Corporation) S0 pvscsi; C:\WINDOWS\System32\drivers\pvscsii.sys [45408 2022-05-07] (Microsoft Windows -> VMware, Inc.) S3 RoutePolicy; C:\WINDOWS\System32\drivers\RoutePolicy.sys [98304 2022-05-07] (Microsoft Windows -> ) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2023-02-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473376 2023-02-04] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99616 2023-02-04] (Microsoft Windows -> Microsoft Corporation) R2 wtd; C:\WINDOWS\System32\drivers\wtd.sys [118784 2022-12-14] (Microsoft Windows -> Microsoft Corporation) S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-02-13 19:20 - 2023-02-13 19:20 - 000774296 _____ C:\WINDOWS\system32\perfh00C.dat 2023-02-13 19:20 - 2023-02-13 19:20 - 000149372 _____ C:\WINDOWS\system32\perfc00C.dat 2023-02-13 19:06 - 2023-02-13 19:45 - 000000000 ____D C:\FRST 2023-02-13 18:45 - 2023-02-13 18:45 - 000030106 _____ C:\Users\moniq\Downloads\ticket-PAYFIP0000000070122718.pdf 2023-02-13 07:18 - 2023-02-13 07:18 - 000327115 _____ C:\Users\moniq\Downloads\all.pdf 2023-02-12 21:32 - 2023-02-12 21:55 - 000228056 _____ C:\WINDOWS\ntbtlog.txt 2023-02-12 21:32 - 2023-02-12 21:32 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2023-02-12 21:18 - 2023-02-12 21:18 - 006953824 _____ (VS Revo Group ) C:\Users\moniq\Downloads\revosetup.exe 2023-02-12 21:18 - 2023-02-12 21:18 - 000001081 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk 2023-02-12 21:18 - 2023-02-12 21:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2023-02-12 21:18 - 2023-02-12 21:18 - 000000000 ____D C:\Program Files\VS Revo Group 2023-02-09 22:05 - 2023-02-09 22:10 - 000000000 ___HD C:\temp 2023-02-09 22:04 - 2023-02-09 22:04 - 001727665 _____ C:\Users\moniq\Downloads\creative_cloud_uninstallerwin.zip 2023-02-09 19:18 - 2023-02-13 19:38 - 000000000 ____D C:\Users\moniq\AppData\Roaming\ZHP 2023-02-09 19:18 - 2023-02-12 22:02 - 000000000 ____D C:\Users\moniq\AppData\Local\ZHP 2023-02-09 19:13 - 2023-02-09 19:13 - 003513544 _____ (Nicolas Coolman) C:\Users\moniq\Downloads\ZHPSuite(1).exe 2023-02-05 18:55 - 2023-02-05 18:55 - 000001197 _____ C:\Users\Public\Desktop\LibreOffice 7.5.lnk 2023-02-05 18:55 - 2023-02-05 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.5 2023-02-05 18:54 - 2023-02-05 18:55 - 000000000 ____D C:\Program Files\LibreOffice 2023-02-05 09:21 - 2023-02-12 21:55 - 000001575 _____ C:\WINDOWS\system32\config\VSMIDK 2023-02-05 09:15 - 2023-02-05 09:15 - 000011153 _____ C:\Users\moniq\OneDrive\Documents\UsbFix-Report-04.txt 2023-02-04 19:24 - 2023-02-04 19:24 - 000003656 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask 2023-02-04 17:45 - 2023-02-04 17:45 - 000000112 ___SH C:\bootTel.dat 2023-02-04 12:19 - 2023-02-04 12:22 - 313368104 _____ C:\Users\moniq\Downloads\dppw4.17.10-installer.zip 2023-02-04 11:59 - 2023-02-04 12:02 - 354488320 _____ C:\Users\moniq\Downloads\LibreOffice_7.5.0_Win_x86-64.msi 2023-02-02 19:10 - 2023-02-02 19:10 - 000003888 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Maintenance 2023-02-02 19:10 - 2023-02-02 19:10 - 000003428 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Service_SCM_Watchdog 2023-02-02 19:10 - 2023-02-02 19:10 - 000002818 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Systray 2023-01-26 20:25 - 2023-01-26 20:25 - 000000441 _____ C:\Users\moniq\Downloads\Relèves_mensuelles_gaz(6).csv 2023-01-26 20:23 - 2023-01-26 20:23 - 000000441 _____ C:\Users\moniq\Downloads\Relèves_mensuelles_gaz(5).csv 2023-01-26 20:19 - 2023-01-26 20:19 - 000001769 _____ C:\Users\moniq\Downloads\Relèves_mensuelles_électricité(10).csv 2023-01-26 18:49 - 2023-01-26 18:49 - 002462182 _____ C:\Users\moniq\Downloads\krima_und_isa_Silvester2023_Kuchentopper_Download.pdf 2023-01-26 18:22 - 2023-01-26 18:22 - 000363081 _____ C:\Users\moniq\Downloads\jpg(9) 2023-01-24 19:53 - 2023-01-24 19:53 - 000614348 _____ C:\Users\moniq\Downloads\AFEDIM Mandat 148lla Paraiso 206(2).pdf 2023-01-24 18:15 - 2023-01-24 18:15 - 000614348 _____ C:\Users\moniq\Downloads\AFEDIM Mandat 148lla Paraiso 206.pdf 2023-01-24 18:15 - 2023-01-24 18:15 - 000614348 _____ C:\Users\moniq\Downloads\AFEDIM Mandat 148lla Paraiso 206(1).pdf 2023-01-23 15:18 - 2023-01-23 15:18 - 000063715 _____ C:\Users\moniq\Downloads\png 2023-01-19 16:27 - 2023-02-04 11:59 - 000000000 ____D C:\Program Files\Mozilla Firefox 2023-01-19 11:09 - 2023-01-19 11:09 - 000003792 _____ C:\WINDOWS\system32\Tasks\AviraSystemSpeedupVerify 2023-01-18 12:59 - 2023-01-18 12:59 - 000719971 _____ C:\Users\moniq\Downloads\file26550.pdf 2023-01-18 12:56 - 2023-01-18 12:56 - 000458069 _____ C:\Users\moniq\Downloads\couronne-des-rois-a-imprimer.jpeg 2023-01-15 09:48 - 2023-01-15 09:48 - 000285343 _____ C:\Users\moniq\Downloads\billets_0743138060-2.pdf 2023-01-15 09:41 - 2023-01-15 09:41 - 000285343 _____ C:\Users\moniq\Downloads\billets_0743138060-1.pdf 2023-01-15 09:36 - 2023-01-15 09:36 - 000285343 _____ C:\Users\moniq\Downloads\billets_0743138060.pdf 2023-01-14 10:03 - 2023-01-14 10:03 - 000000000 ___HD C:\$WinREAgent ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-02-13 19:44 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-02-13 19:35 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp 2023-02-13 19:20 - 2022-11-30 09:36 - 000003750 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 2023-02-13 19:20 - 2022-11-30 09:35 - 001713450 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2023-02-13 19:20 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF 2023-02-13 19:18 - 2022-11-30 09:30 - 000000000 ____D C:\Users\moniq 2023-02-13 19:16 - 2022-02-09 15:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-02-13 19:15 - 2019-03-09 15:48 - 000000000 ____D C:\Users\moniq\AppData\LocalLow\Mozilla 2023-02-13 19:14 - 2019-03-09 15:41 - 000000000 __SHD C:\Users\moniq\IntelGraphicsProfiles 2023-02-13 19:13 - 2022-11-30 09:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2023-02-13 19:13 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState 2023-02-13 19:13 - 2022-05-07 06:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2023-02-13 19:13 - 2021-03-07 22:58 - 000012288 ___SH C:\DumpStack.log.tmp 2023-02-13 19:09 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp 2023-02-13 19:02 - 2019-03-09 16:01 - 000000000 ____D C:\Program Files\CCleaner 2023-02-13 18:46 - 2022-12-10 18:13 - 000000000 ____D C:\Users\moniq\OneDrive\Documents\JP 2023-02-13 18:27 - 2022-11-30 09:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2023-02-13 17:47 - 2019-03-13 07:47 - 000000000 ____D C:\Users\moniq\AppData\Local\D3DSCache 2023-02-13 16:09 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness 2023-02-12 21:59 - 2022-05-07 06:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2023-02-12 21:57 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2023-02-12 21:57 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps 2023-02-12 21:55 - 2022-09-21 10:35 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job 2023-02-12 21:54 - 2019-03-09 16:19 - 000000000 ____D C:\ProgramData\Avira 2023-02-12 21:53 - 2022-05-07 06:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2023-02-12 21:52 - 2019-03-09 16:01 - 000001046 _____ C:\Users\Public\Desktop\CCleaner.lnk 2023-02-12 21:29 - 2022-06-29 17:26 - 001598136 _____ C:\WINDOWS\system32\rtp.db 2023-02-12 21:09 - 2022-11-30 09:29 - 000470592 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2023-02-09 22:37 - 2022-11-30 09:36 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-02-09 22:37 - 2022-11-30 09:36 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-02-09 22:34 - 2020-06-19 20:06 - 000002516 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-02-09 22:16 - 2022-06-07 18:58 - 000000000 ____D C:\Program Files\Common Files\Adobe 2023-02-09 22:16 - 2020-05-15 20:04 - 000000000 ____D C:\Program Files\Adobe 2023-02-09 22:15 - 2019-04-14 13:08 - 000000000 ____D C:\ProgramData\Adobe 2023-02-09 22:05 - 2019-04-14 13:09 - 000000000 ____D C:\Program Files (x86)\Adobe 2023-02-09 21:57 - 2023-01-11 19:31 - 000000000 ___RD C:\Users\moniq\Creative Cloud Files 2023-02-09 21:27 - 2019-03-09 15:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-02-04 17:02 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows Defender 2023-02-04 17:02 - 2018-05-14 21:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2023-02-04 12:29 - 2019-11-24 10:42 - 000000000 ____D C:\Users\moniq\AppData\Local\CrashDumps 2023-02-04 12:28 - 2019-03-10 11:22 - 000000000 ____D C:\Program Files (x86)\Canon 2023-02-04 12:23 - 2019-03-10 11:22 - 000001081 _____ C:\Users\Public\Desktop\Digital Photo Professional 4.lnk 2023-02-04 12:23 - 2019-03-10 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2023-02-04 11:59 - 2022-11-30 09:36 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2023-02-04 11:58 - 2019-03-09 15:48 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2023-02-02 19:10 - 2022-11-30 09:36 - 000003474 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update 2023-02-02 19:10 - 2020-11-25 18:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2023-02-02 17:42 - 2022-11-30 09:36 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-557128043-3211486600-3372128446-1001 2023-02-02 17:42 - 2022-11-30 09:36 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-557128043-3211486600-3372128446-1001 2023-02-02 17:42 - 2021-03-07 22:59 - 000002466 _____ C:\Users\moniq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2023-02-01 18:47 - 2022-12-15 10:44 - 000003708 _____ C:\WINDOWS\system32\Tasks\Avira_FallbackUpdater 2023-01-30 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources 2023-01-30 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe 2023-01-30 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr 2023-01-30 21:15 - 2022-11-28 08:33 - 000000000 ___DC C:\WINDOWS\Panther 2023-01-30 21:02 - 2019-03-09 15:59 - 000000000 ____D C:\Program Files (x86)\Google 2023-01-26 20:12 - 2022-11-30 09:36 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2023-01-26 20:12 - 2022-10-11 16:50 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2023-01-26 20:12 - 2022-10-11 16:50 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk 2023-01-26 18:55 - 2022-09-19 08:17 - 000000000 ____D C:\Users\moniq\AppData\Roaming\com.adobe.dunamis 2023-01-26 18:55 - 2019-04-14 13:03 - 000000000 ____D C:\Users\moniq\AppData\Local\Adobe 2023-01-26 18:51 - 2020-06-12 10:28 - 000000000 ____D C:\Users\moniq\OneDrive\Documents\Adobe 2023-01-26 18:51 - 2019-03-09 15:42 - 000000000 ____D C:\Users\moniq\AppData\Roaming\Adobe 2023-01-24 09:26 - 2020-10-02 16:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2023-01-19 08:44 - 2022-11-30 09:36 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2023-01-19 08:44 - 2022-11-30 09:36 - 000003474 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================