Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 05-03-2023 Exécuté par ocean (08-03-2023 21:52:26) Run:1 Exécuté depuis C:\Users\ocean\Downloads Profils chargés: ocean Mode d'amorçage: Normal ============================================== fixlist contenu: ***************** start:: CreateRestorePoint: CloseProcesses: HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5204968 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.) HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\...\Run: [MicrosoftEdgeAutoLaunch_F2D1DCF0BEE8FE97991AE4FC5C4C92D8] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4243408 2023-03-02] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\110.0.5481.178\Installer\chrmstp.exe [2023-02-28] (Google LLC -> Google LLC) BootExecute: autocheck autochk * sdnclean64.exe HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction C:\Users\ocean]\Desktop\Discord.lnk DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Discord DeleteValue: HKEY_USERS\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Discord DeleteKey: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discord DeleteKey: HKCU\Software\undefined DeleteKey: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox DeleteKey: HKCU\SOFTWARE\Discord DeleteKey: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\Discord DeleteKey: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\undefined C:\Users\ocean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} DeleteKey: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\047 C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\079 C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\uTorrent (3).exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\uTorrent (3).exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|D:\DiscordSetup.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|D:\DiscordSetup.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\eduroam-W10-academie_Bordeaux.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\romstation-windows-x64.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\romstation-windows-x64.exe.ApplicationCompany C:\Users\ocean\AppData\Local\Discord\app-1.0.9008\Discord.exe DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\uTorrent (3).exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\uTorrent (3).exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|D:\DiscordSetup.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|D:\DiscordSetup.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\eduroam-W10-academie_Bordeaux.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\romstation-windows-x64.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\romstation-windows-x64.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.ApplicationCompany DeleteKey: HKLM\SOFTWARE\WOW6432Node\bookingDesktopApp DeleteKey: HKCU\SOFTWARE\bookingDesktopApp DeleteKey: HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\bookingDesktopApp C:\Program Files (x86)\bookingDesktopApp C:\ProgramData\Application Data\IObit\ASCDownloader C:\ProgramData\IObit\ASCDownloader Task: {2C1D9D5B-E3D4-465D-AFE9-6B9E6F9C261F} - System32\Tasks\Bemehohun\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => C:\Users\ocean\AppData\Local\TERUSO~1\BEMEHO~1.EXE /Ruhates (Pas de fichier) Task: {30CCD86A-3D2B-4718-AC91-AD343CBF0E3F} - System32\Tasks\Sogugociko\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => C:\Users\ocean\AppData\Local\FUGOFA~1\SOGUGO~1.EXE /Kolosute (Pas de fichier) Task: {5A73D659-8A8B-4AB8-8D6B-6E272D248827} - System32\Tasks\Seroponupo\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => C:\Users\ocean\AppData\Local\LIFOLE~1\SEROPO~1.EXE /Dogohat (Pas de fichier) Task: {7FCFA3B0-B832-4FCB-898C-AEFB1319FF79} - System32\Tasks\Gosamoteda\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => C:\Users\ocean\AppData\Local\Megapefo\GOSAMO~1.EXE /Donem (Pas de fichier) Task: {83BF83C3-BD0C-4552-A050-A7BF447F6A26} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5629064 2021-11-23] (Safer-Networking Limited -> Safer-Networking Ltd.) Task: {8CD8EDE5-19A8-44AF-B43D-0A864D055449} - System32\Tasks\Foradanek\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => C:\Users\ocean\AppData\Local\DAGUHA~1\FORADA~1.EXE /Lefep (Pas de fichier) Task: {98FB4FF1-42FA-43EA-B49F-A83893162766} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5363552 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.) Task: {9C47BBD6-2A82-40E1-8A93-F75EDAAE3B78} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1805141066-1808928112-2897253760-1001 => MessengerHelper.exe --lassie (Pas de fichier) Task: {DAAE5A44-BF11-4C2A-B392-5E7285EC93E2} - System32\Tasks\{0B2C26A9-FA2F-407B-8828-51CBC81ED24D} => C:\Users\ocean\AppData\Local\DUHAGO~1\POSOHU~1.EXE /Pare (Pas de fichier) Task: {F226722E-3B24-4E83-9223-0D6A1FFE601A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6093928 2021-12-20] (Safer-Networking Limited -> Safer-Networking Ltd.) Task: C:\WINDOWS\Tasks\{0B2C26A9-FA2F-407B-8828-51CBC81ED24D}.job => C:\Users\ocean\AppData\Local\DUHAGO~1\POSOHU~1.EXE Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] FF Homepage: Mozilla\Firefox\Profiles\u8arao9u.default -> hxxp://www.bing.com/search?FORM=INCOH1&PC=IC04&PTAG=ICO-6ed088ded64f7c60 CHR Notifications: Default -> hxxps://allostreaming.co; hxxps://anglais-pdf.com; hxxps://gw.lightinthebox.com; hxxps://particuliers.engie.fr; hxxps://www.castorama.fr; hxxps://www.cpasmal.net; hxxps://www.facebook.com; hxxps://www.kiabi.com; hxxps://www.laredoute.fr; hxxps://www.netflix.com; hxxps://www.qare.fr; hxxps://www.stream-complet.biz; hxxps://www.youtube.com CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?fr=mcafee&type=E210FR91082G0&p={searchTerms} CHR DefaultSearchKeyword: Default -> McAfee CHR DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/gossip/gossip-fr-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms} CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2782080 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.) S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4605312 2021-11-16] (Safer-Networking Limited -> Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [940976 2019-09-04] (Safer-Networking Ltd. -> Safer-Networking Ltd.) ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers3: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers3: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers3: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers3: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.) AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [488] StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service EmptyTemp: end:: ***************** Erreur: (0) Impossible de créer un point de restauration. Processus fermé avec succès. "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SDTray" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Microsoft\Windows\CurrentVersion\Run\\MicrosoftEdgeAutoLaunch_F2D1DCF0BEE8FE97991AE4FC5C4C92D8" => supprimé(es) avec succès HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => supprimé(es) avec succès HKLM\System\CurrentControlSet\Control\Session Manager\\"BootExecute"="autocheck autochk *" => valeur restauré(es) avec succès HKLM\SOFTWARE\Policies\Mozilla => supprimé(es) avec succès "C:\Users\ocean]\Desktop\Discord.lnk" => non trouvé(e) "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Discord" => supprimé(es) avec succès "HKEY_USERS\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Discord" => non trouvé(e) HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discord => supprimé(es) avec succès HKCU\Software\undefined => supprimé(es) avec succès "HKLM\SOFTWARE\POLICIES\Mozilla\Firefox" => non trouvé(e) HKCU\SOFTWARE\Discord => supprimé(es) avec succès HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\Discord => non trouvé(e) HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\undefined => non trouvé(e) C:\Users\ocean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc => déplacé(es) avec succès HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e) HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\047 => déplacé(es) avec succès C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\079 => déplacé(es) avec succès C:\Users\ocean\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins => déplacé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\uTorrent (3).exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\uTorrent (3).exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\D:\DiscordSetup.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\D:\DiscordSetup.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\eduroam-W10-academie_Bordeaux.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\romstation-windows-x64.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\romstation-windows-x64.exe.ApplicationCompany" => supprimé(es) avec succès C:\Users\ocean\AppData\Local\Discord\app-1.0.9008\Discord.exe => déplacé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.ApplicationCompany" => supprimé(es) avec succès "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Molotov\app-4.4.0\Molotov.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\uTorrent (3).exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\uTorrent (3).exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\WhatsApp.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\WhatsApp\app-2.2102.9\WhatsApp.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\D:\DiscordSetup.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\D:\DiscordSetup.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9006\discord.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\eduroam-W10-academie_Bordeaux.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\Programs\GIMP 2\bin\gimp-2.10.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\romstation-windows-x64.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\romstation-windows-x64.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\ocean\appdata\local\discord\app-1.0.9008\discord.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\AppData\Local\PCHealthCheck\PCHealthCheck.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\ocean\Downloads\gimp-2.10.22-setup.exe.ApplicationCompany" => non trouvé(e) HKLM\SOFTWARE\WOW6432Node\bookingDesktopApp => supprimé(es) avec succès HKCU\SOFTWARE\bookingDesktopApp => supprimé(es) avec succès HKU\S-1-5-21-1805141066-1808928112-2897253760-1001\SOFTWARE\bookingDesktopApp => non trouvé(e) C:\Program Files (x86)\bookingDesktopApp => déplacé(es) avec succès C:\ProgramData\Application Data\IObit\ASCDownloader => déplacé(es) avec succès "C:\ProgramData\IObit\ASCDownloader" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2C1D9D5B-E3D4-465D-AFE9-6B9E6F9C261F}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C1D9D5B-E3D4-465D-AFE9-6B9E6F9C261F}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Bemehohun\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bemehohun\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{30CCD86A-3D2B-4718-AC91-AD343CBF0E3F}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30CCD86A-3D2B-4718-AC91-AD343CBF0E3F}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Sogugociko\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sogugociko\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A73D659-8A8B-4AB8-8D6B-6E272D248827}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A73D659-8A8B-4AB8-8D6B-6E272D248827}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Seroponupo\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Seroponupo\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7FCFA3B0-B832-4FCB-898C-AEFB1319FF79}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7FCFA3B0-B832-4FCB-898C-AEFB1319FF79}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Gosamoteda\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Gosamoteda\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{83BF83C3-BD0C-4552-A050-A7BF447F6A26}" => non trouvé(e) "C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8CD8EDE5-19A8-44AF-B43D-0A864D055449}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8CD8EDE5-19A8-44AF-B43D-0A864D055449}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Foradanek\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Foradanek\{3E6C7DCE-1EEA-3DDF-6B52-32D482AC1DDF}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{98FB4FF1-42FA-43EA-B49F-A83893162766}" => non trouvé(e) "C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Check for updates" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C47BBD6-2A82-40E1-8A93-F75EDAAE3B78}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C47BBD6-2A82-40E1-8A93-F75EDAAE3B78}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1805141066-1808928112-2897253760-1001 => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Meta\Messenger-WSP-Helper-S-1-5-21-1805141066-1808928112-2897253760-1001" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DAAE5A44-BF11-4C2A-B392-5E7285EC93E2}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DAAE5A44-BF11-4C2A-B392-5E7285EC93E2}" => supprimé(es) avec succès C:\WINDOWS\System32\Tasks\{0B2C26A9-FA2F-407B-8828-51CBC81ED24D} => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0B2C26A9-FA2F-407B-8828-51CBC81ED24D}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F226722E-3B24-4E83-9223-0D6A1FFE601A}" => non trouvé(e) "C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Scan the system" => non trouvé(e) C:\WINDOWS\Tasks\{0B2C26A9-FA2F-407B-8828-51CBC81ED24D}.job => déplacé(es) avec succès HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => supprimé(es) avec succès HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => supprimé(es) avec succès HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => supprimé(es) avec succès HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => supprimé(es) avec succès "Firefox homepage" => supprimé(es) avec succès "Chrome Notifications" => supprimé(es) avec succès "Chrome DefaultSearchURL" => supprimé(es) avec succès "Chrome DefaultSearchKeyword" => supprimé(es) avec succès "Chrome DefaultSuggestURL" => supprimé(es) avec succès HKLM\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho => supprimé(es) avec succès HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb => supprimé(es) avec succès HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho => supprimé(es) avec succès SDScannerService => service non trouvé(e). SDUpdateService => service non trouvé(e). SDWSCService => service non trouvé(e). HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SDECon32 => supprimé(es) avec succès HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SDECon64 => supprimé(es) avec succès HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\SDECon32 => non trouvé(e) HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\SDECon64 => non trouvé(e) HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\SDECon32 => non trouvé(e) HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\SDECon64 => non trouvé(e) HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\SDECon32 => supprimé(es) avec succès HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\SDECon64 => supprimé(es) avec succès C:\Users\Public\Shared Files => ":VersionCache" ADS supprimé(es) avec succès "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" => non trouvé(e) =========== EmptyTemp: ========== FlushDNS => terminé(e) BITS transfer queue => 1572864 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16223050 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 491140976 B Windows/system/drivers => 5978349 B Edge => 309596 B Chrome => 446936997 B Firefox => 503413056 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 22660 B NetworkService => 11154322 B ocean => 24342044 B RecycleBin => 630181 B EmptyTemp: => 1.4 GB données temporaires supprimées. ================================ Le système a dû redémarrer. ==== Fin de Fixlog 21:58:43 ====