~ ZHPDiag v2023.12.29.66 Par Nicolas Coolman (2023/12/29) ~ Démarre par nicbo (Administrator) (2023/12/31 11:08:47) ~ Assistance: https://forum.nicolascoolman.eu/ ~ Blog: https://nicolascoolman.eu/ ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: D:\NICOLE\Bureau\ZHPDiag.txt ~ Rapport: C:\Users\nicbo\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Demarrage du système: Normal (Normal boot) Windows 10 Home, 64-bit (Build 19045) =>.Microsoft Corporation ---\\ NAVIGATEURS INTERNET (3) - 0s ~ MFIE: Mozilla Firefox 121.0 (x64 fr) ~ MSIE: Internet Explorer v11.3636.19041.0 ~ OBIE: Microsoft Edge v120.0.2210.91 ---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (8) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 7MHX3 Windows License : OK ~ Windows Remaining Initializations Number : 1001 Windows Automatic Updates : OK ---\\ LOGICIELS DE PROTECTION (2) - 2s Windows Defender W10 (Activate) (Protection) Malwarebytes version 4.6.7.301 v4.6.7.301 (Protection) ---\\ INFORMATIONS SUR LE SYSTEME (18) - 1s ~ Operating System: Intel64 Family 6 Model 142 Stepping 9, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) System Restore: Activé (Enable) System drive C: has 52 GB (42%) free of 121 GB : OK =>.Disk Space ---\\ INFORMATIONS MÉMOIRE (MEMORY INFORMATIONS) ~ Slots Total (Total Slots) : 4 ~ Slots Utilisés (Used Slots) : 1 ~ Slots Disponibles (Free Slots) : 3 ~ Type de barrette (FormFactor): SO-DIMM ~ Taille (Size) : 4 Go ~ Vitesse (Speed) : 2400 ~ Charge mémoire (Memory Usage) : 79% ~ RAM physique Total (Total Physical) : 4 Go : OK ~ RAM physique Disponible (Available Physical) : 1 Go ~ Total virtuelle (Total Virtual) : 7.89 Go ~ Disponible virtuelle (Available Virtual): 4.14 Go ---\\ MODE DE CONNEXION AU SYSTEME (3) - 0s ~ Computer Name: NICOLE ~ User Name: nicbo ~ Logged in as Administrator ---\\ ENUMERATION DES UNITES DE STOCKAGE (6) - 0s ~ Drive C: has 52 GB free of 121 GB (System) ~ Drive D: has 887 GB free of 953 GB ---\\ ETAT DE LA COMMANDE TRIM ~ La commande TRIM est active (NTFS) ~ La commande TRIM est active (ReFS) ---\\ CARACTÉRISTIQUES PRINCIPALES DU DISQUE SYSTEME (33) - 22s ~ Model: ST1000LM035-1RK172 vSDM2 (121 Gb ) ~ Media Type: SSD Disque Fixe ( Bus: SATA) ---\\ ATTRIBUTS GÉNÉRAUX DU DISQUE SYSTÈME OK - N0 - Indicateur d'usure du périphérique de stockage (Storage Device Wear Indicator) (%): 0 RE - N1 - Temps de latence maximal de vidage (Maximum Flash latency) (ms): 1.422 OK - N2 - Temps de latence maximal d'écriture (Maximum write latency) (ms): 0.915 OK - N3 - Temps de latence maximal de lecture (Maximum read latency) (ms): 0.787 OK - N4 - Vitesse de rotation (Spindle Speed) (RPM): Unknown ---\\ PARAMÈTRES S.M.A.R.T. DU DISQUE SYSTÈME (Flag/Actuel/Maxi) [Seuil] [Valeur brute] OK - 05 - Nombre de secteurs réalloués (Reallocated Sector Count) - [50][100][100] [0][0] OK - 09 - Heures de fonctionnement (Power-On Hours Count (POH) - [50][100][100] [0][12274] OK - 0C - Nombre de cycles en fonctionnement (Power Cycles Count) - [50][100][100] [0][5686] OK - A5 - Nombre de Blocs effacés (SLC) (Block Erase Count (SLC) ) - [50][100][100] [0][7545] OK - A6 - Minimum de cycles P/E (Minimum P/E Cycles) - [50][100][100] [0][76] OK - A7 - Maximum de blocs défectueux /puce (Maximum Bad Blocks per die) - [50][100][100] [0][20] OK - A8 - Maximum de cycles P/E (Maximum P/E Cycles) - [50][100][100] [0][136] RE - A9 - Nombre total de blocs défectueux (Total Bad Blocks) - [50][100][100] [0][96] OK - AA - Nombre de blocs réservés utilisés (Used Reserved Block Count) - [50][100][100] [0][0] OK - AB - Taux d'Echec du Programme (SSD Program Fail Count) - [50][100][100] [0][0] OK - AC - Taux d'Echec d'effacement (Erase Fail Count) - [50][100][100] [0][0] OK - AD - Nombre de blocs effacés (Average Block-Erase Count) - [50][100][100] [0][107] OK - AE - Nombre inattendu de perte de puissance (Unexpected Power Off Count) - [50][100][100] [0][20] OK - B8 - Nombre d'erreur de correction (Incorrectable Error Count) - [50][100][100] [0][0] OK - BB - Nombre d'erreurs incorrigibles (Reported Uncorrectable Errors) - [50][100][100] [0][0] OK - BC - Spécifique Constructeur - [50][100][100] [0][0] OK - C2 - Température interne actuelle (Temperature) - [34][70][53] [0][30] OK - C7 - Nombre d'erreurs CRC Ultra-DMA (CRC Error Count) - [50][100][100] [0][0] OK - E6 - Indicateur d’usure des supports (Media Wearout Indicator) - [50][100][100] [0][5431] OK - E8 - Espace de réserve disponible (Available reserved Space) - [51][100][100] [4][100] OK - E9 - NAND GB Ecriture (NAND GB Written) - [50][100][100] [0][12812] OK - EA - Durée de vie d'écriture NAND (Lifetime NAND Writes) - [50][100][100] [0][32106] ---\\ ETAT DU CENTRE DE SECURITE WINDOWS (7) - 0s [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ RECHERCHE PARTICULIERE DE FICHIERS GENERIQUES (26) - 2s [MD5.02280F4613E3D8EB6579D79AB7A182CA] - 13/12/2023 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [5550856] =>.Microsoft® [MD5.100F56A73211E0B2BCD076A55E6393FD] - 16/11/2023 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71680] [Unsigned] =>.Microsoft Corporation [MD5.1FD4446BC2C8154A3A063EF0DEE5C166] - 13/12/2023 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [427200] [Unsigned] =>.Microsoft Corporation [MD5.84A34BF3486F7B9B7035DB78D78BDD1E] - 16/11/2023 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [5039616] [Unsigned] =>.Microsoft Corporation [MD5.AC8E6842E0A9C37B747F62D23EF372E9] - 13/12/2023 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [905728] [Unsigned] =>.Microsoft Corporation [MD5.FDFCBEF77C6503730AE57E117A0CB3A9] - 16/11/2023 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [316416] [Unsigned] =>.Microsoft Corporation [MD5.55C17AD6C235AF6F7F5C45F79D4D854B] - 16/11/2023 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [821392] =>.Microsoft® [MD5.8854E5A5353A5C3E9F5B93E5FDFFD0E3] - 16/11/2023 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [583168] =>.Microsoft® [MD5.1EB40BFFBAB2FDD69C949C63FA22CB10] - 16/11/2023 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [3456512] [Unsigned] =>.Microsoft Corporation [MD5.3996E9A5F0CC85E93AA7ADE49A892C5E] - 07/12/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] [Unsigned] =>.Microsoft Corporation [MD5.A7068973DF4AE070B85A68C2F603E088] - 13/12/2023 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [656872] [Unsigned] =>.Microsoft Corporation [MD5.81FF48994C82B1CA2C4EBD9C6C6683C4] - 16/11/2023 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [31200] [Unsigned] =>.Microsoft Corporation [MD5.E53DE91C9330F0E17075C11CD0A7719A] - 16/11/2023 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [100864] [Unsigned] =>.Microsoft Corporation [MD5.D0F81A35A1A28117B8AB1C11FC0E363D] - 16/11/2023 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [175616] [Unsigned] =>.Microsoft Corporation [MD5.2824929F2BCC3EBDCFA92D628B94C51C] - 16/11/2023 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [152064] [Unsigned] =>.Microsoft Corporation [MD5.B3855513A8202B5F33C6192B09FDB9BF] - 16/11/2023 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [138240] [Unsigned] =>.Microsoft Corporation [MD5.E4B36C6EAAAB703CBFECB92EE590FB31] - 07/12/2019 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [118272] [Unsigned] =>.Microsoft Corporation [MD5.E1EF9BC57E7816DA7EAA9C98AB25140B] - 16/11/2023 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [227840] [Unsigned] =>.Microsoft Corporation [MD5.80837B389013924ED89FF0B8280EC6CC] - 13/12/2023 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [580568] [Unsigned] =>.Microsoft Corporation [MD5.09D0F16FB9555790DA934BDC2543E940] - 16/11/2023 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [341504] [Unsigned] =>.Microsoft Corporation [MD5.1C834F90B547E5D6B59378384B389400] - 16/11/2023 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2844656] [Unsigned] =>.Microsoft Corporation [MD5.138FDB1EBCB61287A645BD3B06DBED5E] - 07/12/2019 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [109056] [Unsigned] =>.Microsoft Corporation [MD5.AB7EC8C94F4597212DAA92974C4585BA] - 16/11/2023 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [118272] [Unsigned] =>.Microsoft Corporation [MD5.DFC63E0133E9A721B5B962F3A7E8F35D] - 16/11/2023 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [169984] [Unsigned] =>.Microsoft Corporation [MD5.02577FC71C31F625B302566190AA1382] - 16/11/2023 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118752] [Unsigned] =>.Microsoft Corporation [MD5.484DC5AD718AE12B3AD99B511FABE088] - 16/11/2023 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [431088] [Unsigned] =>.Microsoft Corporation ---\\ LISTE DES SERVICES (Non désactivés) (17) - 3s O23 - Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe =>.ASUSTeK Computer Inc.® O23 - Service: AtherosSvc (AtherosSvc) . (. - Windows Setup API.) - C:\WINDOWS\System32\drivers\AdminService.exe [Unsigned] =>.Atheros O23 - Service: AOMEI Backupper Scheduler Service (Backupper Service) . (.AOMEI International Network Limited - AOMEI Backupper Schedule task service.) - C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe =>.AOMEI International Network Limited® O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020® O23 - Service: Device Activation Service (DevActSvc) . (...) - C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe (.not file.) =>.ASUSTeK O23 - Service: EaseUS UPDATE SERVICE (EaseUS UPDATE SERVICE) . (.CHENGDU YIWO Tech Development Co., Ltd. - .) - C:\Program Files (x86)\EaseUS\ENS\ensserver.exe =>.CHENGDU YIWO Tech Development Co., Ltd.® O23 - Service: Intel(R) Dynamic Tuning service (esifsvc) . (.Intel Corporation - Intel(R) Dynamic Tuning Service.) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\esif_uf.exe {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation O23 - Service: Foxit PDF Reader Update Service (FoxitReaderUpdateService) . (.Foxit Software Inc. - Foxit PDF Reader Update Service.) - C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe {0B7593CAAEA54207BBC0C65A153F7601}. =>.Foxit Software Inc. O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: HuaweiHiSuiteService64.exe (HuaweiHiSuiteService64.exe) . (...) - C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe (.not file.) =>.Huawei Technologies Co.,Ltd O23 - Service: ICEsound Service (ICEsoundService) . (.ICEpower A/S - ICEpower ICEsound APO service.) - C:\WINDOWS\System32\ICEsoundService64.exe [Unsigned] =>.ICEpower a/s O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe =>.Intel(R) pGFX 2020® O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) . (.Copyright CANON INC. 2006-2020 - Inkjet Printer/Scanner/Fax Extended Survey.) - C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe =>.Canon Inc.® O23 - Service: Intel(R) TPM Provisioning Service (Intel(R) TPM Provisioning Service) . (.Intel(R) Corporation - Intel(R) TPM Provisioning Service.) - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\TPMProvisioningService.exe =>.Intel(R) Trust Services® O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe {0ADE8114D7679B066F2DB2DFD2F67AC2}. =>.Intel Corporation O23 - Service: TeamViewer (TeamViewer) . (.TeamViewer Germany GmbH - TeamViewer.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe =>.TeamViewer Germany GmbH® ---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (112) - 16s SR - Boot [07/12/2019] [ 107320] (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys =>.Microsoft® SR - Boot [07/12/2019] [ 1135416] (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS =>.Microsoft® SR - Boot [14/05/2019] [ 51120] ambakdrv (ambakdrv) . (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\System32\ambakdrv.sys =>.CHENGDU AOMEI Tech Co., Ltd.® SR - Demand [07/12/2019] [ 18432] AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys [Unsigned] =>.Advanced Micro Devices, Inc SR - Demand [07/12/2019] [ 45568] AMD I2C Controller Service (amdi2c) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdi2c.sys [Unsigned] =>.Advanced Micro Devices, Inc SR - Boot [07/12/2019] [ 83256] (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys =>.Microsoft® SR - Boot [07/12/2019] [ 259384] (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys =>.Microsoft® SR - Boot [07/12/2019] [ 26936] (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys =>.Microsoft® SR - Auto [29/11/2023] [ 172928] ammntdrv (ammntdrv) . (.AOMEI International Network Limited.) - C:\WINDOWS\system32\ammntdrv.sys =>.AOMEI International Network Limited® SR - Demand [28/02/2017] [ 38320] ampa (ampa) . (.CHENGDU AOMEI Tech Co., Ltd..) - C:\Windows\System32\ampa.sys =>.CHENGDU AOMEI Tech Co., Ltd.® SR - Demand [12/05/2020] [ 143920] AM USB Stroage Driver (AmUStor) . (.Copyright(C) 2017.) - C:\WINDOWS\System32\drivers\AmUStorU.sys =>.Alcorlink Corp.® SR - Auto [29/11/2023] [ 32176] amwrtdrv (amwrtdrv) . (.AOMEI International Network Limited.) - C:\WINDOWS\system32\amwrtdrv.sys =>.AOMEI International Network Limited® SR - Boot [07/12/2019] [ 131896] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys =>.Microsoft® SR - Auto [06/12/2017] [ 131984] ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe =>.ASUSTeK Computer Inc.® SR - Demand [14/01/2021] [ 113496] ASUS Touch Service (AsusPTPDrv) . (.ASUSTek COMPUTER INC..) - C:\WINDOWS\System32\drivers\AsusPTPFilter.sys =>.ASUSTek Computer Inc.® SR - Auto [04/09/2019] [ 382712] AtherosSvc (AtherosSvc) . (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Qualcomm Atheros® SR - Demand [22/05/2019] [ 4322552] Qualcomm Extensible Wire (athr) . (.Qualcomm Atheros Communications, Inc..) - C:\WINDOWS\System32\drivers\athw10x.sys =>.Qualcomm Atheros® SR - System [08/05/2015] [ 20096] ATKWMIACPI Driver (ATKWMIACPIIO) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys =>.Microsoft Windows Hardware Compatibility Publisher® SR - Boot [07/12/2019] [ 533816] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys =>.Microsoft® SR - Auto [30/10/2023] [ 1102320] AOMEI Backupper Scheduler Service (Backupper Service) . (.AOMEI International Network Limited.) - C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe =>.AOMEI International Network Limited® SR - Demand [07/12/2019] [ 9728] bcmfn2 Service (bcmfn2) . (...) - C:\WINDOWS\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation SR - Demand [04/09/2019] [ 69368] BtFilter (BtFilter) . (.Qualcomm.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros® SR - Boot [07/12/2019] [ 319800] (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys =>.Microsoft® SR - Demand [07/12/2019] [ 1853752] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys =>.Microsoft® SS - Demand [16/09/2020] [ 513272] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHeciSvc.exe =>.Intel(R) pGFX 2020® SR - Auto [16/09/2020] [ 527608] Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020® SR - Demand [27/12/2016] [ 35760] ddmdrv (ddmdrv) . (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\system32\ddmdrv.sys =>.CHENGDU AOMEI Tech Co., Ltd.® SR - Auto [00/00/0000] [ 0] Device Activation Service (DevActSvc) . (...) - C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe (.not file.) [Unsigned] =>.ASUSTeK SR - Demand [30/09/2022] [ 167440] SAMSUNG Mobile USB Com (dg_ssudbus) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudbus2.sys =>.Samsung Electronics CO., LTD.® SR - Demand [09/07/2020] [ 78088] (dptf_acpi) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dptf_acpi.inf_amd64_839d0f9e900d7b16\dptf_acpi.sys {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation SR - Demand [09/07/2020] [ 74504] (dptf_cpu) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\dptf_cpu.sys {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation SR - Auto [06/02/2023] [ 32448] EaseUS UPDATE SERVICE (EaseUS UPDATE SERVICE) . (.CHENGDU YIWO Tech Development Co., Ltd..) - C:\Program Files (x86)\EaseUS\ENS\ensserver.exe =>.CHENGDU YIWO Tech Development Co., Ltd.® SR - Boot [07/12/2019] [ 3418936] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys =>.Microsoft® SR - Demand [29/12/2022] [ 27728] epmdkdrv (epmdkdrv) . (.Microsoft.) - C:\WINDOWS\System32\epmdkdrv.sys =>.Microsoft® SR - Boot [29/12/2022] [ 30136] EPMVolFl (EPMVolFl) . (.Windows (R) Codename Longhorn DDK provider.) - C:\WINDOWS\System32\drivers\EPMVolFl.sys =>.CHENGDU YIWO Tech Development Co., Ltd.® SR - Auto [09/07/2020] [ 2260744] Intel(R) Dynamic Tuning ser (esifsvc) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\esif_uf.exe {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation SR - Demand [09/07/2020] [ 421128] (esif_lf) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\esif_lf.sys {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation SR - Boot [29/12/2022] [ 76344] EUDCPEPM (EUDCPEPM) . (.CHENGDU YIWO Tech Development Co., Ltd.) - C:\WINDOWS\System32\drivers\EUDCPEPM.sys =>.Microsoft® SR - System [29/12/2022] [ 24656] EUEDKEPM (EUEDKEPM) . (.CHENGDU YIWO Tech Development Co., Ltd.) - C:\WINDOWS\system32\drivers\EUEDKEPM.sys =>.Microsoft® SR - Demand [00/00/0000] [ 0] EuGdiDrv (EuGdiDrv) . (...) - C:\WINDOWS\System32\EuGdiDrv.sys (.not file.) [Unsigned] =>.EaseUS Software SR - Auto [11/11/2023] [ 2438128] Foxit PDF Reader Update Service (FoxitReaderUpdateService) . (.Foxit Software Inc..) - C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe {0B7593CAAEA54207BBC0C65A153F7601}. =>.Foxit Software Inc. SR - Auto [06/02/2019] [ 153168] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [06/02/2019] [ 153168] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Demand [30/05/2018] [ 73680] HfAudio (HfAudio) . (.Screenovate Technologies Ltd..) - C:\WINDOWS\System32\drivers\HfAudio.sys =>.SCREENOVATE TECHNOLOGIES LTD.® SR - Demand [19/11/2020] [ 32696] ASUS Wireless Radio Control (HIDSwitch) . (.ASUS.) - C:\WINDOWS\System32\drivers\AsRadioControl.sys =>.ASUSTek Computer Inc.® SR - Boot [07/12/2019] [ 64312] (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys =>.Microsoft® SR - Auto [00/00/0000] [ 0] HuaweiHiSuiteService64.exe (HuaweiHiSuiteService64.exe) . (...) - C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe (.not file.) [Unsigned] =>.Huawei Technologies Co.,Ltd SR - Demand [27/12/2019] [ 226560] HWUSBSERSP (HWHandSet) . (.Huawei Technologies Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\hw_quusbmdm.sys [Unsigned] =>.Huawei Technologies Co., Ltd. SR - Demand [07/12/2019] [ 36352] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation SR - Demand [07/12/2019] [ 91136] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation SR - Demand [07/12/2019] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 93184] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 112128] Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 96256] Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 175104] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 177152] Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [Unsigned] =>.Intel Corporation SR - Demand [07/12/2019] [ 177664] Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [Unsigned] =>.Intel Corporation SR - Demand [09/12/2018] [ 96960] Intel(R) Serial IO GPIO (iaLPSS2_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [09/12/2018] [ 186560] Intel(R) Serial IO I2C Dri (iaLPSS2_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [09/12/2018] [ 153792] Intel(R) Serial IO SPI Dri (iaLPSS2_SPI) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2_SPI.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [09/12/2018] [ 300736] Intel(R) Serial IO UART D (iaLPSS2_UART2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [07/12/2019] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Group® SR - Demand [07/12/2019] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [Unsigned] =>.Intel Corporation SR - Boot [03/05/2017] [ 891392] Intel Chipset SATA RAID Con (iaStorA) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorA.sys =>.Intel(R) Rapid Storage Technology® SR - Boot [07/12/2019] [ 884752] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys =>.Microsoft® SR - Boot [07/12/2019] [ 412176] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys =>.Microsoft® SR - Demand [07/12/2019] [ 558904] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys =>.Microsoft® SR - Auto [27/08/2020] [ 814368] ICEsound Service (ICEsoundService) . (.ICEpower A/S.) - C:\WINDOWS\System32\ICEsoundService64.exe =>.ICEpower a/s® SR - Demand [16/09/2020] [27076856] (igfx) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igdkmd64.sys =>.Intel(R) pGFX 2020® SR - Auto [16/09/2020] [ 409336] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe =>.Intel(R) pGFX 2020® SR - Auto [25/05/2020] [ 443344] Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) . (.Copyright CANON INC. 2006-2020.) - C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe =>.Canon Inc.® SR - Demand [27/08/2020] [ 6125656] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp.® SR - Demand [12/08/2020] [ 349968] Son Intel(R) pour écrans (IntcDAud) . (.Intel(R) Corporation.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys =>.Intel(R) pGFX 2020® SS - Demand [17/09/2020] [ 861976] Intel(R) Capability Licen (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\SocketHeciServer.exe =>.Intel(R) Trust Services® SR - Auto [17/09/2020] [ 784664] Intel(R) TPM Provisi (Intel(R) TPM Provisioning Service) . (.Intel(R) Corporation.) - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\TPMProvisioningService.exe =>.Intel(R) Trust Services® SR - Boot [07/12/2019] [ 172344] (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys =>.Microsoft® SR - Demand [28/07/2010] [ 29720] Initio Driver for USB Default Controller (ivusb) . (.Initio Corporation.) - C:\WINDOWS\System32\drivers\ivusb.sys =>.Initio Corporation® SR - Auto [24/01/2021] [ 628608] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Auto [02/09/2021] [ 4064384] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe {0ADE8114D7679B066F2DB2DFD2F67AC2}. =>.Intel Corporation SR - Boot [07/12/2019] [ 108856] (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys =>.Microsoft® SR - Boot [07/12/2019] [ 124216] (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys =>.Microsoft® SR - Boot [07/12/2019] [ 135992] (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys =>.Microsoft® SR - Boot [07/12/2019] [ 82744] (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys =>.Microsoft® SR - Boot [01/05/2022] [ 21480] MbamElam (MbamElam) . (.Malwarebytes.) - C:\WINDOWS\System32\DRIVERS\MbamElam.sys =>.Microsoft® SS - Demand [31/12/2023] [ 9405400] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe =>.Malwarebytes Inc.® SR - Demand [31/12/2023] [ 239576] MBAMSwissArmy (MBAMSwissArmy) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\mbamswissarmy.sys =>.Microsoft® SR - Boot [07/12/2019] [ 59704] (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys =>.Microsoft® SR - Boot [07/12/2019] [ 81720] (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys =>.Microsoft® SR - Boot [07/12/2019] [ 105480] (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys =>.Microsoft® SR - Boot [07/12/2019] [ 575800] (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys =>.Microsoft® SR - Demand [25/02/2021] [ 308072] Intel(R) Management Engine Interfa (MEIx64) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_605dda426937489f\x64\TeeDriverW10x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group® SR - Demand [07/12/2019] [ 1131320] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys =>.Microsoft® SS - Demand [11/12/2023] [ 239520] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SR - Boot [07/12/2019] [ 63800] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys =>.Microsoft® SR - Demand [07/12/2019] [ 146232] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys =>.Microsoft® SR - Boot [07/12/2019] [ 150328] (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys =>.Microsoft® SR - Boot [07/12/2019] [ 166200] (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys =>.Microsoft® SR - Boot [07/12/2019] [ 58680] (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys =>.Microsoft® SR - Boot [07/12/2019] [ 68408] (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys =>.Microsoft® SR - Demand [29/07/2020] [ 1146456] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.® SR - Demand [30/05/2018] [ 58320] ScrHIDDriver2 (ScrHIDDriver2) . (.Screenovate Technologies Ltd..) - C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys =>.SCREENOVATE TECHNOLOGIES LTD.® SR - Boot [07/12/2019] [ 44856] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys =>.Microsoft® SR - Boot [07/12/2019] [ 81720] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys =>.Microsoft® SR - Boot [07/12/2019] [ 209720] (SmartSAMD) . (.Microsemi Corportation.) - C:\WINDOWS\System32\drivers\SmartSAMD.sys =>.Microsoft® SR - Demand [30/09/2022] [ 174112] SAMSUNG Mobile USB Modem Dri (ssudmdm) . (.Samsung Electronics Co., Ltd..) - C:\WINDOWS\System32\DRIVERS\ssudmdm.sys =>.Samsung Electronics CO., LTD.® SR - Boot [07/12/2019] [ 31032] (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys =>.Microsoft® SR - Auto [18/10/2023] [20992824] TeamViewer (TeamViewer) . (.TeamViewer Germany GmbH.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe =>.TeamViewer Germany GmbH® SR - Boot [07/12/2019] [ 166712] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys =>.Microsoft® SR - Boot [07/12/2019] [ 305464] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys =>.Microsoft® SR - Demand [07/12/2019] [ 36152] WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys =>.Microsoft® SR - Demand [07/12/2019] [ 73016] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys =>.Microsoft® ---\\ TACHES PLANIFIEES EN AUTOMATIQUE (Registre) (20) - 10s O38 - TASK: {016CED43-50A0-41C9-9279-E848CB3AFCF1} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc. O38 - TASK: {2664D530-616D-4073-85CD-CDD7AC1D5724} [64Bits][\pdfforge GmbH\PDF Architect 9\Installer updater] - (.pdfforge GmbH. - PDF Architect 9 Installer.) -- C:\ProgramData\PDF Architect 9\Installation\PDF_Architect_9_Installer.exe [13916600] O38 - TASK: {2D8C2F16-12CE-4C7F-935E-6DC153085E36} [64Bits][\ATK Package 36D18D69AFC3] - (.ASUSTek Computer Inc. - Simulate Store App Execution Application.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304] =>.ASUSTek Computer Inc. O38 - TASK: {46E34BD2-4124-40E7-AE81-C3CE99516E6F} [64Bits][\RtHDVBg_ListenToDevice] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618080] =>.Realtek Semiconductor O38 - TASK: {59B7325A-97B4-4297-A390-4A914510DEA8} [64Bits][\NCH Software\VideoPadCacheDeleteAll] - (.NCH Software - VideoPad - Logiciel de montage vidéo.) -- C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [7480952] =>.NCH Software O38 - TASK: {713A0F1B-DB7C-4D9B-93FC-ABA391DB4FDB} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc. O38 - TASK: {8578E174-B039-47E7-A7BC-5DBF49E08E42} [64Bits][\Mozilla\Firefox Background Update 308046B0AF4A39CB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] =>.Mozilla Corporation O38 - TASK: {93A69DBA-EF3A-4EE1-BBC5-22E439D3A642} [64Bits][\RTKCPL] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618080] =>.Realtek Semiconductor O38 - TASK: {B6B90B9A-C570-4275-B76F-92FDA67BFE49} [64Bits][\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB] - (.Mozilla Foundation - La tâche Agent de navigateur par défaut eff.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232] =>.Mozilla Foundation O38 - TASK: {F1D9E40E-1FE5-459D-8E0F-870145FFD07D} [64Bits][\ATK Package A22126881260] - (.ASUSTek Computer Inc. - Simulate Store App Execution Application.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304] =>.ASUSTek Computer Inc. C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google Inc. C:\WINDOWS\System32\Tasks\pdfforge GmbH\PDF Architect 9\Installer updater - (.pdfforge GmbH..) -- C:\ProgramData\PDF Architect 9\Installation\PDF_Architect_9_Installer.exe [/check-updates] C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3 - (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [-CancelShutdown] =>.ASUSTek Computer Inc. C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice - (.Realtek Semiconductor.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [/AECBYLISTENTOSTATUS] =>.Realtek Semiconductor C:\WINDOWS\System32\Tasks\NCH Software\VideoPadCacheDeleteAll - (.NCH Software.) -- C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [-bgtask delcache.-bgtask] =>.NCH Software C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc. C:\WINDOWS\System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB - (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe [--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla] =>.Mozilla Corporation C:\WINDOWS\System32\Tasks\RTKCPL - (.Realtek Semiconductor.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [/runcplsilence] =>.Realtek Semiconductor C:\WINDOWS\System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - (.Mozilla Foundation.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [do-task "308046B0AF4A39CB.do-task] =>.Mozilla Foundation C:\WINDOWS\System32\Tasks\ATK Package A22126881260 - (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [] =>.ASUSTek Computer Inc. ---\\ APPLICATIONS LANCEES AU DÉMARRAGE DU SYSTÈME (11) - 1s O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\WINDOWS\system32\SecurityHealthSystray.exe [Unsigned] =>.Microsoft Corporation O4 - HKLM\..\Run: [Classic Start Menu] . (.Passionate-Coder - Classic Start Menu.) -- C:\Program Files\Classic Start\ClassicStartMenu.exe [Unsigned] =>.Passionate-Coder O4 - HKLM\..\Run: [LogiOptions] . (.Logitech, Inc. - LogiOptions.exe (UNICODE).) -- C:\Program Files\Logitech\LogiOptions\LogiOptions.exe =>.Logitech Inc® O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_22350488793874620E19ED0FD4B93123] . (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe [Unsigned] =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe [Unsigned] =>.Microsoft Corporation O4 - HKLM\..\Wow6432Node\Run: [Aimersoft Helper Compact.exe] . (.AimerSoft - AimerSoft Studio.) -- C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [Unsigned] =>.Aimersoft O4 - HKLM\..\Wow6432Node\Run: [CanonQuickMenu] . (.CANON INC. - Canon Quick Menu.) -- C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE =>.Canon Inc.® O4 - HKUS\S-1-5-21-3783334410-572661787-2892577619-1001\..\Run: [MicrosoftEdgeAutoLaunch_22350488793874620E19ED0FD4B93123] . (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft® ---\\ PROCESSUS LANCES (45) - 9s [MD5.D14FC1262D996D3BC1125619BEAEBF0C] - (.Intel Corporation - Intel HD Graphics Drivers for Windows(R).) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe [527608] [PID.1616] =>.Intel(R) pGFX 2020® [MD5.3C2C6121D2E8D9069995BA2D3318A91A] - (.Intel Corporation - IntelCpHeciSvc Executable.) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHeciSvc.exe [513272] [PID.1212] =>.Intel(R) pGFX 2020® [MD5.4C9B5205851C626A34F7AD3B2487C66A] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe [409336] [PID.2200] =>.Intel(R) pGFX 2020® [MD5.867570264D43B578477DA68485961CED] - (.ASUSTek Computer Inc. - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [131984] [PID.3404] =>.ASUSTeK Computer Inc.® [MD5.546CCCC70E397A5273145ECE316E023F] - (. - Windows Setup API.) -- C:\Windows\System32\drivers\AdminService.exe [382712] [PID.3804] [Unsigned] =>.Atheros [MD5.0981101B92EFF6A5274092DF19B3F549] - (.AOMEI International Network Limited - AOMEI Backupper Schedule task service.) -- C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe [1102320] [PID.3812] =>.AOMEI International Network Limited® [MD5.69742A900B0C7E18628F0249662289A1] - (...) -- C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [32448] [PID.3964] =>.CHENGDU YIWO Tech Development Co., Ltd.® [MD5.3ACACCEBA55E79FD922DA0E958564C9F] - (.Foxit Software Inc. - Foxit PDF Reader Update Service.) -- C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2438128] [PID.4028] {0B7593CAAEA54207BBC0C65A153F7601}. =>.Foxit Software Inc. [MD5.D925653D173FF0C2ACA8BFA4D7CE212B] - (.ICEpower A/S - ICEpower ICEsound APO service.) -- C:\WINDOWS\system32\ICEsoundService64.exe [814368] [PID.4040] [Unsigned] =>.ICEpower a/s [MD5.5035F3B1D63DBD7C60E5CAC341E7B3B1] - (.Copyright CANON INC. 2006-2020 - Inkjet Printer/Scanner/Fax Extended Survey.) -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe [443344] [PID.4048] =>.Canon Inc.® [MD5.29434648ACD087E603A9FA89C11272F0] - (.Intel Corporation - Intel(R) Dynamic Tuning Service.) -- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\esif_uf.exe [2260744] [PID.4072] {00B15FDDBBCD5912920FFAB85C4F6064D5}. =>.Intel Corporation [MD5.0BE2246FCCB28383AB8590DD73CADAED] - (.TeamViewer Germany GmbH - TeamViewer.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe [20992824] [PID.4252] =>.TeamViewer Germany GmbH® [MD5.4708F291E40C2F7678E6367E97A04A58] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe [628608] [PID.4744] =>.Intel(R) Embedded Subsystems and IP Blocks Group® [MD5.2EFCF7FA138CFCF66D83C59E7E71BECA] - (.ASUSTek Computer Inc. - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [299920] [PID.6136] =>.ASUSTeK Computer Inc.® [MD5.7BFC0C70D92FFDCB5B7A175E9AF661D5] - (.ASUSTek Computer Inc. - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [238480] [PID.6888] =>.ASUSTeK Computer Inc.® [MD5.E7657BC0773E197A63D94C2D8AC593D8] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [443280] [PID.6920] =>.ASUSTeK Computer Inc.® [MD5.9174A621F9574C1FBD802D7EA131A2C2] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxEM.exe [896760] [PID.7140] =>.Intel(R) pGFX 2020® [MD5.120A8F5752425BF45457D8EBEB4DE15B] - (.Passionate-Coder - Classic Start Menu.) -- C:\Program Files\Classic Start\ClassicStartMenu.exe [185856] [PID.6812] [Unsigned] =>.Passionate-Coder [MD5.17F4ABC9F07E14AF7F85FEC171F70536] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [809952] [PID.7968] =>.Microsoft® [MD5.D91952FDC34E3DA4AE40CC3CF72F88BE] - (.Logitech, Inc. - LogiOptions.exe (UNICODE).) -- C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1675680] [PID.9588] =>.Logitech Inc® [MD5.5193FE833C95AB826BD89F2B5E5C28AA] - (.Logitech, Inc. - LogiOptionsMgr.exe (UNICODE).) -- C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe [15569824] [PID.9716] =>.Logitech Inc® [MD5.E96AB6C18D5B2C16ED9E2B3C4D3FF667] - (.Logitech - Logi Overlay.) -- C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe [665504] [PID.9740] =>.Logitech Inc® [MD5.DC18459B9B0703117B29931CC874594D] - (.ASUSTek Computer Inc. - .) -- C:\Program Files\WindowsApps\B9ECED6F.ASUSBatteryHealthCharging_1.0.7.0_x86__qmba6cd70vzyy\ASUS Battery Health Charging\BhcMgr.exe [2488208] [PID.9800] =>.ASUSTeK Computer Inc.® [MD5.B6853E638D2D1B97C29CC25611854CF6] - (.George Jopling - Caps Lock Key Utility Program.) -- C:\Program Files (x86)\Caps Lock\Caps Lock.exe [60416] [PID.9572] [Unsigned] [MD5.7451CF28003495708160C83D65504711] - (.ASUS - ACMON.) -- C:\Program Files\WindowsApps\B9ECED6F.Splendid_1.0.15.0_x64__qmba6cd70vzyy\ACMON.exe [88576] [PID.11256] [Unsigned] =>.ASUS [MD5.4762A2B205591C034187E2053BE8B7C1] - (.Intel Corporation - igfxext Module.) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxext.exe [354040] [PID.10156] =>.Intel(R) pGFX 2020® [MD5.0817C7F1EFDA2B7DD42CADA26945258F] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618080] [PID.11536] =>.Realtek Semiconductor Corp.® [MD5.B6DF711D88E4CD1C662769690837DD30] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19570976] [PID.11808] =>.Realtek Semiconductor Corp.® [MD5.E5FDC451BCCA908B163205127A5E4496] - (...) -- C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe [293376] [PID.3420] [Unsigned] [MD5.84D98217CF2D2465442039FAF0DA12C7] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe [462752] [PID.12088] =>.Mozilla Corporation® [MD5.84D98217CF2D2465442039FAF0DA12C7] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe [462752] [PID.9520] =>.Mozilla Corporation® [MD5.84D98217CF2D2465442039FAF0DA12C7] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe [462752] [PID.10296] =>.Mozilla Corporation® [MD5.84D98217CF2D2465442039FAF0DA12C7] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe [462752] [PID.10716] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.3600] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.7448] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.3264] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.3768] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.8256] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.6284] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.10976] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.9180] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.5680] =>.Mozilla Corporation® [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.4348] =>.Mozilla Corporation® [MD5.867E2E9CC57C5E6AD54FD1B9FF785E7D] - (.Nicolas Coolman - ZHPSuite.) -- D:\NICOLE\Bureau\ZHPSuite.exe [3538080] [PID.3208] [Unsigned] =>.Nicolas Coolman [MD5.6D9D654F685A31B5D27E318DD65DB025] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [674720] [PID.4756] =>.Mozilla Corporation® ---\\ CHROME, Démarrage, Recherche, Extensions (3) - 1s G2 - GCE: Preference [nicbo][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion} G2 - GCE: Preference [nicbo][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet} G2 - GCE: Preference [nicbo][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion} ---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (20) - 2s P2 - EXT FILE: (.uBlock Origin.) -- C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\extensions\uBlock0@raymondhill.net.xpi [Unsigned] =>.uBlock Origin P2 - EXT FILE: (.Mozilla - Firefox.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi =>.Mozilla P2 - EXT FILE: (.Mozilla - Firefox.) -- C:\Program Files\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi =>.Mozilla P2 - EXT FILE: (.Mozilla - Firefox.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla P2 - EXT FILE: (.Mozilla - Firefox.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi =>.Mozilla P2 - EXT FILE: (.Mozilla - Firefox.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\bookmarkbackups =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\crashes =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\datareporting =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\extension-store =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\extensions =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\gmp-gmpopenh264 =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\gmp-widevinecdm =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\minidumps =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\saved-telemetry-pings =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\security_state =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\sessionstore-backups =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\settings =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\shader-cache =>Mozilla Corporation C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\storage =>Mozilla Corporation ---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (6) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus17win10.msn.com/ =>.Microsoft Corporation R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus17win10.msn.com/ =>.Microsoft Corporation R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.19041.3758 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation ---\\ INTERNET EXPLORER, Site de confiance et site sensible (1) - 0s ~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad) ---\\ MICROSOFT EDGE, Plugin,Favoris,Démarrage,Recherche,Extension (3) - 0s E2 - GCE: Preference [nicbo][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion} E2 - GCE: Preference [nicbo][User Data\Default\Extensions] [jmjflgjpcpepeafmmgdpfkogkghcpiha] Edge relevant text changes =>.Legitimate E2 - GCE: Preference [nicbo][User Data\Default\Local Extension Settings] [jdiccldimpdaibmpdkjnbmckianbfold] =>.Microsoft Corporation ---\\ INTERNET EXPLORER,Proxy Management (3) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft ---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s F2 - REG:system.ini: UserInit= F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ ETUDE DU FICHIER HOSTS (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (40) ---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (4) - 0s O2 - BHO: IEToEdge BHO [64Bits] - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} . (.Microsoft Corporation - IEToEdge BHO.) -- C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.91\BHO\ie_to_edge_bho_64.dll =>.Microsoft® O2 - BHO: Canon Easy-WebPrint EX BHO [64Bits] - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll =>.Canon Inc.® O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.Passionate-Coder - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Start\ClassicExplorer64.dll [Unsigned] =>.Passionate-Coder O2 - BHO: ClassicIEBHO Class [64Bits] - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} . (.Passionate-Coder - Customizations for the title bar and status.) -- C:\Program Files\Classic Start\ClassicIEDLL_64.dll [Unsigned] =>.Passionate-Coder ---\\ RACCOURCIS GLOBAL STARTUP (68) - 14s O4 - GS\Desktop [nicbo]: 0- photos Redmi-2023 - Raccourci.lnk . (...) D:\NICOLE\Images\0-photos Redmi2023-04 [Unsigned] O4 - GS\Desktop [nicbo]: 000-a-Redmi 2023 - Raccourci.lnk . (...) D:\NICOLE\Images\0-photos Redmi2023-06 [Unsigned] O4 - GS\Desktop [nicbo]: 2-CLUB DU SOURIRE - Raccourci.lnk . (...) D:\NICOLE\Documents\2-CLUB DU SOURIRE [Unsigned] O4 - GS\Desktop [nicbo]: A2-Liste Goyeurs et anciens2021-2022.xls.lnk . (...) D:\NICOLE\Documents\1-GOYEURS DE RETZ\Année 2022\Bureau\A2-Liste Goyeurs et anciens2021-2022.xls [Unsigned] O4 - GS\Desktop [nicbo]: appels classés 2023.xlsx - Raccourci.lnk . (...) D:\NICOLE\Documents\00-Arnaques téléphones\appels classés 2023.xlsx [Unsigned] O4 - GS\Desktop [nicbo]: appels téléphoniques 2023.xls - Raccourci.lnk . (...) D:\NICOLE\Documents\00-Arnaques téléphones\appels téléphoniques 2023.xls [Unsigned] O4 - GS\Desktop [nicbo]: Arrêter.lnk . (.Microsoft Corporation - Outil d’arrêt et d’annotation Windows.) C:\Windows\System32\shutdown.exe /s /t 0 =>.Microsoft Corporation O4 - GS\Desktop [nicbo]: BIBLIOTHEQUE - Raccourci.lnk . (...) D:\NICOLE\Documents\BIBLIOTHEQUE [Unsigned] O4 - GS\Desktop [nicbo]: Captvty.exe - Raccourci.lnk . (.2011-2023, Guillaume - Captvty.) D:\NICOLE\Documents\3a-Programmes installés ou recherches\Captvty\captvty-2.10.6\Captvty.exe [Unsigned] O4 - GS\Desktop [nicbo]: EDF 2023-08.pdf.lnk . (...) D:\NICOLE\Documents\5-Dossiers divers à conserver\EDF\EDF 2023-08-tarifs.pdf [Unsigned] O4 - GS\Desktop [nicbo]: EDF conso.lnk . (...) D:\NICOLE\Documents\5-Dossiers divers à conserver\EDF\conso journalière 2022-23 [Unsigned] O4 - GS\Desktop [nicbo]: Fiche Budget 2023.xls - Raccourci.lnk . (...) D:\NICOLE\Documents\2-CLUB DU SOURIRE\2024\AG 2024-Bilan 2023\Fiche Budget 2023.xls [Unsigned] O4 - GS\Desktop [nicbo]: GOYEURS DE RETZ.lnk . (...) D:\NICOLE\Documents\1-GOYEURS DE RETZ [Unsigned] O4 - GS\Desktop [nicbo]: IJ Scan Utility.lnk . (.CANON INC. - Canon IJ Scan Utility.) C:\Program Files (x86)\Canon\IJ Scan Utility\SCANUTILITY.exe =>.Canon Inc.® O4 - GS\Desktop [nicbo]: LibreOffice Calc.lnk . (.The Document Foundation - Calc - Calculs, analyses et ge.) C:\Program Files (x86)\LibreOffice\program\scalc.exe [Unsigned] =>.The Document Foundation O4 - GS\Desktop [nicbo]: LibreOffice Writer.lnk . (.The Document Foundation - Writer - Création et édition d.) C:\Program Files (x86)\LibreOffice\program\swriter.exe [Unsigned] =>.The Document Foundation O4 - GS\Desktop [nicbo]: Recommandations aux possesseurs de nouveaux PC !.html - Raccourci.lnk . (...) D:\NICOLE\Documents\0-Tutos divers\Recommandations aux possesseurs de nouveaux PC !.html [Unsigned] O4 - GS\Desktop [nicbo]: REDEMARRER.lnk . (.Microsoft Corporation - Outil d’arrêt et d’annotation Windows.) C:\Windows\System32\shutdown.exe /r /t 0 =>.Microsoft Corporation O4 - GS\Desktop [nicbo]: Relevés compteur.xlsx.lnk . (...) D:\NICOLE\Documents\4-Docs Nicole\MAISON\Relevés compteur.xlsx [Unsigned] O4 - GS\Desktop [nicbo]: Willemse - Guide de jardinage Willemse.pdf - Raccourci.lnk . (...) D:\NICOLE\Documents\5-Dossiers divers à conserver\Divers et VPC\Willemse\Willemse - Guide de jardinage Willemse.pdf [Unsigned] O4 - GS\Desktop [nicbo]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\nicbo\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [nicbo]: EaseUS Partition Master.lnk . (.EaseUS - EaseUS Partition Manager.) C:\Program Files (x86)\EaseUS\EaseUS Partition Master\bin\EPMUI.exe =>.CHENGDU YIWO Tech Development Co., Ltd.® O4 - GS\Quicklaunch [nicbo]: FoneDog Toolkit pour Android.lnk . (.FoneDog - FoneDog Toolkit for Android.) C:\Program Files\FoneDog\FoneDog Toolkit - Android Data Recovery\FoneDog Toolkit - Android Data Recovery.exe [Unsigned] =>.FoneDog O4 - GS\Quicklaunch [nicbo]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft® O4 - GS\sendTo [nicbo]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [nicbo]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [nicbo]: TeamViewer.lnk . (.TeamViewer Germany GmbH - TeamViewer.) C:\Program Files\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer Germany GmbH® O4 - GS\sendTo [nicbo]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation O4 - GS\sendTo [nicbo]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\nicbo\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.® O4 - GS\sendTo [nicbo]: VirusTotal.lnk . (...) C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe [Unsigned] O4 - GS\TaskBar [nicbo]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation O4 - GS\TaskBar [nicbo]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\TaskBar [nicbo]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --profile-directory=Default =>.Microsoft® O4 - GS\TaskBar [nicbo]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - .) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [Unsigned] =>.Mozilla Corporation O4 - GS\Programs [nicbo]: Navigation privée de Firefox.lnk . (.Mozilla Corporation - Navigation privée de Firefox.) C:\Program Files (x86)\Mozilla Firefox\private_browsing.exe [Unsigned] =>.Mozilla Corporation O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: Google Earth Pro.lnk . (.Google LLC - Google Earth Pro.) C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe [Unsigned] =>.Google LLC O4 - GS\CommonDesktop [Public]: LibreOffice 7.5.lnk . (.The Document Foundation - LibreOffice, la suite de produ.) C:\Program Files (x86)\LibreOffice\program\soffice.exe [Unsigned] =>.The Document Foundation O4 - GS\CommonDesktop [Public]: Malwarebytes.lnk . (.Malwarebytes - .) C:\Program Files (x86)\Malwarebytes\Anti-Malware\mbam.exe [Unsigned] =>.Malwarebytes O4 - GS\CommonDesktop [Public]: Stellarium.lnk . (.Stellarium team - Stellarium, the free open source planetariu.) C:\Program Files\Stellarium\stellarium.exe [Unsigned] =>.Stellarium team O4 - GS\Programs [Public]: Navigation privée de Firefox.lnk . (.Mozilla Corporation - Navigation privée de Firefox.) C:\Program Files (x86)\Mozilla Firefox\private_browsing.exe [Unsigned] =>.Mozilla Corporation O4 - GS\Startup [Public]: Caps Lock.lnk . (.George Jopling - Caps Lock Key Utility Program.) C:\Program Files (x86)\Caps Lock\Caps Lock.exe [Unsigned] O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur multimédia Windows.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Disketch - Logiciel pour étiquettes de CD.lnk . (.NCH Software - Disketch - Logiciel pour étiquettes de CD.) C:\Program Files (x86)\NCH Software\Disketch\disketch.exe =>.NCH Software® O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\ProgramsCommon [Public]: GIMP 2.10.32.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.10.exe =>.Jernej Simončič® O4 - GS\ProgramsCommon [Public]: Google Earth Pro.lnk . (.Google LLC - Google Earth Pro.) C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe [Unsigned] =>.Google LLC O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Malwarebytes.lnk . (.Malwarebytes - .) C:\Program Files (x86)\Malwarebytes\Anti-Malware\mbam.exe [Unsigned] =>.Malwarebytes O4 - GS\ProgramsCommon [Public]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft® O4 - GS\ProgramsCommon [Public]: Navigation privée de Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\private_browsing.exe =>.Mozilla Corporation® O4 - GS\ProgramsCommon [Public]: PC Health Check.lnk . (...) C:\Program Files (x86)\PCHealthCheck\PCHealthCheck.exe [Unsigned] =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Prism - Convertisseur de fichiers vidéo.lnk . (.NCH Software - Prism - Convertisseur de fichiers vidéo.) C:\Program Files (x86)\NCH Software\Prism\prism.exe =>.NCH Software® O4 - GS\ProgramsCommon [Public]: Suite NCH.lnk . (.NCH Software - VideoPad - Logiciel de montage vidéo.) C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe -extsuite =>.NCH Software, Inc.® O4 - GS\ProgramsCommon [Public]: TeamViewer.lnk . (.TeamViewer Germany GmbH - TeamViewer.) C:\Program Files\TeamViewer\TeamViewer.exe =>.TeamViewer Germany GmbH® O4 - GS\ProgramsCommon [Public]: Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation® O4 - GS\ProgramsCommon [Public]: VideoPad - Logiciel de montage vidéo.lnk . (.NCH Software - VideoPad - Logiciel de montage vidéo.) C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe =>.NCH Software, Inc.® O4 - GS\ProgramsCommon [Public]: Visionneuse Microsoft PowerPoint .lnk . (...) C:\Windows\Installer\{95140000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe =>.Microsoft® ---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{7a3024ec-173c-495a-8e99-2f68be8ad1e4}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{e8e8c3db-1f91-436e-9316-0cc79400e9a6}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress ---\\ PROTOCOLE ADDITIONNEL (22) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation ---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation ---\\ CLE DE REGISTRE EXPLORER StartupApproved (16) - 0s [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Viber =>.Viber [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:MicrosoftEdgeAutoLaunch_22350488793874620E19ED0FD4B93123 [HKEY_USERS\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd [HKEY_USERS\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Viber =>.Viber [HKEY_USERS\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:MicrosoftEdgeAutoLaunch_22350488793874620E19ED0FD4B93123 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Classic Start Menu =>.IvoSoft [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Logitech Download Assistant =>.Logitech Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:LogiOptions =>.Logitech Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:CanonQuickMenu =>.Canon Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:BrowserPlugInHelper [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Aimersoft Helper Compact.exe =>.Aimersoft Software [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:DelaypluginInstall [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:ASUSCD64.cmd [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:Caps Lock.lnk ---\\ COMPOSANTS ACTIVESETUP INSTALLES (ASIC) (6) - 1s O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft® O40 - ASIC: Microsoft Edge [64Bits] - {9459C573-B17A-45AE-9F64-1857B5D58CEE} . (.Microsoft Corporation - Microsoft Edge Installer.) -- C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.91\Installer\setup.exe =>.Microsoft® ---\\ LOGICIELS INSTALLES (73) - 19s O42 - Logiciel: Alcor Micro USB Card Reader Driver - (.Alcor Micro Corp..) [HKLM][64Bits] -- {AEEF33DD-E3B9-4049-B709-0E546C2B1AAB} [Unsigned] =>.Alcor Micro Corp. (Hidden) O42 - Logiciel: Alcor Micro USB Card Reader Driver - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{AEEF33DD-E3B9-4049-B709-0E546C2B1AAB} [Unsigned] =>.Alcor Micro Corp. O42 - Logiciel: AOMEI Backupper - (.AOMEI International Network Limited..) [HKLM][64Bits] -- {A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1 [Unsigned] =>.AOMEI International Network Limited. O42 - Logiciel: AOMEI Partition Assistant 9.15.0 - (.AOMEI International Network Limited..) [HKLM][64Bits] -- {02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1 [Unsigned] =>.AOMEI International Network Limited. O42 - Logiciel: ASUS PTP Driver - (.ASUS.) [HKLM][64Bits] -- {7618E419-9124-4E6C-9AF4-487A6DDEC1C5} [Unsigned] =>.ASUS O42 - Logiciel: ASUS Sync Drivers - (.Screenovate Technologies Ltd..) [HKLM][64Bits] -- {086FE7AE-1622-4617-92B8-F54FAAB372D0} [Unsigned] =>.Screenovate Technologies Ltd. O42 - Logiciel: ATK Package (ASUS Keyboard Hotkeys) - (.ASUSTeK COMPUTER INC..) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE} [Unsigned] =>.ASUSTek Computer Inc. O42 - Logiciel: Attribute Changer 9.10a - (.Romain Petges.) [HKLM][64Bits] -- {27263813-8BDE-4CD2-84D3-02536743428A}_is1 [Unsigned] =>.Romain Petges O42 - Logiciel: AudioWizard - (.ICEpower a/s.) [HKLM][64Bits] -- {57E770A2-2BAF-4CAA-BAA3-BD896E2254D3} [Unsigned] =>.ICEpower a/s O42 - Logiciel: Avast Update Helper - (.AVAST Software.) [HKLM][64Bits] -- {19C3AB22-3718-4E4D-B203-242F5001565B} [Unsigned] =>.AVAST Software (Hidden) O42 - Logiciel: Canon Easy-WebPrint EX - (.Canon Inc..) [HKLM][64Bits] -- Easy-WebPrint EX =>.Canon Inc.® O42 - Logiciel: Canon IJ Scan Utility - (.Canon Inc..) [HKLM][64Bits] -- Canon_IJ_Scan_Utility =>.Canon Inc.® O42 - Logiciel: Canon Inkjet Printer/Scanner/Télécopieur Extended Survey Program - (.Canon Inc..) [HKLM][64Bits] -- CANONIJPLM100 =>.Canon Inc.® O42 - Logiciel: Canon MG3600 series MP Drivers - (.Canon Inc..) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series =>.Canon Inc.® O42 - Logiciel: Canon MG3600 series On-screen Manual - (.Canon Inc..) [HKLM][64Bits] -- Canon MG3600 series On-screen Manual =>.Canon Inc.® O42 - Logiciel: Canon My Image Garden - (.Canon Inc..) [HKLM][64Bits] -- Canon My Image Garden =>.Canon Inc.® O42 - Logiciel: Canon My Image Garden Design Files - (.Canon Inc..) [HKLM][64Bits] -- Canon My Image Garden Design Files =>.Canon Inc.® O42 - Logiciel: Canon My Printer - (.Canon Inc..) [HKLM][64Bits] -- CanonMyPrinter =>.Canon Inc.® O42 - Logiciel: Canon Quick Menu - (.Canon Inc..) [HKLM][64Bits] -- CanonQuickMenu =>.Canon Inc.® O42 - Logiciel: Caps Lock version 4.2.0 - (.George Jopling.) [HKLM][64Bits] -- {5D94201D-1A3F-470C-9946-96C76A5A2596}_is1 [Unsigned] O42 - Logiciel: Classic Start - (.PassionateCoder.) [HKLM][64Bits] -- {763176A7-B178-4016-B92A-F95D2F0FF830} [Unsigned] O42 - Logiciel: Disketch - Logiciel pour étiquettes de CD - (.NCH Software.) [HKLM][64Bits] -- Disketch =>.NCH Software® O42 - Logiciel: EaseUS Partition Master - (.EaseUS.) [HKLM][64Bits] -- EaseUS Partition Master_is1 =>.CHENGDU YIWO Tech Development Co., Ltd.® O42 - Logiciel: Enregistrement utilisateur de Canon MG3600 series - (.‭Canon Inc..) [HKLM][64Bits] -- Enregistrement utilisateur de Canon MG3600 series =>.Canon Inc.® O42 - Logiciel: FoneDog Toolkit pour Android 2.0.52 - (.FoneDog.) [HKLM][64Bits] -- {7A8C4E7C-62D5-47E6-B93B-80C5DD48CBA4}_is1 [Unsigned] =>.FoneDog O42 - Logiciel: Foxit PDF Reader - (.Foxit Software Inc..) [HKLM][64Bits] -- Foxit Reader_is1 {0B7593CAAEA54207BBC0C65A153F7601}. =>.Foxit Software Inc. O42 - Logiciel: GIMP 2.10.32-1 - (.The GIMP Team.) [HKLM][64Bits] -- GIMP-2_is1 =>.Jernej Simončič® O42 - Logiciel: Google Earth Pro - (.Google.) [HKLM][64Bits] -- {F27DBA46-80E1-4858-9285-19198FFFBF3D} [Unsigned] =>.Google O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {94E05108-3E4E-4F2E-AC5F-33A1B22B779C} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel(R) Corporation.) [HKLM][64Bits] -- {17408817-d415-4768-a160-ae6d46d6bdb0} =>.Intel(R) Software and Firmware Products® (Hidden) O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corporation.) [HKLM][64Bits] -- {654EE65D-FAA4-4EA6-8C07-DC94E6A304D4} =>.Intel(R) Software® O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel(R) Embedded Subsystems and IP Blocks Group® O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {871689FB-5226-4641-8ED2-6FDAA2DF65C1} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {D9D63ED7-B857-450C-B46A-1371885084E5} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {E9B9A1A5-6398-4C99-8FDE-10794F6505C5} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {2D80C096-13FF-402A-BF65-04C8E67944C5} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel(R) Rapid Storage Technology® O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {0AF335C8-701E-41FA-8333-4702475CF32A} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {9FD91C5C-44AE-4D9D-85BE-AE52816B0294} =>.Intel(R) Serial IO® O42 - Logiciel: Intel(R) Trusted Connect Service Client x64 - (.Intel Corporation.) [HKLM][64Bits] -- {C9552825-7BF2-4344-BA91-D3CD46F4C442} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Trusted Connect Service Client x86 - (.Intel Corporation.) [HKLM][64Bits] -- {C9552825-7BF2-4344-BA91-D3CD46F4C441} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Intel(R) Trusted Connect Services Client - (.Intel Corporation.) [HKLM][64Bits] -- {2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75} =>.Intel(R) Trust Services® (Hidden) O42 - Logiciel: LAV Filters 0.74.1 - (.Hendrik Leppkes.) [HKLM][64Bits] -- lavfilters_is1 =>.Hendrik Leppkes® O42 - Logiciel: LibreOffice 7.5 Help Pack (French) - (.The Document Foundation.) [HKLM][64Bits] -- {76583B32-B11A-4314-AEB2-B3465126A42A} [Unsigned] =>.The Document Foundation O42 - Logiciel: LibreOffice 7.5.9.2 - (.The Document Foundation.) [HKLM][64Bits] -- {B33AB53C-67EE-44AE-AC56-0C60E5702CDE} [Unsigned] =>.The Document Foundation O42 - Logiciel: Logi Bolt - (.Logi.) [HKLM][64Bits] -- LogiBolt =>.Logitech Inc® O42 - Logiciel: Logitech Options - (.Logitech.) [HKLM][64Bits] -- LogiOptions =>.Logitech Inc® O42 - Logiciel: Malwarebytes version 4.6.7.301 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes Inc.® O42 - Logiciel: Microsoft VC++ redistributables repacked. - (.Intel Corporation.) [HKLM][64Bits] -- {D736B443-AF61-4775-9488-DDF59F87BD1F} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Microsoft VC++ redistributables repacked. - (.Intel Corporation.) [HKLM][64Bits] -- {F102A269-3323-427C-914D-E5E71F61453D} [Unsigned] =>.Intel Corporation (Hidden) O42 - Logiciel: Mozilla Firefox (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 121.0 (x64 fr) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService [Unsigned] =>.Mozilla O42 - Logiciel: Mozilla Thunderbird (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 115.6.0 (x64 fr) =>.Mozilla Corporation® O42 - Logiciel: PDF Architect 9 OCR TESS Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {0E7A94D4-20E0-46A8-8FFB-08456CA7C9B2} [Unsigned] =>.pdfforge GmbH (Hidden) O42 - Logiciel: PDF Architect 9 View Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {74BB811D-F993-4ABC-89DF-C235946DE387} [Unsigned] =>.pdfforge GmbH (Hidden) O42 - Logiciel: PDFCreator - (.Avanquest pdfforge GmbH.) [HKLM][64Bits] -- {CF96ADDA-9A70-4424-AE74-39654F8DCE0A} [Unsigned] O42 - Logiciel: Prism - Convertisseur de fichiers vidéo - (.NCH Software.) [HKLM][64Bits] -- Prism =>.NCH Software® O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801} [Unsigned] =>.Qualcomm Atheros O42 - Logiciel: Qualcomm Atheros Client Installation Program - (.Qualcomm Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33} =>.Qualcomm Atheros® O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp.® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.® O42 - Logiciel: Skype version 8.66 - (.Skype Technologies S.A..) [HKLM][64Bits] -- Skype_is1 =>.Skype Software Sarl® O42 - Logiciel: Stellarium 0.18.3 - (.Stellarium team.) [HKLM][64Bits] -- Stellarium_is1 [Unsigned] =>.Stellarium team O42 - Logiciel: TeamViewer - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer =>.TeamViewer Germany GmbH® O42 - Logiciel: VdhCoApp 1.6.3 - (.DownloadHelper.) [HKLM][64Bits] -- weh-iss-net.downloadhelper.coapp_is1 [Unsigned] =>.DownloadHelper O42 - Logiciel: Viber - (.Viber Media S.a.r.l.) [HKCU][64Bits] -- {4fc25591-5dca-42b3-9efd-2eeb50b77e16} =>.Viber Media S.à r.l.® O42 - Logiciel: Viber - (.Viber Media S.a.r.l.) [HKLM][64Bits] -- {C1FC938B-F4B3-450D-B269-13F40774772A} [Unsigned] =>.Viber Media S.a.r.l (Hidden) O42 - Logiciel: VideoPad - Logiciel de montage vidéo - (.NCH Software.) [HKLM][64Bits] -- VideoPad =>.NCH Software, Inc.® O42 - Logiciel: VirusTotal Uploader 2.2 - (.VirusTotal.) [HKLM][64Bits] -- VTUploader [Unsigned] =>.VirusTotal O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player [Unsigned] =>.VideoLAN O42 - Logiciel: WinDirStat 1.1.2 - (.Seifert Systems.) [HKCU][64Bits] -- WinDirStat [Unsigned] =>.Seifert Systems O42 - Logiciel: Windows Driver Package - ASUS (AsusPTPDrv) HIDClass (04/21/2017 11.0.0.16) - (.ASUS.) [HKLM][64Bits] -- 7517F958DC823EE4C12050C16EFF05886960ABEF =>.ASUSTeK Computer Inc.® O42 - Logiciel: WinFlash - (.ASUSTeK COMPUTER INC..) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D} [Unsigned] =>.ASUSTek Computer Inc. ---\\ CLE DE REGISTRE SOFTWARE HKCU & HKLM (220) - 19s HKLM\SOFTWARE\AE Protection =>.Legitimate HKLM\SOFTWARE\Apple Inc. =>.Apple Inc. HKLM\SOFTWARE\ASUS =>.ASUS HKLM\SOFTWARE\Atheros =>.Qualcomm Atheros HKLM\SOFTWARE\AVAST Software =>.AVAST Software HKLM\SOFTWARE\Canon =>.Canon HKLM\SOFTWARE\Chromium =>.Chromium HKLM\SOFTWARE\CVSM =>.Legitimate HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation HKLM\SOFTWARE\Dolby =>.Dolby HKLM\SOFTWARE\DownloadHelper =>.DownloadHelper HKLM\SOFTWARE\DTS =>.Creative Technology HKLM\SOFTWARE\EaseUS =>.EaseUS Software HKLM\SOFTWARE\fCoder =>.fCoder HKLM\SOFTWARE\Fortemedia =>.Lugert Europe HKLM\SOFTWARE\Foxit Software =>.Foxit Software HKLM\SOFTWARE\GIMP 2.10 HKLM\SOFTWARE\Google =>.Google HKLM\SOFTWARE\Huawei technologies =>.Huawei Technologies HKLM\SOFTWARE\ICEpower =>.ICEpower HKLM\SOFTWARE\Intel =>.Intel HKLM\SOFTWARE\IPS =>.EgisTec HKLM\SOFTWARE\Khronos =>.Khronos HKLM\SOFTWARE\Knowles =>.Knowles Electronics HKLM\SOFTWARE\LibreOffice =>.LibreOffice HKLM\SOFTWARE\Logi HKLM\SOFTWARE\Logishrd =>.LogiShrd HKLM\SOFTWARE\Logitech =>.Logitech HKLM\SOFTWARE\Malwarebytes =>.Malwarebytes HKLM\SOFTWARE\Mozilla =>.Mozilla HKLM\SOFTWARE\mozilla.org =>.mozilla.org HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\Nuance =>.Nuance HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\OEM =>.OEM HKLM\SOFTWARE\OpenSSH =>.OpenBSD HKLM\SOFTWARE\Partner =>.Google Inc. HKLM\SOFTWARE\PassionateCoder =>.Passionate Coder HKLM\SOFTWARE\PDF Architect 6 =>.pdfforge GmbH HKLM\SOFTWARE\PDF Architect 7 =>.pdfforge GmbH HKLM\SOFTWARE\PDF Architect 8 =>.pdfforge GmbH HKLM\SOFTWARE\PDF Architect 9 =>.pdfforge GmbH HKLM\SOFTWARE\pdfforge =>.pdfforge HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKLM\SOFTWARE\RTLSetup =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\Screenovate HKLM\SOFTWARE\SonicFocus =>.Sonic Focus HKLM\SOFTWARE\SoundResearch =>.Sound Research HKLM\SOFTWARE\SRS Labs =>.SRS Labs HKLM\SOFTWARE\TeamViewer =>.TeamViewer GmbH HKLM\SOFTWARE\The Document Foundation =>.The Document Foundation HKLM\SOFTWARE\VideoLAN =>.VideoLan Team HKLM\SOFTWARE\Volatile =>.Microsoft Corporation HKLM\SOFTWARE\Windows =>.Microsoft Corporation HKLM\SOFTWARE\Wondershare =>.Wondershare HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation HKLM\SOFTWARE\Yamaha APO =>.Yamaha Corp. HKLM\SOFTWARE\WOW6432Node\Aimersoft =>.Aimersoft Software HKLM\SOFTWARE\WOW6432Node\AimersoftSysMenuDATA =>.Aimersoft Software HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc. HKLM\SOFTWARE\WOW6432Node\ASUS =>.ASUS HKLM\SOFTWARE\WOW6432Node\Atheros =>.Qualcomm Atheros HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software HKLM\SOFTWARE\WOW6432Node\Canon =>.Canon HKLM\SOFTWARE\WOW6432Node\Canon_Inc_IC =>.Canon Inc. HKLM\SOFTWARE\WOW6432Node\Cygwin =>.Cygwin HKLM\SOFTWARE\WOW6432Node\EUClone HKLM\SOFTWARE\WOW6432Node\fCoder =>.fCoder HKLM\SOFTWARE\WOW6432Node\Foxit Software =>.Foxit Software HKLM\SOFTWARE\WOW6432Node\Google =>.Google HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel HKLM\SOFTWARE\WOW6432Node\iSkysoft =>.iSkysoft Software HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla HKLM\SOFTWARE\WOW6432Node\mozilla.org =>.mozilla.org HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\WOW6432Node\NCH Software =>.NCH Software HKLM\SOFTWARE\WOW6432Node\NCH Swift Sound =>.NCH Swift Sound HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\WOW6432Node\PDF Architect 8 =>.pdfforge GmbH HKLM\SOFTWARE\WOW6432Node\PDF Architect 9 =>.pdfforge GmbH HKLM\SOFTWARE\WOW6432Node\Qualcomm Atheros =>.Qualcomm Atheros HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\WOW6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\WOW6432Node\RecordDISCXXX =>.Propellerhead Reason HKLM\SOFTWARE\WOW6432Node\Skype =>.Skype HKLM\SOFTWARE\WOW6432Node\Softgogo =>.YNET Technology Co.,Ltd HKLM\SOFTWARE\WOW6432Node\SRS Labs =>.SRS Labs HKLM\SOFTWARE\WOW6432Node\SuppHelpDir =>.Toshiba Corporation HKLM\SOFTWARE\WOW6432Node\VideoLAN =>.VideoLan Team HKLM\SOFTWARE\WOW6432Node\Virustotal =>.VirusTotal HKLM\SOFTWARE\WOW6432Node\WafCX =>.WafCX HKLM\SOFTWARE\WOW6432Node\Wondershare =>.Wondershare HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\Aimersoft =>.Aimersoft Software HKCU\SOFTWARE\Anvsoft =>.AnvSoft Inc HKCU\SOFTWARE\AOMEI =>.AOMEI Tech Co HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation HKCU\SOFTWARE\ASUS =>.ASUS HKCU\SOFTWARE\Attribute Changer HKCU\SOFTWARE\AVAST Software =>.AVAST Software HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKCU\SOFTWARE\BugSplat =>.Bugsplat Game HKCU\SOFTWARE\Canon =>.Canon HKCU\SOFTWARE\CanonBJ =>.Canon Inc. HKCU\SOFTWARE\CanonIJSIP HKCU\SOFTWARE\Chromium =>.Chromium HKCU\SOFTWARE\EaseUS =>.EaseUS Software HKCU\SOFTWARE\fCoder =>.fCoder HKCU\SOFTWARE\FoneDog =>.FoneDog HKCU\SOFTWARE\Foxit Software =>.Foxit Software HKCU\SOFTWARE\Google =>.Google HKCU\SOFTWARE\Google Chrome Offer =>.Legitimate HKCU\SOFTWARE\GPL Ghostscript =>.GPL Ghostscript HKCU\SOFTWARE\Intel =>.Intel HKCU\SOFTWARE\iSkysoft =>.iSkysoft Software HKCU\SOFTWARE\LAV =>.LAV Inc HKCU\SOFTWARE\Licenses =>.Microsoft Corporation HKCU\SOFTWARE\LogiShrd =>.LogiShrd HKCU\SOFTWARE\Logitech =>.Logitech HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes HKCU\SOFTWARE\Mozilla =>.Mozilla HKCU\SOFTWARE\NCH Software =>.NCH Software HKCU\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound HKCU\SOFTWARE\Partition Assistant HKCU\SOFTWARE\PassionateCoder =>.Passionate Coder HKCU\SOFTWARE\PCurVersion =>.Unknown HKCU\SOFTWARE\PDF Architect 8 =>.pdfforge GmbH HKCU\SOFTWARE\PDF Architect 9 =>.pdfforge GmbH HKCU\SOFTWARE\pdfforge =>.pdfforge HKCU\SOFTWARE\QtProject =>.QtProject HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\Seifert =>.Seifert Systems HKCU\SOFTWARE\SyncEngines =>.Microsoft Corporation HKCU\SOFTWARE\TeamViewer =>.TeamViewer GmbH HKCU\SOFTWARE\The Document Foundation =>.The Document Foundation HKCU\SOFTWARE\Thunderbird =>.Thunderbird HKCU\SOFTWARE\Trolltech =>.Trolltech HKCU\SOFTWARE\Viber =>.Viber HKCU\SOFTWARE\Viber Media S.à r.l =>.Viber Media HKCU\SOFTWARE\Waterfox =>.Waterfox HKCU\SOFTWARE\Wintertree =>.Wintertree Software HKCU\SOFTWARE\WixSharp =>.Legitimate HKCU\SOFTWARE\Wondershare =>.Wondershare HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKCU\SOFTWARE\WsAudio_Device =>.Olympus Corporation HKCU\SOFTWARE\WSVCUPlugin =>.Wondershare HKCU\SOFTWARE\Yandex =>.Yandex HKCU\SOFTWARE\ZHP =>.Nicolas Coolman HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation HKCU\SOFTWARE\AppDataLow\Software\Canon =>.Canon HKU\.DEFAULT\SOFTWARE\AVAST Software =>.AVAST Software HKU\.DEFAULT\SOFTWARE\Canon =>.Canon HKU\.DEFAULT\SOFTWARE\fCoder =>.fCoder HKU\.DEFAULT\SOFTWARE\Foxit Software =>.Foxit Software HKU\.DEFAULT\SOFTWARE\Google =>.Google HKU\.DEFAULT\SOFTWARE\Malwarebytes =>.Malwarebytes HKU\.DEFAULT\SOFTWARE\PDF Architect 7 =>.pdfforge GmbH HKU\.DEFAULT\SOFTWARE\PDF Architect 8 =>.pdfforge GmbH HKU\.DEFAULT\SOFTWARE\PDF Architect 9 =>.pdfforge GmbH HKU\.DEFAULT\SOFTWARE\pdfforge =>.pdfforge HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Aimersoft =>.Aimersoft Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Anvsoft =>.AnvSoft Inc HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\AOMEI =>.AOMEI Tech Co HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\ASUS =>.ASUS HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Attribute Changer HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\AVAST Software =>.AVAST Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\BugSplat =>.Bugsplat Game HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Canon =>.Canon HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\CanonBJ =>.Canon Inc. HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\CanonIJSIP HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Chromium =>.Chromium HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\EaseUS =>.EaseUS Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\fCoder =>.fCoder HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\FoneDog =>.FoneDog HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Foxit Software =>.Foxit Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Google =>.Google HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Google Chrome Offer =>.Legitimate HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\GPL Ghostscript =>.GPL Ghostscript HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Intel =>.Intel HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\iSkysoft =>.iSkysoft Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\LAV =>.LAV Inc HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Licenses =>.Microsoft Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\LogiShrd =>.LogiShrd HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Logitech =>.Logitech HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Malwarebytes =>.Malwarebytes HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Mozilla =>.Mozilla HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\NCH Software =>.NCH Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Partition Assistant HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\PassionateCoder =>.Passionate Coder HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\PCurVersion =>.Unknown HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\PDF Architect 8 =>.pdfforge GmbH HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\PDF Architect 9 =>.pdfforge GmbH HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\pdfforge =>.pdfforge HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\QtProject =>.QtProject HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Seifert =>.Seifert Systems HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\SyncEngines =>.Microsoft Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\TeamViewer =>.TeamViewer GmbH HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\The Document Foundation =>.The Document Foundation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Thunderbird =>.Thunderbird HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Trolltech =>.Trolltech HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Viber =>.Viber HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Viber Media S.à r.l =>.Viber Media HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Waterfox =>.Waterfox HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Wintertree =>.Wintertree Software HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\WixSharp =>.Legitimate HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Wondershare =>.Wondershare HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\WsAudio_Device =>.Olympus Corporation HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\WSVCUPlugin =>.Wondershare HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\Yandex =>.Yandex HKU\S-1-5-21-3783334410-572661787-2892577619-1001\SOFTWARE\ZHP =>.Nicolas Coolman ---\\ PACKAGES (10) - 1s C:\Program Files (x86)\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm - (.WhatsApp Inc..) [][WhatsApp] C:\Program Files (x86)\WindowsApps\7EE7776C.LinkedInforWindows_3.0.18.0_x64__w1wdnht996qgy - (.LinkedIn.) [][LinkedIn] =>LinkedIn C:\Program Files (x86)\WindowsApps\B9ECED6F.ASUSBatteryHealthCharging_1.0.7.0_x86__qmba6cd70vzyy - (..) [][ASUS Battery Health Charging] C:\Program Files (x86)\WindowsApps\B9ECED6F.ASUSGIFTBOX_3.2.4.0_x64__qmba6cd70vzyy - (.ASUSTeK COMPUTER INC..) [][ASUS GIFTBOX] =>ASUSTeK COMPUTER INC. C:\Program Files (x86)\WindowsApps\B9ECED6F.ASUSProductRegistrationProgram_3.0.3.0_x86__qmba6cd70vzyy - (..) [][ASUS Product Registration Program] C:\Program Files (x86)\WindowsApps\B9ECED6F.eManual_2.0.3.0_x86__qmba6cd70vzyy - (..) [][eManual] C:\Program Files (x86)\WindowsApps\B9ECED6F.Splendid_1.0.15.0_x64__qmba6cd70vzyy - (..) [][Splendid] C:\Program Files (x86)\WindowsApps\MicrosoftWindows.UndockedDevKit_10.0.19041.3636_neutral_neutral_cw5n1h2txyewy - (.Microsoft Corporation.) [][UDK Package] =>Microsoft Corporation C:\Program Files (x86)\WindowsApps\NcsiUwpApp_1000.19041.3636.0_neutral_neutral_8wekyb3d8bbwe - (.Microsoft.) [][NcsiUwpApp] =>Microsoft C:\Program Files (x86)\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0 - (.Legitimate.) [][ASUS Sync] ---\\ CONTENU DES DOSSIERS PROGRAMMES (180) - 12s O43 - CFD: 16/10/2018 - [] D -- C:\Program Files\Asus =>.SCREENOVATE TECHNOLOGIES LTD.® O43 - CFD: 08/03/2020 - [] D -- C:\Program Files\Attribute Changer [Unsigned] O43 - CFD: 16/05/2021 - [] D -- C:\Program Files\Canon =>.Canon Inc.® O43 - CFD: 04/09/2020 - [] HD -- C:\Program Files\CanonBJ =>.Canon Inc. O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Classic Start [Unsigned] O43 - CFD: 26/01/2023 - [] D -- C:\Program Files\FolderPainter [Unsigned] O43 - CFD: 01/05/2022 - [] D -- C:\Program Files\FoneDog [Unsigned] =>.FoneDog O43 - CFD: 25/09/2021 - [] D -- C:\Program Files\GIMP 2 =>.Jernej Simončič® O43 - CFD: 11/01/2023 - [] D -- C:\Program Files\Google =>.Google LLC® O43 - CFD: 12/06/2020 - [] D -- C:\Program Files\Intel =>.Intel Corporation O43 - CFD: 30/12/2023 - [0] D -- C:\Program Files\iSkysoft =>.iSkySoft O43 - CFD: 30/12/2023 - [] D -- C:\Program Files\LibreOffice =>.LibreOffice O43 - CFD: 30/11/2021 - [] D -- C:\Program Files\Logi =>.Logitech Inc® O43 - CFD: 30/11/2021 - [] D -- C:\Program Files\Logitech =>.Logitech Inc® O43 - CFD: 31/12/2023 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes O43 - CFD: 30/12/2023 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla O43 - CFD: 21/12/2023 - [] D -- C:\Program Files\Mozilla Thunderbird =>.Mozilla O43 - CFD: 23/07/2021 - [] D -- C:\Program Files\net.downloadhelper.coapp [Unsigned] O43 - CFD: 26/08/2023 - [] D -- C:\Program Files\PDFCreator =>.Philip Chinery O43 - CFD: 12/06/2020 - [] D -- C:\Program Files\Realtek =>.Realtek O43 - CFD: 09/10/2023 - [] D -- C:\Program Files\RUXIM =>.Microsoft® O43 - CFD: 25/07/2019 - [] D -- C:\Program Files\Stellarium [Unsigned] O43 - CFD: 31/12/2023 - [] D -- C:\Program Files\TeamViewer =>.TeamViewer GmbH O43 - CFD: 04/02/2023 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team O43 - CFD: 07/04/2021 - [] HD -- C:\Program Files\WindowsApps.tmp [Unsigned] O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\AmUStor =>.Alocr Micro O43 - CFD: 29/11/2023 - [] D -- C:\Program Files (x86)\AOMEI =>.AOMEI Tech Co O43 - CFD: 21/03/2023 - [] D -- C:\Program Files (x86)\AOMEI Partition Assistant =>.AOMEI Tech Co O43 - CFD: 31/12/2023 - [] D -- C:\Program Files (x86)\ASUS =>.ASUSTek Computer Inc.® O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\Bluetooth Suite =>.ASUSTeK O43 - CFD: 16/05/2021 - [] D -- C:\Program Files (x86)\Canon =>.Canon Inc.® O43 - CFD: 21/04/2021 - [] D -- C:\Program Files (x86)\Caps Lock [Unsigned] O43 - CFD: 21/03/2023 - [] D -- C:\Program Files (x86)\EaseUS =>.EaseUS Software O43 - CFD: 13/08/2023 - [] D -- C:\Program Files (x86)\Foxit Software =>.Foxit Software O43 - CFD: 31/12/2023 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\ICEpower =>.ICEpower O43 - CFD: 01/05/2022 - [0] D -- C:\Program Files (x86)\iMobie =>.iMobie Inc O43 - CFD: 16/10/2018 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation O43 - CFD: 01/07/2022 - [] D -- C:\Program Files (x86)\IObit =>.IObit O43 - CFD: 01/05/2022 - [] D -- C:\Program Files (x86)\LAV Filters =>.Hendrik Leppkes O43 - CFD: 30/12/2023 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla O43 - CFD: 19/04/2020 - [] D -- C:\Program Files (x86)\NCH Software =>.NCH Software O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\Qualcomm Atheros =>.Qualcomm Atheros O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek O43 - CFD: 24/10/2023 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team O43 - CFD: 17/06/2022 - [] D -- C:\Program Files (x86)\VirusTotalUploader2 =>.VirusTotal O43 - CFD: 06/08/2019 - [] D -- C:\Program Files (x86)\VulkanRT =>.LunarG, Inc O43 - CFD: 06/12/2020 - [] D -- C:\Program Files (x86)\WinDirStat =>.Seifert Systems O43 - CFD: 16/11/2023 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 29/11/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper =>.AOMEI Tech Co O43 - CFD: 21/03/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant =>.AOMEI Tech Co O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS =>.ASUS O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Attribute Changer O43 - CFD: 16/05/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3600 series Manual =>.Canon Inc. O43 - CFD: 16/05/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities =>.Canon Inc. O43 - CFD: 21/04/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Caps Lock O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Start O43 - CFD: 21/03/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master =>.EaseUS Software O43 - CFD: 16/05/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement utilisateur de Canon MG3600 series =>.Canon Inc. O43 - CFD: 01/05/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FoneDog =>.FoneDog O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower =>.ICEpower O43 - CFD: 01/05/2022 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters =>.Hendrik Leppkes O43 - CFD: 30/12/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.5 =>.LibreOffice O43 - CFD: 30/11/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi O43 - CFD: 30/11/2021 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech =>.Logitech O43 - CFD: 26/08/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator =>.Philip Chinery O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek =>.Realtek O43 - CFD: 15/11/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype O43 - CFD: 12/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium O43 - CFD: 24/10/2023 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team O43 - CFD: 15/01/2020 - [] D -- C:\ProgramData\Aimersoft =>.Aimersoft Software O43 - CFD: 16/10/2018 - [] D -- C:\ProgramData\AmUStor =>.Alocr Micro O43 - CFD: 01/02/2019 - [] D -- C:\ProgramData\Aomei =>.AOMEI Tech Co O43 - CFD: 29/11/2023 - [] D -- C:\ProgramData\AomeiBR =>.AOMEI Technology O43 - CFD: 04/10/2022 - [] D -- C:\ProgramData\AOMEIPA =>.AOMEI Tech Co O43 - CFD: 24/01/2019 - [] D -- C:\ProgramData\APRP =>.APRP O43 - CFD: 31/12/2023 - [] D -- C:\ProgramData\ASUS =>.ASUS O43 - CFD: 21/03/2023 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org O43 - CFD: 04/09/2020 - [] D -- C:\ProgramData\Canon =>.Canon O43 - CFD: 04/09/2020 - [] HD -- C:\ProgramData\CanonBJ =>.Canon Inc. O43 - CFD: 04/09/2020 - [] HD -- C:\ProgramData\CanonIJEGV =>.Canon Inc. O43 - CFD: 13/09/2022 - [] HD -- C:\ProgramData\CanonIJMyPrinter =>.Canon Inc. O43 - CFD: 18/12/2023 - [] D -- C:\ProgramData\CanonIJPLM =>.Canon Inc. O43 - CFD: 16/05/2021 - [] HD -- C:\ProgramData\CanonIJQuickMenu =>.Canon Inc. O43 - CFD: 04/09/2020 - [] HD -- C:\ProgramData\CanonIJScan =>.Canon Inc. O43 - CFD: 16/05/2021 - [] D -- C:\ProgramData\CanonIJWSpt =>.Canon Inc. O43 - CFD: 04/07/2019 - [0] D -- C:\ProgramData\ClassicStart O43 - CFD: 01/05/2022 - [] D -- C:\ProgramData\FoneDog =>.FoneDog O43 - CFD: 25/01/2019 - [] D -- C:\ProgramData\Foxit ContentPlatform =>.Foxit Corporation O43 - CFD: 19/12/2022 - [] D -- C:\ProgramData\Foxit Software =>.Foxit Software O43 - CFD: 03/01/2020 - [] D -- C:\ProgramData\Intel =>.Intel Corporation O43 - CFD: 01/07/2022 - [] D -- C:\ProgramData\IObit =>.IObit O43 - CFD: 30/11/2021 - [] D -- C:\ProgramData\Logishrd =>.Logitech Inc. O43 - CFD: 31/12/2023 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes O43 - CFD: 01/07/2022 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation O43 - CFD: 31/12/2023 - [] D -- C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 =>.Mozilla Corporation O43 - CFD: 19/04/2020 - [] D -- C:\ProgramData\NCH Software =>.NCH Software O43 - CFD: 13/03/2022 - [] D -- C:\ProgramData\PDF Architect 8 =>.pdfforge GmbH O43 - CFD: 01/06/2023 - [] D -- C:\ProgramData\PDF Architect 9 =>.pdfforge GmbH O43 - CFD: 01/05/2022 - [] D -- C:\ProgramData\Piriform =>.Piriform O43 - CFD: 16/10/2018 - [] D -- C:\ProgramData\Qualcomm Atheros =>.Qualcomm Atheros O43 - CFD: 21/03/2023 - [] D -- C:\ProgramData\SystemAcCrux O43 - CFD: 01/05/2022 - [] D -- C:\ProgramData\Thunder Network =>.Thunder Network O43 - CFD: 30/12/2023 - [] D -- C:\ProgramData\Wondershare =>.Wondershare O43 - CFD: 10/01/2020 - [] D -- C:\Program Files (x86)\Common Files\Aimersoft =>.Aimersoft Software O43 - CFD: 16/10/2018 - [] D -- C:\Program Files (x86)\Common Files\Atheros =>.Qualcomm Atheros O43 - CFD: 29/11/2023 - [] D -- C:\Program Files (x86)\Common Files\Foxit O43 - CFD: 06/08/2019 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation O43 - CFD: 25/01/2021 - [0] D -- C:\Users\nicbo\AppData\Roaming\Adobe =>.Adobe O43 - CFD: 04/09/2020 - [] D -- C:\Users\nicbo\AppData\Roaming\Canon =>.Canon O43 - CFD: 21/04/2021 - [] D -- C:\Users\nicbo\AppData\Roaming\CapsLock O43 - CFD: 03/02/2019 - [] D -- C:\Users\nicbo\AppData\Roaming\ClassicStart O43 - CFD: 01/02/2019 - [] D -- C:\Users\nicbo\AppData\Roaming\CrystalIdea Software =>.CrystalIdea Software O43 - CFD: 20/11/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\dvdcss =>.VideoLan Team O43 - CFD: 25/01/2019 - [] D -- C:\Users\nicbo\AppData\Roaming\Foxit AgentInformation =>.Foxit Corporation O43 - CFD: 28/01/2019 - [0] D -- C:\Users\nicbo\AppData\Roaming\Foxit Scanner Images O43 - CFD: 03/12/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\Foxit Software =>.Foxit Software O43 - CFD: 25/09/2021 - [] D -- C:\Users\nicbo\AppData\Roaming\GIMP =>.The GIMP Team O43 - CFD: 01/10/2021 - [] D -- C:\Users\nicbo\AppData\Roaming\LibreOffice =>.LibreOffice O43 - CFD: 30/11/2021 - [] D -- C:\Users\nicbo\AppData\Roaming\Logishrd =>.Logitech Inc. O43 - CFD: 30/12/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 17/05/2020 - [] D -- C:\Users\nicbo\AppData\Roaming\NCH Software =>.NCH Software O43 - CFD: 25/09/2020 - [] D -- C:\Users\nicbo\AppData\Roaming\Skype =>.Skype O43 - CFD: 20/11/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\Stellarium O43 - CFD: 15/10/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\TeamViewer =>.TeamViewer GmbH O43 - CFD: 01/10/2019 - [] D -- C:\Users\nicbo\AppData\Roaming\Thunderbird =>.Thunderbird O43 - CFD: 18/08/2021 - [] D -- C:\Users\nicbo\AppData\Roaming\UDC Profiles O43 - CFD: 22/03/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\ViberPC =>.Viber O43 - CFD: 27/12/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\vlc =>.VideoLan Team O43 - CFD: 31/12/2023 - [] D -- C:\Users\nicbo\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 26/04/2019 - [0] D -- C:\Users\nicbo\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} O43 - CFD: 16/11/2020 - [0] D -- C:\Users\nicbo\AppData\Local\Adobe =>.Adobe O43 - CFD: 15/01/2020 - [] D -- C:\Users\nicbo\AppData\Local\Aimersoft =>.Aimersoft Software O43 - CFD: 30/12/2023 - [] D -- C:\Users\nicbo\AppData\Local\ASUS =>.ASUS O43 - CFD: 14/11/2022 - [] D -- C:\Users\nicbo\AppData\Local\babl-0.1 =>.The GIMP Team O43 - CFD: 12/10/2023 - [] D -- C:\Users\nicbo\AppData\Local\Backup =>.Symantec O43 - CFD: 31/03/2020 - [] D -- C:\Users\nicbo\AppData\Local\cache =>.Legitimate O43 - CFD: 30/11/2021 - [] D -- C:\Users\nicbo\AppData\Local\CEF =>.CEF O43 - CFD: 31/12/2023 - [] D -- C:\Users\nicbo\AppData\Local\ClassicStart O43 - CFD: 28/06/2020 - [] D -- C:\Users\nicbo\AppData\Local\com.add0n.node O43 - CFD: 11/11/2023 - [] D -- C:\Users\nicbo\AppData\Local\D3DSCache =>.Legitimate O43 - CFD: 27/01/2019 - [0] D -- C:\Users\nicbo\AppData\Local\DBG =>.DBG O43 - CFD: 21/03/2023 - [] D -- C:\Users\nicbo\AppData\Local\EPMUI O43 - CFD: 01/05/2022 - [] D -- C:\Users\nicbo\AppData\Local\FoneDog =>.FoneDog O43 - CFD: 26/04/2019 - [] D -- C:\Users\nicbo\AppData\Local\fontconfig =>.Portable Apps O43 - CFD: 16/01/2023 - [] D -- C:\Users\nicbo\AppData\Local\Foxit PDF Reader O43 - CFD: 25/01/2019 - [] D -- C:\Users\nicbo\AppData\Local\gegl-0.4 =>.Portable Apps O43 - CFD: 25/09/2021 - [] D -- C:\Users\nicbo\AppData\Local\GIMP =>.The GIMP Team O43 - CFD: 01/08/2022 - [] D -- C:\Users\nicbo\AppData\Local\Google =>.Google O43 - CFD: 14/11/2022 - [] D -- C:\Users\nicbo\AppData\Local\gtk-2.0 =>.GTK Project O43 - CFD: 01/05/2022 - [] D -- C:\Users\nicbo\AppData\Local\iMobie_Inc =>.iMobie Inc O43 - CFD: 24/01/2019 - [] D -- C:\Users\nicbo\AppData\Local\Intel =>.Intel Corporation O43 - CFD: 30/11/2021 - [] D -- C:\Users\nicbo\AppData\Local\LogiBolt O43 - CFD: 31/12/2023 - [] D -- C:\Users\nicbo\AppData\Local\Malwarebytes =>.Malwarebytes O43 - CFD: 01/02/2019 - [] D -- C:\Users\nicbo\AppData\Local\mbam =>.Malwarebytes O43 - CFD: 01/02/2019 - [] D -- C:\Users\nicbo\AppData\Local\mbamtray =>.Malwarebytes O43 - CFD: 30/12/2023 - [] D -- C:\Users\nicbo\AppData\Local\Mozilla =>.Mozilla Corporation O43 - CFD: 12/06/2020 - [] D -- C:\Users\nicbo\AppData\Local\PackageStaging =>.Apcera O43 - CFD: 26/08/2023 - [] D -- C:\Users\nicbo\AppData\Local\pdfforge =>.pdfforge O43 - CFD: 13/04/2021 - [] D -- C:\Users\nicbo\AppData\Local\SquirrelTemp =>.Squirrels O43 - CFD: 25/07/2019 - [] D -- C:\Users\nicbo\AppData\Local\stellarium O43 - CFD: 01/07/2023 - [] D -- C:\Users\nicbo\AppData\Local\TeamViewer =>.TeamViewer GmbH O43 - CFD: 29/09/2019 - [] D -- C:\Users\nicbo\AppData\Local\Thunderbird =>.Thunderbird O43 - CFD: 09/02/2022 - [] D -- C:\Users\nicbo\AppData\Local\Viber =>.Viber O43 - CFD: 24/07/2019 - [] D -- C:\Users\nicbo\AppData\Local\Viber Media S.à r.l =>.Viber Media S.à r.l O43 - CFD: 07/01/2020 - [] D -- C:\Users\nicbo\AppData\Local\WinTools.Info =>.WinTools.Info O43 - CFD: 01/05/2022 - [] D -- C:\Users\nicbo\AppData\Local\Wondershare =>.Wondershare O43 - CFD: 31/12/2023 - [] D -- C:\Users\nicbo\AppData\Local\ZHP =>.Nicolas Coolman O43 - CFD: 06/02/2019 - [] D -- C:\Users\nicbo\AppData\LocalLow\Google =>.Google O43 - CFD: 14/06/2020 - [] D -- C:\Users\nicbo\AppData\LocalLow\Intel =>.Intel Corporation O43 - CFD: 01/10/2023 - [0] D -- C:\Users\nicbo\AppData\LocalLow\Mozilla =>.Mozilla Corporation O43 - CFD: 10/09/2022 - [] D -- C:\Users\nicbo\AppData\LocalLow\webviewdata O43 - CFD: 08/06/2023 - [] D -- D:\NICOLE\Bureau\mise en ordre O43 - CFD: 13/10/2023 - [] D -- D:\NICOLE\Bureau\photos aymeric O43 - CFD: 24/10/2023 - [] D -- D:\NICOLE\Bureau\Raccourcis Maintenance O43 - CFD: 12/06/2020 - [] RD -- C:\Users\nicbo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 12/06/2020 - [] D -- C:\Users\nicbo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber =>.Viber O43 - CFD: 17/06/2022 - [] D -- C:\Users\nicbo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirusTotal Uploader 2.2 =>.VirusTotal O43 - CFD: 15/07/2020 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Macromedia =>.Macromedia ---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation O106 - SIOI: ShareOverlay Class [ShareOverlay] - {594D4122-1F87-41E2-96C7-825FB4796516}. (.Passionate-Coder - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Start\ClassicExplorer64.dll [Unsigned] =>.Passionate-Coder ---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (26) - 2s O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft® O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH2: StartMenuExt [64Bits] - {E595F05F-903F-4318-8B0A-7F633B520D2B} . (.Passionate-Coder - Start Menu Helper Extension.) -- C:\WINDOWS\System32\StartMenuHelper64.dll [Unsigned] =>.Passionate-Coder O108 - CMH3: ACShell [64Bits] - {D3F9A525-8824-497A-BE36-B23E22F141FC} . (.Romain Petges - Attribute Changer Shell Extension.) -- C:\Program Files\Attribute Changer\acshell.dll [Unsigned] =>.Romain Petges O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft® O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation O108 - CMH5: igfxDTCM [64Bits] - {9B5F5829-A529-4B12-814A-E81BCB8D93FC} . (.Intel Corporation - igfxDTCM Module.) -- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxDTCM.dll =>.Microsoft® O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft® O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft® O108 - CMH6: StartMenuExt [64Bits] - {E595F05F-903F-4318-8B0A-7F633B520D2B} . (.Passionate-Coder - Start Menu Helper Extension.) -- C:\WINDOWS\System32\StartMenuHelper64.dll [Unsigned] =>.Passionate-Coder O108 - CMH7: ACShell [64Bits] - {D3F9A525-8824-497A-BE36-B23E22F141FC} . (.Romain Petges - Attribute Changer Shell Extension.) -- C:\Program Files\Attribute Changer\acshell.dll [Unsigned] =>.Romain Petges O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft® O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation ---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (10) - 0s O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft® ---\\ LISTE DES PILOTES DU SYSTEME (98) - 18s O58 - SDL:2019/12/07 10:07:53 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107320] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135416] =>.Microsoft® O58 - SDL:2019/12/07 10:07:47 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\amdgpio2.sys [18432] [Unsigned] =>.Advanced Micro Devices, Inc O58 - SDL:2019/12/07 10:07:47 A . (.Advanced Micro Devices, Inc - AMD I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\amdi2c.sys [45568] [Unsigned] =>.Advanced Micro Devices, Inc O58 - SDL:2019/12/07 10:07:53 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83256] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259384] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26936] =>.Microsoft® O58 - SDL:2020/05/12 00:52:08 A . (.Copyright(C) 2017 - USB Mass Storage Universal Driver.) -- C:\WINDOWS\System32\drivers\AmUStorU.sys [143920] =>.Alcorlink Corp.® O58 - SDL:2019/12/07 10:07:53 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131896] =>.Microsoft® O58 - SDL:2020/11/19 01:02:54 A . (.ASUS - ASUS Wireless Radio Control.) -- C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696] =>.ASUSTek Computer Inc.® O58 - SDL:2021/01/14 16:57:12 A . (.ASUSTek COMPUTER INC. - Asus PTP Filter Driver (x64).) -- C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [113496] =>.ASUSTek Computer Inc.® O58 - SDL:2019/05/22 01:35:20 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw10x.sys [4322552] =>.Qualcomm Atheros® O58 - SDL:2019/12/07 10:07:47 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] [Unsigned] =>.Broadcom Corporation O58 - SDL:2019/09/04 22:57:26 A . (.Qualcomm - BT Filter.) -- C:\WINDOWS\System32\drivers\btfilter.sys [69368] =>.Qualcomm Atheros® O58 - SDL:2019/12/07 10:07:50 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533816] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [144184] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [319800] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys [28672] [Unsigned] =>.Chelsio Communications O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1853752] =>.Microsoft® O58 - SDL:2023/10/11 08:30:47 A . (...) -- C:\WINDOWS\System32\drivers\cimfs.sys [95232] [Unsigned] =>.Microsoft Corporation O58 - SDL:2017/07/07 02:30:10 A . (.Intel Corporation - DPTF ACPI Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_acpi.sys [74168] =>.Intel Corporation® O58 - SDL:2017/07/07 02:30:12 A . (.Intel Corporation - DPTF CPU Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_cpu.sys [69560] =>.Intel Corporation® O58 - SDL:2022/12/29 13:34:30 A . (.Windows (R) Codename Longhorn DDK provider - Disk Performance Driver.) -- C:\WINDOWS\System32\drivers\EPMVolFl.sys [30136] =>.CHENGDU YIWO Tech Development Co., Ltd.® O58 - SDL:2017/07/07 02:30:12 A . (.Intel Corporation - DPTF Zone (64-Bit).) -- C:\WINDOWS\System32\drivers\esif_lf.sys [382392] =>.Intel Corporation® O58 - SDL:2022/12/29 13:30:28 A . (.CHENGDU YIWO Tech Development Co., Ltd - Disk Backup Driver.) -- C:\WINDOWS\System32\drivers\EUDCPEPM.sys [76344] =>.Microsoft® O58 - SDL:2022/12/29 13:30:28 A . (.CHENGDU YIWO Tech Development Co., Ltd - Disk Access Driver.) -- C:\WINDOWS\System32\drivers\EUEDKEPM.sys [24656] =>.Microsoft® O58 - SDL:2019/12/07 10:07:50 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3418936] =>.Microsoft® O58 - SDL:2019/12/27 03:18:54 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944] [Unsigned] =>.Huawei Technologies Co., Ltd. O58 - SDL:2018/05/30 18:47:54 A . (.Screenovate Technologies Ltd. - Phone Call Audio Device.) -- C:\WINDOWS\System32\drivers\HfAudio.sys [73680] =>.SCREENOVATE TECHNOLOGIES LTD.® O58 - SDL:2019/12/07 10:07:53 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64312] =>.Microsoft® O58 - SDL:2019/12/27 03:18:54 A . (.Huawei Technologies Co., Ltd. - ew_cdcacm Driver.) -- C:\WINDOWS\System32\drivers\hw_cdcacm.sys [127360] [Unsigned] =>.Huawei Technologies Co., Ltd. O58 - SDL:2019/12/27 03:18:54 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560] [Unsigned] =>.Huawei Technologies Co., Ltd. O58 - SDL:2019/12/27 03:18:54 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\hw_quusbnet.sys [287232] [Unsigned] =>.Huawei Technologies Co., Ltd. O58 - SDL:2019/12/27 03:18:54 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864] [Unsigned] =>.Huawei Technologies Co., Ltd. O58 - SDL:2019/12/07 10:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36352] [Unsigned] =>.Intel(R) Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91136] [Unsigned] =>.Intel(R) Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [177152] [Unsigned] =>.Intel Corporation O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664] [Unsigned] =>.Intel Corporation O58 - SDL:2018/12/09 23:42:12 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [96960] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2018/12/09 23:42:14 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys [186560] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2018/12/09 23:42:16 A . (.Intel Corporation - Intel(R) Serial IO SPI Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2_SPI.sys [153792] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2018/12/09 23:42:16 A . (.Intel Corporation - Intel(R) Serial IO UART Driver.) -- C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [300736] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2019/12/07 10:07:50 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2019/12/07 10:07:50 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] [Unsigned] =>.Intel Corporation O58 - SDL:2017/05/03 03:01:42 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [891392] =>.Intel(R) Rapid Storage Technology® O58 - SDL:2019/12/07 10:07:54 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [884752] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412176] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [558904] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [172344] =>.Microsoft® O58 - SDL:2010/07/28 23:25:10 A . (.Initio Corporation - Initio Default Vendor Specific Device Drive.) -- C:\WINDOWS\System32\drivers\ivusb.sys [29720] =>.Initio Corporation® O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108856] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124216] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [135992] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82744] =>.Microsoft® O58 - SDL:2022/06/24 12:52:05 A . (.Malwarebytes - Malwarebytes Anti-Exploit.) -- C:\WINDOWS\System32\drivers\mbae64.sys [158640] =>.Microsoft® O58 - SDL:2022/05/01 17:04:31 A . (.Malwarebytes - Malwarebytes Early Launch Anti-Malware Driv.) -- C:\WINDOWS\System32\drivers\MbamElam.sys [21480] =>.Microsoft® O58 - SDL:2023/12/31 08:55:39 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [239576] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59704] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [81720] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [105480] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575800] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [1131320] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63800] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [146232] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150328] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166200] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58680] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [68408] =>.Microsoft® O58 - SDL:2020/07/29 01:01:06 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [1146456] =>.Realtek Semiconductor Corp.® O58 - SDL:2019/12/07 10:08:09 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [48640] [Unsigned] =>.Realtek O58 - SDL:2020/08/27 22:23:26 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [6125656] =>.Realtek Semiconductor Corp.® O58 - SDL:2018/05/30 18:47:54 A . (.Screenovate Technologies Ltd. - Phone Input Device.) -- C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys [58320] =>.SCREENOVATE TECHNOLOGIES LTD.® O58 - SDL:2019/12/07 10:07:53 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44856] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81720] =>.Microsoft® O58 - SDL:2019/12/07 10:07:53 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\WINDOWS\System32\drivers\SmartSAMD.sys [209720] =>.Microsoft® O58 - SDL:2022/09/30 04:23:56 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus2.sys [167440] =>.Samsung Electronics CO., LTD.® O58 - SDL:2022/09/30 04:24:08 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [174112] =>.Samsung Electronics CO., LTD.® O58 - SDL:2019/12/07 10:07:53 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31032] =>.Microsoft® O58 - SDL:2017/07/27 16:47:50 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [206496] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2019/12/07 10:08:37 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [53248] [Unsigned] =>.Microsoft Corporation O58 - SDL:2019/12/07 10:07:54 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166712] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305464] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [36152] =>.Microsoft® O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [73016] =>.Microsoft® O58 - SDL:2019/05/14 11:28:20 A . (...) -- C:\WINDOWS\System32\ambakdrv.sys [51120] =>.CHENGDU AOMEI Tech Co., Ltd.® O58 - SDL:2023/11/29 19:43:23 A . (...) -- C:\WINDOWS\System32\ammntdrv.sys [172928] =>.AOMEI International Network Limited® O58 - SDL:2017/02/28 14:20:18 A . (...) -- C:\WINDOWS\System32\ampa.sys [38320] =>.CHENGDU AOMEI Tech Co., Ltd.® O58 - SDL:2023/11/29 19:43:21 A . (...) -- C:\WINDOWS\System32\amwrtdrv.sys [32176] =>.AOMEI International Network Limited® O58 - SDL:2017/08/07 10:49:44 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\athw10x.sys [4320176] =>.Qualcomm Atheros® O58 - SDL:2016/12/27 18:45:52 A . (...) -- C:\WINDOWS\System32\ddmdrv.sys [35760] =>.CHENGDU AOMEI Tech Co., Ltd.® O58 - SDL:2022/12/29 13:34:30 A . (...) -- C:\WINDOWS\System32\epmdkdrv.sys [27728] =>.Microsoft® O58 - SDL:2017/02/28 14:20:18 A . (...) -- C:\WINDOWS\SysWOW64\ampa.sys [38320] =>.CHENGDU AOMEI Tech Co., Ltd.® ---\\ DERNIERS FICHIERS MODIFIES OU CREES (Utilisateur) (1) - 5s O61 - LFC: 2023/12/31 09:45:28 A . (..) -- C:\Users\nicbo\AppData\Local\Packages\B9ECED6F.Splendid_qmba6cd70vzyy\LocalCache\Roaming\sp_data.sys [507] [Unsigned] ---\\ ASSOCIATION Shell Spawning (9) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value ---\\ MENU DE DÉMARRAGE INTERNET (8) - 0s O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft® O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation ---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (2) - 7s O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com ---\\ ENUMERE LES SERVICES DÉMARRES PAR Svchost (50) - 2s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [221696] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [221696] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [304128] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1341952] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [1049088] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [836608] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [32768] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [161280] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [112640] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [813056] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [243712] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [487424] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [542720] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports de problèmes.) -- C:\Windows\System32\wercplsupport.dll [131584] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [2468352] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [333824] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [489472] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [410112] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [223232] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1291264] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [1130496] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll [864256] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [70656] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1485312] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [329216] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [2257920] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1538560] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [48640] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [454656] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [111616] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [1009152] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [551936] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [77824] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [654848] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [322560] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3456512] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1481216] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [283136] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [58880] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [941680] =>.Microsoft® O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [245248] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [217600] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1295360] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) -- C:\Windows\System32\usosvc.dll [570368] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [72704] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [171520] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1050112] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [295424] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [556032] [Unsigned] =>.Microsoft Corporation O83 - Search Svchost Services: DcSvc (DcSvc) . (.Microsoft Corporation - dcsvc.) -- C:\Windows\System32\dcsvc.dll [904192] [Unsigned] =>.Microsoft Corporation ---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (2) - 1s O87 - FAEL: "{B99CE8A9-EE4C-4804-83DD-BC13B6630F4C}" [In-None-P6-TRUE] .(.AOMEI International Network Limited - AOMEI Backupper Schedule task service.) -- C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe =>.AOMEI International Network Limited® O87 - FAEL: "{419777F4-F505-44CF-BBE0-CF600C5BBEED}" [In-None-P17-TRUE] .(.AOMEI International Network Limited - AOMEI Backupper Schedule task service.) -- C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe =>.AOMEI International Network Limited® ---\\ CODES PRODUITS LOGICIELS (2) - 0s O90 - PUC: "7A671367871B61049BA29FD5F2F08F03" [HKLM] . (.Classic Start.) -- C:\Windows\Installer\{763176A7-B178-4016-B92A-F95D2F0FF830}\icon.ico O90 - PUC: "ADDA69FC07A94244EA479356F4D8ECA0" [HKLM] . (.PDFCreator.) -- C:\WINDOWS\Installer\{CF96ADDA-9A70-4424-AE74-39654F8DCE0A}\app_icon.ico ---\\ PACKAGES WINDOWS INSTALLER (28) - 13s [MD5.0BB59749B49DB6A921C709C3C935A22E] [WIS][2017/08/18 21:08:50] (.Intel Corporation - Intel(R) ME UninstallLegacy.) -- C:\WINDOWS\Installer\16b2c.msi [471040] =>.Intel Corporation [MD5.EB8B7121A49EF0A568876FEA5ECC764B] [WIS][2017/09/25 21:40:38] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\16b31.msi [2953216] =>.Intel Corporation [MD5.00E34D19C7EF0F97C25D4A7134FFE39A] [WIS][2017/09/25 21:39:42] (.Intel Corporation - Microsoft VC++ redistributables repacked..) -- C:\WINDOWS\Installer\16b36.msi [12840960] =>.Intel Corporation [MD5.EF17A2CDE972499C33F46461974F8885] [WIS][2017/09/25 21:39:50] (.Intel Corporation - Microsoft VC++ redistributables repacked..) -- C:\WINDOWS\Installer\16b3b.msi [14307328] =>.Intel Corporation [MD5.E6759F9B2AE640358457B1AA1F608BDF] [WIS][2017/09/25 21:40:24] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\16b40.msi [7303600] =>.Intel Corporation [MD5.2BDD92913E6C1263BF31FB192B768EA7] [WIS][2017/09/21 08:25:02] (.Intel Corporation - Intel(R) Trusted Connect Service Client x64.) -- C:\WINDOWS\Installer\16b45.msi [3645440] =>.Intel Corporation [MD5.FBAE6F4D39DC034FF1F3355A4B5A8ADB] [WIS][2017/09/21 08:21:30] (.Intel Corporation - Intel(R) Trusted Connect Service Client x86.) -- C:\WINDOWS\Installer\16b4a.msi [7294976] =>.Intel Corporation [MD5.F9AF469A749FCE21E7570666CAE8E6AB] [WIS][2017/05/03 03:03:28] (.Intel Corporation - Intel(R) Rapid Storage Technology.) -- C:\WINDOWS\Installer\16b4f.msi [4243456] =>.Intel Corporation [MD5.60C92AC2AD16E0037DC413FA7B6CAB23] [WIS][2018/10/16 13:07:38] (.ICEpower a/s - AudioWizard.) -- C:\WINDOWS\Installer\17ab2.msi [6755328] =>.ICEpower a/s [MD5.C202CA6E42B60EAD9539925CC0A515A7] [WIS][2018/06/21 10:06:10] (.ASUSTeK COMPUTER INC..) -- C:\WINDOWS\Installer\17ab7.msi [3130368] =>.ASUSTeK COMPUTER INC. [MD5.E8221181FC6F0AC4291560073709390A] [WIS][2017/04/21 00:30:40] (.Intel Corporation - Intel(R) Chipset Device Software.) -- C:\WINDOWS\Installer\18c8f.msi [925696] =>.Intel Corporation [MD5.51C4E63A82486DA48449CA5CDE48BF78] [WIS][2018/05/31 07:03:34] (.ASUSTeK COMPUTER INC..) -- C:\WINDOWS\Installer\21933.msi [8569344] =>.ASUSTeK COMPUTER INC. [MD5.2772ACBC7B51966A5EFAE07F6AD9CD47] [WIS][2018/06/11 11:20:36] (.ASUSTeK COMPUTER INC..) -- C:\WINDOWS\Installer\22535.msi [1292288] =>.ASUSTeK COMPUTER INC. [MD5.EBF382699C4F7641156020BF8B98653F] [WIS][2018/10/16 13:46:52] (.Screenovate Technologies Ltd. - Virtoo Drivers.) -- C:\WINDOWS\Installer\2253b.msi [3087872] =>.Screenovate Technologies Ltd. [MD5.CD36954214A4674C7FA5FE64FE7D6160] [WIS][2017/06/19 13:35:48] (.Intel Corporation - Intel(R) Serial IO.) -- C:\WINDOWS\Installer\263f4.msi [2740224] =>.Intel Corporation [MD5.0BF25C36EA30DF8A7EEF8533F9113319] [WIS][2023/01/11 17:41:07] (.Google - Google Earth Pro.) -- C:\WINDOWS\Installer\2b86b15.msi [67309568] =>.Google [MD5.0167D5CE8F47326DF71B8F89C2D87320] [WIS][2023/12/30 16:23:23] (.The Document Foundation - LibreOffice 7.5.) -- C:\WINDOWS\Installer\32bdbe.msi [360366080] =>.The Document Foundation [MD5.2E3B18A6FE2341EEE52C147E0CEDDC22] [WIS][2023/12/30 16:19:33] (.The Document Foundation - LibreOffice 7.5.) -- C:\WINDOWS\Installer\32c81c.msi [3485696] =>.The Document Foundation [MD5.0397E6F094D1FCE55580B0E98C0137E3] [WIS][2019/03/12 21:03:32] (.ASUSTeK COMPUTER INC..) -- C:\WINDOWS\Installer\38dc8f.msi [4840960] =>.ASUSTeK COMPUTER INC. [MD5.885FCA74021D146F5B0BCE41AC195877] [WIS][2019/02/03 12:43:54] (.PassionateCoder - Classic Start.) -- C:\WINDOWS\Installer\5ca43a9.msi [5073689] [MD5.FFA9AEB51840434CA09A9759633F6B40] [WIS][2023/08/21 12:39:52] (.Avanquest pdfforge GmbH - PDFCreator.) -- C:\WINDOWS\Installer\61ecf2.msi [127434752] [MD5.4DE5C70CD5D53F483EAA6B9854E6101F] [WIS][2023/08/26 16:41:56] (.AVAST Software - Avast Update Helper.) -- C:\WINDOWS\Installer\61ecfd.msi [32768] =>.AVAST Software [MD5.891B7E765B43CAB44DD2D7CE582043AA] [WIS][2019/07/18 09:24:36] (.Viber Media S.a.r.l - Viber.) -- C:\WINDOWS\Installer\6e3c662.msi [87113728] =>.Viber Media S.a.r.l [MD5.F7D12F0D3FA82BC68D4EF3A14689D7DB] [WIS][2023/02/03 19:25:35] (.pdfforge GmbH - PDF Architect 9 View Module.) -- C:\WINDOWS\Installer\759ad9.msi [116916224] =>.pdfforge GmbH [MD5.2FACC32EC4F5CF7BF0DC3C221580F3DD] [WIS][2018/10/16 13:00:23] (.InstallShield.) -- C:\WINDOWS\Installer\a2f32.msi [3903488] =>.InstallShield [MD5.281BDC1516F769E95997669B74D0C84B] [WIS][2017/04/20 08:47:50] (.Alcor Micro Corp..) -- C:\WINDOWS\Installer\a2f36.msi [1403392] =>.Alcor Micro Corp. [MD5.D1B835C5E0BC77EDB51778A6A57B0A20] [WIS][2017/05/09 11:07:18] (.ASUS.) -- C:\WINDOWS\Installer\a2f3b.msi [335872] =>.ASUS [MD5.0BFFD27243E829B6DDC5DFB19C1A469F] [WIS][2017/12/05 12:18:14] (.ASUSTeK COMPUTER INC..) -- C:\WINDOWS\Installer\a2f40.msi [11817984] =>.ASUSTeK COMPUTER INC. ---\\ FEATURE CONTROL. (1) - 0s [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:URLReqService.exe ---\\ OBSERVATEURS des évènements (127) - 41s Application.Error: VSS (134) ~Numéro: 109026 ~Date: 12/31/2023 10:38:55 AM ~ID: 12292 ~Description: Erreur du service de cliché instantané des volumes : erreur lors de la création de la classe COM du fournisseur de cliché instantané avec CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} [0x80070005, Accès refusé. ]. Opération : Obtenir une interface p ~Suggestion: Aucune Application.Error: Microsoft-Windows-Defrag (14) ~Numéro: 109021 ~Date: 12/31/2023 10:37:03 AM ~ID: 264 ~Description: L’optimiseur de stockage n’a pas pu terminer réoptimisation sur DATA (D:) car : L’opération demandée n’est pas prise en charge par le matériel sous-jacent au volume. (0x8900002A) ~Suggestion: Désactivez la surveillance du disque logique dans le pack d'administration du système d'exploitation de base SCOM pour arrêter l'analyse automatique de la défragmentation. Application.Error: Windows Backup (2) ~Numéro: 108947 ~Date: 12/31/2023 08:00:02 AM ~ID: 4103 ~Description: Échec de la sauvegarde. Raison : une erreur d'écriture s'est produite à l'emplacement de sauvegarde (E:\). Erreur : Emplacement de sauvegarde introuvable ou non valide. Vérifiez-le en passant en revue vos paramètres de sauvegarde. (0x81000006). Application.Error: Microsoft-Windows-RestartManager (2) ~Numéro: 108903 ~Date: 12/30/2023 07:23:26 PM ~ID: 10007 ~Description: Impossible de redémarrer l’application ou le service « ASUS GiftBox Service ». ~Suggestion: Redémarrer manuellement l'application ou le service Application.Error: Application Hang (1) ~Numéro: 108819 ~Date: 12/30/2023 05:18:16 PM ~ID: 1002 ~Description: Le programme FRST64.exe version 30.12.2023.0 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintena ~Suggestion: Essayer les commandes suivantes ipconfig /release et ipconfig / renew. Application.Error: Firefox Default Browser Agent (37) ~Numéro: 108690 ~Date: 12/30/2023 11:57:13 AM ~ID: 2 ~Description: 0x80070002 in RegistryDeleteValue:323 Application.Warning: Windows Search Service (17) ~Numéro: 108650 ~Date: 12/29/2023 08:35:34 PM ~ID: 3023 ~Description: Impossible de démarrer l’analyse car toutes les sources de contenu ont été exclues par des règles de chemin d’accès au site ou supprimées de la configuration de l’index.Contexte : Application , Catalogue SystemIndexDétails : (HRESULT : 0x1) (0x000000 Application.Error: Application Error (9) ~Numéro: 107777 ~Date: 12/19/2023 12:40:41 PM ~ID: 1000 ~Description: Nom de l’application défaillante ensserver.exe, version : 0.0.0.0, horodatage : 0x622838d2 Nom du module défaillant : ucrtbase.dll, version : 10.0.19041.3636, horodatage : 0x6763d3a2 Code d’exception : 0xc0000409 Décalage d’erreur : 0x0009eddb ID du ~Suggestion: Réparer ou réinstaller l'application. Application.Warning: Microsoft-Windows-WMI (6) ~Numéro: 106951 ~Date: 12/13/2023 09:11:06 AM ~ID: 63 ~Description: Un fournisseur, DMWmiBridgeProv1, a été inscrit dans l’espace de noms Windows Management Instrumentation root\cimv2\mdm\dmmap, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de ~Suggestion: Généralement LocalSystem n'est pas nécessaire et le contexte de sécurité NetworkServiceHost est plus approprié. Application.Error: COM (2) ~Numéro: 105774 ~Date: 12/03/2023 08:15:56 AM ~ID: 10031 ~Description: {BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2} Application.Warning: ESENT (8) ~Numéro: 105252 ~Date: 11/29/2023 08:12:07 PM ~ID: 636 ~Description: wuaueng.dll (4036,D,35) SUS20ClientDataStore: Le fichier de mappage de vidage « C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.jfm » sera supprimé. Motif : ReadHdrFailed. Application.Warning: Microsoft-Windows-System-Restore (1) ~Numéro: 104404 ~Date: 11/24/2023 11:51:19 AM ~ID: 8303 ~Description: Scoping unsuccessful for shadowcopy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy9 with error 0x80070057. ~Suggestion: Exécuter la commande chkdsk / f System.Warning: DCOM (406) ~Numéro: 196877 ~Date: 12/31/2023 10:47:54 AM ~ID: 10016 ~Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NICOLEnicboS-1-5-21-3783334410-572661787-2892577619-1001LocalHost (avec LRPC)Microsoft.Windows.ShellExperienceHost_10.0.19041.3636_ne ~Suggestion: Vérifier les autorisations pour l'accès DCOM System.Error: Service Control Manager (112) ~Numéro: 196847 ~Date: 12/31/2023 09:46:46 AM ~ID: 7000 ~Description: Le service Device Activation Service n’a pas pu démarrer en raison de l’erreur : %%2 System.Warning: BTHUSB (55) ~Numéro: 196818 ~Date: 12/31/2023 09:44:38 AM ~ID: 34 ~Description: La carte locale ne prend pas en charge un état de contrôleur Low Energy important pour la prise en charge du mode périphérique. Le masque d’état pris en charge requis au minimum est 0x2491f7fffff, a reçu 0x1fffffff. La fonctionnalité du rôle périph System.Warning: Microsoft-Windows-Kernel-PnP (48) ~Numéro: 196807 ~Date: 12/31/2023 09:44:35 AM ~ID: 219 ~Description: Le chargement du pilote \Driver\WudfRd a échoué pour le périphérique PCI\VEN_8086&DEV_1903&SUBSYS_1A301043&REV_02\3&11583659&1&20. ~Suggestion: Vérifier que le pilote a bien été chargé dans les informations système System.Warning: Microsoft-Windows-WLAN-AutoConfig (1) ~Numéro: 196635 ~Date: 12/30/2023 07:01:35 PM ~ID: 4003 ~Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée, en tentant une récupération automatique. Type de récupération : 4 Code d’erreur : 0x0 Motif de déclenchement : 5 Famille IP : 0 ~Suggestion: Vérifier les paramètres d'économie d'énergie System.Warning: Microsoft-Windows-DNS-Client (4) ~Numéro: 196634 ~Date: 12/30/2023 07:00:33 PM ~ID: 1014 ~Description: La résolution du nom activity.windows.com a expiré lorsqu’aucun des serveurs DNS configurés n’a répondu. ~Suggestion: https://social.technet.microsoft.com/wiki/contents/articles/3336.event-id-1014-microsoft-windows-dns-client.aspx System.Error: Microsoft-Windows-WindowsUpdateClient (16) ~Numéro: 196434 ~Date: 12/30/2023 02:41:55 PM ~ID: 20 ~Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x8024200b : Canon - Printer - 2.70.2.12. ~Suggestion: http://kb.eventtracker.com/evtpass/evtpages/EventId_20_Microsoft-Windows-WindowsUpdateClient_63351.asp System.Warning: User32 (1) ~Numéro: 194601 ~Date: 12/18/2023 01:23:21 PM ~ID: 1073 ~Description: La tentative par l’utilisateur NICOLE\nicbo de redémarrer/arrêter l’ordinateur NICOLE a échoué System.Error: Microsoft-Windows-FilterManager (5) ~Numéro: 194269 ~Date: 12/17/2023 09:48:38 AM ~ID: 3 ~Description: Le gestionnaire de filtres n’a pas réussi à s’attacher au volume « \Device\HarddiskVolume16 ». Ce volume ne sera pas disponible pour le filtrage avant un redémarrage. L’état final était 0xc03a001c. System.Warning: iaStorA (1) ~Numéro: 192725 ~Date: 12/10/2023 09:49:55 AM ~ID: 129 ~Description: Une réinitialisation au périphérique, \Device\RaidPort0, a été émise. System.Warning: disk (1) ~Numéro: 192717 ~Date: 12/10/2023 09:33:42 AM ~ID: 153 ~Description: L’opération d’E/S à l’adresse de bloc logique 0x0 pour le disque 2 (nom d’objet périphérique physique : \Device\00000099) a été tentée à nouveau. ---\\ SCAN ADDITIONNEL (6) - 17s [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\GfxUIEx.exe.FriendlyAppName =>.Unsigned [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\GfxUIEx.exe.ApplicationCompany =>.Unsigned [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe.FriendlyAppName =>.Unsigned [HKU\S-1-5-21-3783334410-572661787-2892577619-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\GfxUIEx.exe.FriendlyAppName =>.Unsigned [HKU\S-1-5-21-3783334410-572661787-2892577619-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\GfxUIEx.exe.ApplicationCompany =>.Unsigned [HKU\S-1-5-21-3783334410-572661787-2892577619-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe.FriendlyAppName =>.Unsigned ---\\ RECAPITULATIF DES ELEMENTS TROUVES (3) - 0s https://nicolascoolman.eu/2022/09/05/zhpdiag-lanalyse-s-m-a-r-t-du-disque-systeme/ => SMART Information https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/ =>Warning.EventLogApp https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/ =>Warning.EventLogSys ---\\ NUMEROS DE SÉRIE [00A657F778B31AE523D667131718D16EB2] [31/12/2023] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\mb4uns.exe =>.Malwarebytes Inc. [00A657F778B31AE523D667131718D16EB2] [31/12/2023] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe =>.Malwarebytes Inc. [00E04F3F5B78CA4D710F158ABFFE050F97] [30/10/2023] (.AOMEI International Network Limited.) - C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe =>.AOMEI International Network Limited [010A2D797092EA03E8A1F2725F76FC58] [14/01/2021] (.ASUSTek Computer Inc..) - C:\WINDOWS\System32\drivers\AsusPTPFilter.sys =>.ASUSTek Computer Inc. [024FD22ED89C8823D79C2A09A4E6423F] [19/11/2020] (.ASUSTek Computer Inc..) - C:\WINDOWS\System32\drivers\AsRadioControl.sys =>.ASUSTek Computer Inc. [024FD22ED89C8823D79C2A09A4E6423F] [22/06/2018] (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\WinFlash\WinFlash.exe =>.ASUSTek Computer Inc. [03DA4C26C76E1255DC8279AA9A751ACC] [07/07/2016] (.Realtek Semiconductor Corp..) - C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe =>.Realtek Semiconductor Corp. [04CB5B116CEE82840C020914B1A4D04D] [18/10/2023] (.TeamViewer Germany GmbH.) - C:\Program Files\TeamViewer\TeamViewer.exe =>.TeamViewer Germany GmbH [04CB5B116CEE82840C020914B1A4D04D] [18/10/2023] (.TeamViewer Germany GmbH.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe =>.TeamViewer Germany GmbH [04CB5B116CEE82840C020914B1A4D04D] [18/10/2023] (.TeamViewer Germany GmbH.) - C:\Program Files\TeamViewer\uninstall.exe =>.TeamViewer Germany GmbH [04D8B9400BD80131DA22862E2C0F23B0] [02/02/2022] (.Viber Media S.à r.l..) - C:\Users\nicbo\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l. [04DF4D56733AE38D598EA004DD2D9C51] [27/08/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp. [04DF4D56733AE38D598EA004DD2D9C51] [27/08/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe =>.Realtek Semiconductor Corp. [04DF4D56733AE38D598EA004DD2D9C51] [27/08/2020] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp. [04DF4D56733AE38D598EA004DD2D9C51] [29/07/2020] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp. [06680CEE465B856F613A3BDD20482E71] [30/09/2022] (.Samsung Electronics CO., LTD..) - C:\WINDOWS\System32\DRIVERS\ssudbus2.sys =>.Samsung Electronics CO., LTD. [06680CEE465B856F613A3BDD20482E71] [30/09/2022] (.Samsung Electronics CO., LTD..) - C:\WINDOWS\System32\DRIVERS\ssudmdm.sys =>.Samsung Electronics CO., LTD. [0686ED403EC1BF441C8F335C841EEA00] [06/02/2023] (.CHENGDU YIWO Tech Development Co., Ltd..) - C:\Program Files (x86)\EaseUS\ENS\ensserver.exe =>.CHENGDU YIWO Tech Development Co., Ltd. [0686ED403EC1BF441C8F335C841EEA00] [21/03/2023] (.CHENGDU YIWO Tech Development Co., Ltd..) - C:\Program Files (x86)\EaseUS\EaseUS Partition Master\unins000.exe =>.CHENGDU YIWO Tech Development Co., Ltd. [0686ED403EC1BF441C8F335C841EEA00] [28/02/2023] (.CHENGDU YIWO Tech Development Co., Ltd..) - C:\Program Files (x86)\EaseUS\EaseUS Partition Master\bin\EPMUI.exe =>.CHENGDU YIWO Tech Development Co., Ltd. [07FED0B8E61270E83F5AEC8B91E3B679] [30/05/2018] (.SCREENOVATE TECHNOLOGIES LTD..) - C:\Program Files\Asus\ASUSSyncDrivers\BtInstallDriver.exe =>.SCREENOVATE TECHNOLOGIES LTD. [07FED0B8E61270E83F5AEC8B91E3B679] [30/05/2018] (.SCREENOVATE TECHNOLOGIES LTD..) - C:\WINDOWS\System32\drivers\HfAudio.sys =>.SCREENOVATE TECHNOLOGIES LTD. [07FED0B8E61270E83F5AEC8B91E3B679] [30/05/2018] (.SCREENOVATE TECHNOLOGIES LTD..) - C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys =>.SCREENOVATE TECHNOLOGIES LTD. [08FC2A6C411D88E7253C3D99170EAE62] [21/09/2021] (.Logitech Inc.) - C:\Program Files\Logi\LogiBolt\LogiBolt.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [21/09/2021] (.Logitech Inc.) - C:\Program Files\Logi\LogiBolt\LogiBoltUninstaller.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [24/09/2021] (.Logitech Inc.) - C:\Program Files\Logitech\LogiOptions\CreateShortcut.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [24/09/2021] (.Logitech Inc.) - C:\Program Files\Logitech\LogiOptions\LogiOptions.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [24/09/2021] (.Logitech Inc.) - C:\Program Files\Logitech\LogiOptions\uninstaller.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [24/09/2021] (.Logitech Inc.) - C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe =>.Logitech Inc [08FC2A6C411D88E7253C3D99170EAE62] [24/09/2021] (.Logitech Inc.) - C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe =>.Logitech Inc [0932655009DE18AA72E73C4861AC11D3] [10/05/2017] (.ASUSTeK Computer Inc..) - C:\Program Files\DIFX\12813373E803DBB7\dpinst.exe =>.ASUSTeK Computer Inc. [0A01C3FF8855F008C8E4FA63973252E6] [13/05/2020] (.NCH Software, Inc..) - C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe =>.NCH Software, Inc. [0B7593CAAEA54207BBC0C65A153F7601] [11/11/2023] (.FOXIT SOFTWARE INC..) - C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe =>.Not verified [0B7593CAAEA54207BBC0C65A153F7601] [29/11/2023] (.FOXIT SOFTWARE INC..) - C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\unins000.exe =>.Not verified [0BFCFAC08E216A1C1FDAA6B77BB2D66E] [27/08/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp. [0C1CD3EEA47EDDA7A032573B014D0AFD] [11/12/2023] (.Mozilla Corporation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [11/12/2023] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [11/12/2023] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\private_browsing.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [11/12/2023] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [20/12/2023] (.Mozilla Corporation.) - C:\Program Files\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [20/12/2023] (.Mozilla Corporation.) - C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe =>.Mozilla Corporation [0C1CD3EEA47EDDA7A032573B014D0AFD] [30/12/2023] (.Mozilla Corporation.) - C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll =>.Mozilla Corporation [0E4418E2DEDE36DD2974C3443AFB5CE5] [29/12/2022] (.Google LLC.) - C:\Program Files\Google\Google Earth Pro\client\googleearth.exe =>.Google LLC [0E4418E2DEDE36DD2974C3443AFB5CE5] [30/12/2023] (.Google LLC.) - C:\Users\nicbo\AppData\Roaming\Mozilla\Firefox\Profiles\m8jqtts8.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll =>.Google LLC [0EFFC52BBBF345BBA2BD28BF99E9D861] [06/12/2017] (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe =>.ASUSTeK Computer Inc. [0EFFC52BBBF345BBA2BD28BF99E9D861] [06/12/2017] (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe =>.ASUSTeK Computer Inc. [0EFFC52BBBF345BBA2BD28BF99E9D861] [06/12/2017] (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe =>.ASUSTeK Computer Inc. [0EFFC52BBBF345BBA2BD28BF99E9D861] [08/11/2017] (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe =>.ASUSTeK Computer Inc. [0EFFC52BBBF345BBA2BD28BF99E9D861] [16/10/2018] (.ASUSTeK Computer Inc..) - C:\Program Files\WindowsApps\B9ECED6F.ASUSBatteryHealthCharging_1.0.7.0_x86__qmba6cd70vzyy\ASUS Battery Health Charging\BhcMgr.exe =>.ASUSTeK Computer Inc. [0F5C689DC0717374609E20ED097B19D9] [27/08/2020] (.ICEpower a/s.) - C:\WINDOWS\System32\ICEsoundService64.exe =>.ICEpower a/s [10C205FB5267A56A114A2158845A0EBF] [12/05/2020] (.Alcorlink Corp..) - C:\WINDOWS\System32\drivers\AmUStorU.sys =>.Alcorlink Corp. [14F8FDD167F92402B1570B5DC495C815] [06/02/2019] (.Google Inc.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc [1B7FCD594D192C3EA85C8A7AA64FDE8C] [25/05/2020] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe =>.Canon Inc. [1B7FCD594D192C3EA85C8A7AA64FDE8C] [25/05/2020] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJPLM\setup.exe =>.Canon Inc. [1DB6A714F412F084FFF0677F880D2883] [07/08/2017] (.Qualcomm Atheros.) - C:\Program Files (x86)\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe =>.Qualcomm Atheros [1DB6A714F412F084FFF0677F880D2883] [07/08/2017] (.Qualcomm Atheros.) - C:\WINDOWS\System32\athw10x.sys =>.Qualcomm Atheros [20A947947E703391C3008B626606FA8F] [02/12/2015] (.Canon Inc..) - C:\Program Files (x86)\Canon\Easy-WebPrint EX\uninst.exe =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [05/07/2017] (.Canon Inc..) - C:\Program Files (x86)\Canon\Quick Menu\CNQMACNF.EXE =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [05/07/2017] (.Canon Inc..) - C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [15/05/2015] (.Canon Inc..) - C:\Program Files\Canon\MyPrinter\BJMyDgn.exe =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [21/11/2016] (.Canon Inc..) - C:\Program Files (x86)\Canon\My Image Garden\AddOn\uninst.exe =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [21/11/2016] (.Canon Inc..) - C:\Program Files (x86)\Canon\My Image Garden\uninst.exe =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [21/11/2016] (.Canon Inc..) - C:\Program Files (x86)\Canon\Quick Menu\uninst.exe =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [23/02/2016] (.Canon Inc..) - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll =>.Canon Inc. [20A947947E703391C3008B626606FA8F] [23/02/2016] (.Canon Inc..) - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll =>.Canon Inc. [243C767E33053FAAE0F0131C103D7A17] [24/07/2019] (.Viber Media S.à r.l..) - C:\Users\nicbo\AppData\Local\Package Cache\{4fc25591-5dca-42b3-9efd-2eeb50b77e16}\ViberSetup.exe =>.Viber Media S.à r.l. [28736D0D296789512BAC66CCE86C4A00] [14/05/2019] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\System32\ambakdrv.sys =>.CHENGDU AOMEI Tech Co., Ltd. [28736D0D296789512BAC66CCE86C4A00] [27/12/2016] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\system32\ddmdrv.sys =>.CHENGDU AOMEI Tech Co., Ltd. [28736D0D296789512BAC66CCE86C4A00] [28/02/2017] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\Windows\System32\ampa.sys =>.CHENGDU AOMEI Tech Co., Ltd. [28736D0D296789512BAC66CCE86C4A00] [28/02/2017] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\SysWOW64\ampa.sys =>.CHENGDU AOMEI Tech Co., Ltd. [2EF6AE3D9068E23F0D7E17585BE8CA4E] [24/10/2013] (.Canon Inc..) - C:\Program Files\Canon\MyPrinter\uninst.exe =>.Canon Inc. [2F568997EDD3D061460493FE] [29/11/2023] (.AOMEI International Network Limited.) - C:\WINDOWS\system32\amwrtdrv.sys =>.AOMEI International Network Limited [330000017C3E93FDEBD1A6E15C00000000017C] [15/11/2020] (.Skype Software Sarl.) - C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe =>.Skype Software Sarl [330000B960C6D07C955AC0FCF000020000B960] [07/07/2017] (.Intel(R) Software.) - C:\Program Files\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\Setup.exe =>.Intel(R) Software [330000B97FAEF583F53CC47FCD00020000B97F] [03/05/2017] (.Intel(R) Rapid Storage Technology.) - C:\WINDOWS\System32\drivers\iaStorA.sys =>.Intel(R) Rapid Storage Technology [3CFEDDD1636B53828E234AAEC4BD45C4] [01/05/2022] (.Hendrik Leppkes.) - C:\Program Files (x86)\LAV Filters\unins000.exe =>.Hendrik Leppkes [3DD79449EA86A17D1AED3D553A987DDF] [04/09/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\AdminService.exe =>.Qualcomm Atheros [3DD79449EA86A17D1AED3D553A987DDF] [04/09/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\btfilter.sys =>.Qualcomm Atheros [3DD79449EA86A17D1AED3D553A987DDF] [22/05/2019] (.Qualcomm Atheros.) - C:\WINDOWS\System32\drivers\athw10x.sys =>.Qualcomm Atheros [415D8D481D99C6E4657864D0515EE54A] [31/08/2022] (.AOMEI International Network Limited.) - C:\Program Files (x86)\AOMEI\AOMEI Backupper\ABLauncher.exe =>.AOMEI International Network Limited [42E42D04DA33DB4275572152C9CFDABE] [04/02/2015] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJ Manual\Canon MG3600 series\uninstall.exe =>.Canon Inc. [42E42D04DA33DB4275572152C9CFDABE] [12/03/2015] (.Canon Inc..) - C:\Program Files\CanonBJ\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series\DELDRV64.exe =>.Canon Inc. [42E42D04DA33DB4275572152C9CFDABE] [19/02/2015] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJ Scan Utility\SCANUTILITY.exe =>.Canon Inc. [42E42D04DA33DB4275572152C9CFDABE] [19/11/2014] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJ Scan Utility\MAINT.exe =>.Canon Inc. [42E42D04DA33DB4275572152C9CFDABE] [23/03/2015] (.Canon Inc..) - C:\Program Files (x86)\Canon\IJEREG\MG3600 series\UNINST.EXE =>.Canon Inc. [56000001475EA46CCAEF0B7481000000000147] [16/10/2018] (.Intel(R) Trust Services.) - C:\ProgramData\Package Cache\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}\iclsClientInstaller.exe =>.Intel(R) Trust Services [56000001757376CD78AD000C9A000000000175] [16/10/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\ProgramData\Intel\Package Cache\{1CEAC85D-2590-4760-800F-8DE5E91F3700}\Setup.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group [56000001757376CD78AD000C9A000000000175] [27/07/2017] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [56000001EE3BA2C54562F3593C0000000001EE] [03/05/2017] (.Intel(R) Rapid Storage Technology.) - C:\ProgramData\Intel\Package Cache\{409CB30E-E457-4008-9B1A-ED1B9EA21140}\Setup.exe =>.Intel(R) Rapid Storage Technology [56000002143D5BA1B4E496B7C1000000000214] [16/10/2018] (.Intel(R) Software and Firmware Products.) - C:\ProgramData\Package Cache\{17408817-d415-4768-a160-ae6d46d6bdb0}\SetupChipset.exe =>.Intel(R) Software and Firmware Products [56000002630B69CF9D33644CF0000000000263] [16/10/2018] (.Intel(R) Serial IO.) - C:\ProgramData\Intel\Package Cache\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}\Setup.exe =>.Intel(R) Serial IO [560000082B1E36C56B00276A8A00000000082B] [09/12/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000082B1E36C56B00276A8A00000000082B] [09/12/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000082B1E36C56B00276A8A00000000082B] [09/12/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\iaLPSS2_SPI.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000082B1E36C56B00276A8A00000000082B] [09/12/2018] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [560000088689EFB89169C165B1000000000886] [17/09/2020] (.Intel(R) Trust Services.) - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\SocketHeciServer.exe =>.Intel(R) Trust Services [560000088689EFB89169C165B1000000000886] [17/09/2020] (.Intel(R) Trust Services.) - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\TPMProvisioningService.exe =>.Intel(R) Trust Services [5600000C3BF9A3682289A06F40000000000C3B] [12/08/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igdkmd64.sys =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxEM.exe =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxext.exe =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe =>.Intel(R) pGFX 2020 [5600000C3BF9A3682289A06F40000000000C3B] [16/09/2020] (.Intel(R) pGFX 2020.) - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHeciSvc.exe =>.Intel(R) pGFX 2020 [5600000C970A207F2C4F00043D000000000C97] [24/01/2021] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group [5600000C970A207F2C4F00043D000000000C97] [25/02/2021] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_605dda426937489f\x64\TeeDriverW10x64.sys =>.Intel(R) Embedded Subsystems and IP Blocks Group [56CD068387BA175A3D5FEBDC98B41C04] [28/07/2010] (.Initio Corporation.) - C:\WINDOWS\System32\drivers\ivusb.sys =>.Initio Corporation [58D9B9D38780932DD1CBC58A2AD28B1C] [04/01/2017] (.NCH Software.) - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe =>.NCH Software [67B83A5B6CB6CD7D1908979D] [29/11/2023] (.AOMEI International Network Limited.) - C:\WINDOWS\system32\ammntdrv.sys =>.AOMEI International Network Limited [6A560820FA3E9AD8E5411734B1D40AD5] [07/06/2014] (.NCH Software.) - C:\Program Files (x86)\NCH Software\Prism\prism.exe =>.NCH Software [703F384BE70ADD9E6A175DF4BE6E02FE] [12/06/2022] (.Jernej Simončič.) - C:\Program Files\GIMP 2\bin\gimp-2.10.exe =>.Jernej Simončič [703F384BE70ADD9E6A175DF4BE6E02FE] [24/09/2022] (.Jernej Simončič.) - C:\Program Files\GIMP 2\uninst\unins000.exe =>.Jernej Simončič [73CCB86B36F6C0236FEA22D15300AD19] [29/12/2022] (.CHENGDU YIWO Tech Development Co., Ltd..) - C:\WINDOWS\System32\drivers\EPMVolFl.sys =>.CHENGDU YIWO Tech Development Co., Ltd. ~ Unselected Options: NF, ~ End of the scan, 10139 items in 04mn17s (1581)(0)