Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 13-12-2023 Exécuté par Lionel (15-12-2023 20:20:01) Run:2 Exécuté depuis C:\Users\Marie-thérese\Desktop Profils chargés: Lionel Mode d'amorçage: Normal ============================================== fixlist contenu: ***************** start:: CreateRestorePoint: cmd: Net stop wuauserv CloseProcesses: EmptyTemp: Hosts: RemoveProxy: VirusTotal: HKEY_LOCAL_MACHINE\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198 HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X] HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {41E7213A-4557-476C-875B-07A0953B1350} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4845464 2023-11-15] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (l'élément de données a 80 caractères en plus). Task: {54F54E9B-2D1A-4DA8-939D-FE06AF5EEFFA} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-11-06] (Avast Software s.r.o. -> Avast Software) Task: {D6EA844B-E77E-46AF-BFCF-A5C0B01E2B93} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2144664 2023-08-02] (Avast Software s.r.o. -> Avast Software) Task: {D56B311D-112F-4961-A277-6B31F6FF5AE9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {11530758-B16C-4E5F-BAA5-AECB0E70705F} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "647b8038-0eff-4fc2-8e8f-ff1bf1d4058d" --version "6.19.10858" --silent Task: {E927DA14-272E-4CF2-8BDA-8644AA91A00B} - System32\Tasks\CCleanerSkipUAC - Lionel => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {72FC64D3-28C3-4843-8797-71E3DCA37B10} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [686496 2023-11-22] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} AS: Avast Antivirus (Disabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12} FW: Avast Antivirus (Disabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4} DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|WindowsDefender DeleteKey: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198 DeleteKey: HKLM\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198 C:\Users\Marie-thérese\AppData\Local\Google\Chrome\User Data\Default\File System\000 C:\Users\Marie-thérese\AppData\Local\Google\Chrome\User Data\Default\File System\001 DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\OperaSetup.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\OperaSetup.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Deluge\deluge.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Deluge\deluge.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\FRST64.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\FRST64.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\avastclear.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\avastclear.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\OperaSetup.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\OperaSetup.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Deluge\deluge.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Deluge\deluge.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\FRST64.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\FRST64.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\avastclear.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Marie-thérese\Downloads\avastclear.exe.ApplicationCompany C:\Users\Marie-thérese\AppData\Roaming\deluge unlock: C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\SecureLine) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe unlock: C:\Windows\System32\drivers\aswVpnRdr.sys DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\aswVpnRdr) C:\Windows\System32\drivers\aswVpnRdr.sys DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7347304-9766-4249-8CB7-C225A540893D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E7347304-9766-4249-8CB7-C225A540893D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7347304-9766-4249-8CB7-C225A540893D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Maintenance\{E7347304-9766-4249-8CB7-C225A540893D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7347304-9766-4249-8CB7-C225A540893D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E7347304-9766-4249-8CB7-C225A540893D} C:\Windows\System32\Tasks\Avast SecureLine VPN Update C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe C:\Windows\System32\Tasks\Avast SecureLine VPN Update C:\Program Files\AVAST Software\Avast\wsc_proxy.exe C:\Program Files\Avast Software\Avast\AvastUI.exe DeleteKey: HKLM\SOFTWARE\AVAST Software DeleteKey: HKLM\SOFTWARE\WOW6432Node\AVAST Software DeleteKey: HKCU\SOFTWARE\AVAST Software DeleteKey: HKCU\SOFTWARE\AvastAdSDK DeleteKey: HKU\.DEFAULT\SOFTWARE\AVAST Software DeleteKey: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\AVAST Software DeleteKey: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\AvastAdSDK C:\Program Files\Avast Software C:\Program Files (x86)\AVAST Software C:\ProgramData\AVAST Software C:\Users\Marie-thérese\AppData\Roaming\Avast Software C:\Users\Marie-thérese\AppData\Local\AVAST Software DeleteKey: HKLM\SOFTWARE\ESET DeleteKey: HKCU\SOFTWARE\ESET DeleteKey: HKU\.DEFAULT\SOFTWARE\ESET DeleteKey: HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\ESET DeleteKey: HKLM\SOFTWARE\McAfee C:\Program Files (x86)\WindowsApps\WildTangentGames.-GamesApp-_1.0.3.28_x86__qt5r5pa5dyg8m - (.WildTangent.) C:\Users\Marie-thérese\AppData\Roaming\WildTangent C:\Windows\System32\Config\systemprofile\AppData\Roaming\WildTangent FindFolder: 1D0EC6DE-4A80-4CC3-A335-E6E41C951198 netsh winsock reset netsh advfirewall reset netsh advfirewall set allprofiles state on netsh winhttp reset proxy dism.exe /online /cleanup-image /restorehealth sfc /scannow Endbatch: EmptyEventLogs: cmd: Net stop Sysmain cmd: sc stop "SysMain" & sc config "SysMain" start=disabled cmd: Net start wuauserv Reboot: end:: ***************** Le Point de restauration a été créé avec succès. ========= Net stop wuauserv ========= Le service Windows Update n'est pas lanc‚. Vous obtiendrez une aide suppl‚mentaire en entrant NET HELPMSG 3521. ========= Fin de CMD: ========= Processus fermé avec succès. C:\Windows\System32\Drivers\etc\hosts => déplacé(es) avec succès Hosts restauré(es) avec succès. ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => supprimé(es) avec succès "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => supprimé(es) avec succès "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => supprimé(es) avec succès ========= Fin de RemoveProxy: ========= "VirusTotal: HKEY_LOCAL_MACHINE\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => valeur restauré(es) avec succès HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => valeur restauré(es) avec succès HKLM\SOFTWARE\Policies\Mozilla => supprimé(es) avec succès HKLM\System\CurrentControlSet\Services\nvvad_WaveExtensible => supprimé(es) avec succès nvvad_WaveExtensible => service supprimé(es) avec succès "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Smart Cleaning" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41E7213A-4557-476C-875B-07A0953B1350}" => non trouvé(e) "C:\Windows\System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Avast SecureLine VPN Bug Report" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{54F54E9B-2D1A-4DA8-939D-FE06AF5EEFFA}" => non trouvé(e) "C:\Windows\System32\Tasks\Avast Software\Avast SecureLine VPN Update" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Avast SecureLine VPN Update" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6EA844B-E77E-46AF-BFCF-A5C0B01E2B93}" => non trouvé(e) "C:\Windows\System32\Tasks\Avast Software\Overseer" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => non trouvé(e) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{D56B311D-112F-4961-A277-6B31F6FF5AE9}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D56B311D-112F-4961-A277-6B31F6FF5AE9}" => supprimé(es) avec succès C:\Windows\System32\Tasks\CCleaner Update => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleaner Update" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{11530758-B16C-4E5F-BAA5-AECB0E70705F}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11530758-B16C-4E5F-BAA5-AECB0E70705F}" => supprimé(es) avec succès C:\Windows\System32\Tasks\CCleanerCrashReporting => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerCrashReporting" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E927DA14-272E-4CF2-8BDA-8644AA91A00B}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E927DA14-272E-4CF2-8BDA-8644AA91A00B}" => supprimé(es) avec succès C:\Windows\System32\Tasks\CCleanerSkipUAC - Lionel => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC - Lionel" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{72FC64D3-28C3-4843-8797-71E3DCA37B10}" => supprimé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72FC64D3-28C3-4843-8797-71E3DCA37B10}" => supprimé(es) avec succès C:\Windows\System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => déplacé(es) avec succès "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mozilla\Firefox Background Update 308046B0AF4A39CB" => supprimé(es) avec succès C:\Windows\Tasks\CCleanerCrashReporting.job => déplacé(es) avec succès HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.18 => supprimé(es) avec succès C:\Program Files\VideoLAN\VLC\npvlc.dll => déplacé(es) avec succès "AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}" => non trouvé(e) "AS: Avast Antivirus (Disabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}" => non trouvé(e) "FW: Avast Antivirus (Disabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\WindowsDefender" => supprimé(es) avec succès "HKLM\SOFTWARE\POLICIES\Mozilla\Firefox" => non trouvé(e) "HKEY_LOCAL_MACHINE\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198" => a été déverrouillé HKLM\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198 => supprimé(es) avec succès "C:\Users\Marie-thérese\AppData\Local\Google\Chrome\User Data\Default\File System\000" => non trouvé(e) "C:\Users\Marie-thérese\AppData\Local\Google\Chrome\User Data\Default\File System\001" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\OperaSetup.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\OperaSetup.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Deluge\deluge.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Deluge\deluge.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\FRST64.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\FRST64.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.ApplicationCompany" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\avastclear.exe.FriendlyAppName" => non trouvé(e) "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\avastclear.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\AppData\Local\Programs\Opera\Launcher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\OperaSetup.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\OperaSetup.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Deluge\deluge.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Deluge\deluge.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPCleaner.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\Windows10Upgrade24074.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\ZHPSuite.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\FRST64.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\FRST64.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Desktop\ZHPSuite.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\avastclear.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Marie-thérese\Downloads\avastclear.exe.ApplicationCompany" => non trouvé(e) "C:\Users\Marie-thérese\AppData\Roaming\deluge" => non trouvé(e) "C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe" => a été déverrouillé HKLM\SYSTEM\CurrentControlSet\Services\SecureLine) => non trouvé(e) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe => déplacé(es) avec succès "C:\Windows\System32\drivers\aswVpnRdr.sys" => a été déverrouillé HKLM\SYSTEM\CurrentControlSet\Services\aswVpnRdr) => non trouvé(e) C:\Windows\System32\drivers\aswVpnRdr.sys => déplacé(es) avec succès "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Maintenance\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E7347304-9766-4249-8CB7-C225A540893D}" => non trouvé(e) C:\Windows\System32\Tasks\Avast SecureLine VPN Update => déplacé(es) avec succès C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe => déplacé(es) avec succès "C:\Windows\System32\Tasks\Avast SecureLine VPN Update" => non trouvé(e) "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" => non trouvé(e) "C:\Program Files\Avast Software\Avast\AvastUI.exe" => non trouvé(e) HKLM\SOFTWARE\AVAST Software => supprimé(es) avec succès RegLink Found. Source: "" => Target: "HKLM\SOFTWARE\AVAST Software" "HKLM\SOFTWARE\WOW6432Node\AVAST Software" => supprimé(es) avec succès HKCU\SOFTWARE\AVAST Software => supprimé(es) avec succès HKCU\SOFTWARE\AvastAdSDK => supprimé(es) avec succès HKU\.DEFAULT\SOFTWARE\AVAST Software => supprimé(es) avec succès HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\AVAST Software => non trouvé(e) HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\AvastAdSDK => non trouvé(e) "C:\Program Files\Avast Software" dossier déplacer: Impossible de déplacer "C:\Program Files\Avast Software" => Planifié pour déplacement au redémarrage. "C:\Program Files (x86)\AVAST Software" dossier déplacer: C:\Program Files (x86)\AVAST Software => déplacé(es) avec succès "C:\ProgramData\AVAST Software" dossier déplacer: C:\ProgramData\AVAST Software => déplacé(es) avec succès "C:\Users\Marie-thérese\AppData\Roaming\Avast Software" => non trouvé(e) "C:\Users\Marie-thérese\AppData\Local\AVAST Software" => non trouvé(e) HKLM\SOFTWARE\ESET => supprimé(es) avec succès HKCU\SOFTWARE\ESET => supprimé(es) avec succès HKU\.DEFAULT\SOFTWARE\ESET => supprimé(es) avec succès HKU\S-1-5-21-2790450368-3373794169-1768395478-1001\SOFTWARE\ESET => non trouvé(e) RegLink Found. Source: "" => Target: "HKLM\Software\Wow6432Node\McAfee" "HKLM\SOFTWARE\McAfee" => supprimé(es) avec succès "C:\Program Files (x86)\WindowsApps\WildTangentGames.-GamesApp-_1.0.3.28_x86__qt5r5pa5dyg8m - (.WildTangent.)" => non trouvé(e) "C:\Users\Marie-thérese\AppData\Roaming\WildTangent" => non trouvé(e) "C:\Windows\System32\Config\systemprofile\AppData\Roaming\WildTangent" => non trouvé(e) ================== FindFolder: "1D0EC6DE-4A80-4CC3-A335-E6E41C951198" =================== Pas de fichier === Fin de FindFolder === netsh winsock reset => Erreur: Pas de correction automatique trouvée pour cet élément. netsh advfirewall reset => Erreur: Pas de correction automatique trouvée pour cet élément. netsh advfirewall set allprofiles state on => Erreur: Pas de correction automatique trouvée pour cet élément. netsh winhttp reset proxy => Erreur: Pas de correction automatique trouvée pour cet élément. dism.exe /online /cleanup-image /restorehealth => Erreur: Pas de correction automatique trouvée pour cet élément. sfc /scannow => Erreur: Pas de correction automatique trouvée pour cet élément. Endbatch: => Erreur: Pas de correction automatique trouvée pour cet élément. =========== EmptyEventLogs: ========== 971 Event logs cleared. ================================ ========= Net stop Sysmain ========= Le service Superfetch s'arrˆte. Le service Superfetch a ‚t‚ arrˆt‚. ========= Fin de CMD: ========= ========= sc stop "SysMain" & sc config "SysMain" start=disabled ========= [SC] ControlService ‚chec(s) 1062 : Le service n'a pas ‚t‚ d‚marr‚. [SC] ChangeServiceConfig r‚ussite(s) ========= Fin de CMD: ========= ========= Net start wuauserv ========= Le service Windows Update d‚marre. Le service Windows Update a d‚marr‚. ========= Fin de CMD: ========= =========== EmptyTemp: ========== FlushDNS => terminé(e) BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13828975 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B Windows/system/drivers => 81518 B Edge => 0 B Chrome => 125258006 B Firefox => 342301553 B Opera => 2751703 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 572469 B systemprofile32 => 572605 B LocalService => 578497 B NetworkService => 97089403 B Marie-thérese => 106294492 B RecycleBin => 65251191630 B EmptyTemp: => 61.4 GB données temporaires supprimées. ================================ Résultats du déplacement planifié des fichiers (Mode d'amorçage: Normal) (Date&Heure: 15-12-2023 20:47:00) C:\Program Files\Avast Software => Impossible de déplacer ==== Fin de Fixlog 20:47:01 ====