Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024 Exécuté par PC (administrateur) sur DESKTOP-760AFFE (HP 460-a014nf) (06-10-2024 14:32:10) Exécuté depuis C:\Users\PC\Contacts\Desktop\FRST64-2.1.exe Profils chargés: PC Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4957 (X64) Langue: Français (France) Navigateur par défaut: Edge Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) () [Fichier non signé] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2> (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe ->) (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe (C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.911.1\DropboxCrashHandler.exe (C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe (C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24082.137.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24082.137.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe (cmd.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe (DriverStore\FileRepository\c0325303.inf_amd64_4e99ed79cccac08d\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (explorer.exe ->) (614A9D21-6F29-4C9D-9F7D-FF59321D9E5F -> ) C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.4.5.0_x64__sbe4t8mqwq93a\FileWatcher\FileWatcher.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9> (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0325303.inf_amd64_4e99ed79cccac08d\atiesrxx.exe (services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.8.0\ABService.exe (services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe (services.exe ->) (Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22054.0_x64__8wekyb3d8bbwe\HxTsr.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [229592 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Fichier non signé] HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Fichier non signé] HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9235344 2024-10-02] (Dropbox, Inc -> Dropbox, Inc.) HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKU\S-1-5-21-2130443135-54271296-3300602816-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2238832 2022-09-01] (TomTom International B.V. -> TomTom) HKU\S-1-5-21-2130443135-54271296-3300602816-1001\...\Run: [MicrosoftEdgeAutoLaunch_B47356396DDD0FAAE76D0ED141F5CEA2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3795008 2024-10-03] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\129.0.6668.90\Installer\chrmstp.exe [2024-10-04] (Google LLC -> Google LLC) Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2024-04-06] ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {F50F202F-45AC-47D8-8579-9DF1AE574792} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.) Task: {EC16F256-E5E8-424F-A5E3-8BA84DBA754A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {33462DFE-1EA3-4DDC-9293-47847E35E3B6} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {AFC8381F-D894-485A-BF6B-C93BA486C7A0} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{72E3FF45-6092-4DD6-B2E4-5C7ECB333CB4} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC) Task: {1C167256-FC67-4C28-B81D-318807AC54D3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [744976 2024-09-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show Task: {444BAFBD-A8A1-41D1-9933-0BF6E1BE27DF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-09-25] (HP Inc. -> HP Inc.) Task: {F7EC77A8-0617-440F-B67D-AF81EDD695EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe -> C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\/f Task: {FBCD7BEF-D3CA-4698-AF05-045E9ED9EB6A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-09-25] (HP Inc. -> HP Inc.) Task: {81C081C9-53FA-446A-BA0B-DFFE24AFCE1E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Pas de fichier) Task: {002D0ECE-7AB4-4C2F-9387-2DA51316B89B} - System32\Tasks\Hewlett-Packard\HP Web Products Detection => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPWPD.exe [310832 2024-09-25] (HP Inc. -> HP Inc.) Task: {90204CBC-3127-4112-847F-97C601A87FBF} - System32\Tasks\Hewlett-Packard\HPDeviceCheck => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPDeviceCheck\HPDeviceCheck.exe [316456 2024-09-25] (HP Inc. -> ) Task: {58F24F0D-F86F-4910-8FFC-11EF0E33D79D} - System32\Tasks\HPJumpStartLaunch => "C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe" (Pas de fichier) Task: {EFE29C6C-AE64-4543-BC23-7BF12C399022} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28617448 2024-09-24] (Microsoft Corporation -> Microsoft Corporation) Task: {72CAD09D-27E5-425E-BA68-644A1B604A0A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28617448 2024-09-24] (Microsoft Corporation -> Microsoft Corporation) Task: {4594C88E-680B-4903-B7F3-9FDEABFC4861} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [223200 2024-09-30] (Microsoft Corporation -> Microsoft Corporation) Task: {51B041A7-DE45-4F0B-83DD-D62E99928519} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [223200 2024-09-30] (Microsoft Corporation -> Microsoft Corporation) Task: {2E07835B-AC5B-49DF-9BD8-6D0CA205FF7E} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [221680 2024-09-25] (Microsoft Windows -> Microsoft Corporation) Task: {E9F7E7EB-A702-4685-A276-7F8FADA5FCC3} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => %windir%\system32\EOSNotify.exe (Pas de fichier) Task: {E4AA2226-1E1E-4ACA-B9ED-05061C640B19} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Accès refusé] Task: {612507A1-6CCD-4698-99AA-55DDB5B537F7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantAllUsersRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Accès refusé] Task: {A5E3319B-DA08-44F9-B1B0-A3BC16CFCB4D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Accès refusé] Task: {52D45FF4-8CE3-4D80-A0EA-E1EAB5C9634B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Accès refusé] Task: {EEAEDFB6-8106-460C-A927-832C7B6D9209} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E7F54245-782C-401C-93DA-C2D02E5FCF5B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {66B05E1F-D5AA-4858-8A2E-5C30DBD51AE3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {1373337E-0BA8-4FC1-9273-EE5A7BB9A10E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {641B8861-82FB-4511-B274-FD3A9730050B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279544 2018-09-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {25EA7478-4B30-4035-AC99-8AF244B2D74A} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49032 2017-10-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{f5165607-3dbe-4ea2-82e5-b5b680559a32}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{f5165607-3dbe-4ea2-82e5-b5b680559a32}: [DhcpDomain] lan Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\PC\AppData\Local\Microsoft\Edge\User Data\Default [2024-10-06] Edge Notifications: Default -> hxxps://entreprise.one; hxxps://fr.journalmural.com; hxxps://sitenolwennmapassion.forumactif.com; hxxps://tv-programme.com; hxxps://vavavoomproductions.com; hxxps://www.eurosport.fr; hxxps://www.facebook.com; hxxps://www.fnac.com; hxxps://www.lanouvellerepublique.fr; hxxps://www.rougegorge.com; hxxps://www.sncf-connect.com Edge HomePage: Default -> hxxp://hp17win10.msn.com/?pc=HCTE Edge Extension: (Google Docs hors connexion) - C:\Users\PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-09-20] Edge Extension: (Edge relevant text changes) - C:\Users\PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] Edge Extension: (uBlock Origin) - C:\Users\PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2024-09-27] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-09-07] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default [2024-10-06] CHR Extension: (Google Docs hors connexion) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-18] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-19] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.) R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.8.0\ABService.exe [1088560 2021-12-15] (AOMEI International Network Limited -> AOMEI International Network Limited) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [127192 2015-11-19] (Realtek Semiconductor Corp -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13861048 2024-09-22] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-10-02] (Dropbox, Inc -> Dropbox, Inc.) S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\209.4.3661\DropboxElevationService.exe [1659288 2024-10-02] (Dropbox, Inc -> Dropbox, Inc.) R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1321096 2018-09-28] (HP Inc. -> HP Inc.) R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [927848 2024-09-04] (HP Inc. -> HP Inc.) R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [926304 2024-09-04] (HP Inc. -> HP Inc.) R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [922208 2024-09-04] (HP Inc. -> HP Inc.) R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [927336 2024-09-04] (HP Inc. -> HP Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9019096 2024-09-26] (Malwarebytes Inc. -> Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\tunnel\MBVpnTunnelService.exe [3073888 2024-06-03] (Malwarebytes Inc. -> Malwarebytes) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. -> CyberLink) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-09-18] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> ) R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> ) R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [32176 2022-02-24] (AOMEI International Network Limited -> ) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2022-06-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-04-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [201280 2024-10-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [80448 2024-10-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2024-10-05] (Malwarebytes Inc. -> Malwarebytes) R3 MpKsl283fbb13; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3EBE87CA-AEB3-48E5-946D-C897379549CF}\MpKslDrv.sys [267552 2024-10-06] (Microsoft Windows -> Microsoft Corporation) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602392 2024-09-18] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-18] (Microsoft Windows -> Microsoft Corporation) S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-06-03] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-10-06 14:32 - 2024-10-06 14:38 - 000023683 _____ C:\Users\PC\Contacts\Desktop\FRST.txt 2024-10-06 14:29 - 2024-10-06 14:29 - 000000000 ____D C:\Users\PC\Contacts\Desktop\FRST-OlderVersion 2024-10-06 12:16 - 2024-10-06 14:29 - 002397696 _____ (Farbar) C:\Users\PC\Contacts\Desktop\FRST64-2.1.exe 2024-10-05 12:30 - 2024-10-05 12:30 - 000000000 ____D C:\Users\PC\Documents\Dossier CE 2018 2024-10-05 11:36 - 2024-10-05 11:36 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2024-10-05 10:42 - 2024-10-05 10:43 - 000041241 _____ C:\Users\PC\Downloads\DEVIS-I-24-10-5-SERGE.pdf 2024-10-05 10:42 - 2024-10-05 10:43 - 000041241 _____ C:\Users\PC\Downloads\DEVIS-I-24-10-5-SERGE (3).pdf 2024-10-05 10:42 - 2024-10-05 10:43 - 000041241 _____ C:\Users\PC\Downloads\DEVIS-I-24-10-5-SERGE (2).pdf 2024-10-05 10:42 - 2024-10-05 10:43 - 000041241 _____ C:\Users\PC\Downloads\DEVIS-I-24-10-5-SERGE (1).pdf 2024-10-04 09:08 - 2024-10-04 09:08 - 000074471 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240906 (4).pdf 2024-10-04 09:08 - 2024-10-04 09:08 - 000074471 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240906 (3).pdf 2024-10-04 08:51 - 2024-10-04 08:51 - 000074471 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240906 (2).pdf 2024-10-04 08:48 - 2024-10-04 08:48 - 000074406 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240906 (1).pdf 2024-10-04 08:44 - 2024-10-04 08:44 - 000058302 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240906.pdf 2024-10-04 08:43 - 2024-10-04 09:11 - 000000000 ____D C:\Users\PC\Documents\Factures bouygues 2024 2024-10-04 08:42 - 2024-10-04 08:42 - 000074557 _____ C:\Users\PC\Downloads\Bouyguestelecom_Facture_20240823.pdf 2024-10-03 23:00 - 2024-10-03 23:01 - 000196122 _____ C:\Users\PC\Downloads\EC9DDBD4F46A6841FACCC7F83F242EA68C13C3CEAC0F19D9E2A2 (2).pdf 2024-10-03 20:13 - 2024-10-03 20:13 - 000162908 _____ C:\Users\PC\Documents\Avis_d_impot_2024_sur_les_revenus_et_prelev_sociaux_2023 (3).pdf 2024-10-03 15:47 - 2024-10-03 15:47 - 000196122 _____ C:\Users\PC\Downloads\EC9DDBD4F46A6841FACCC7F83F242EA68C13C3CEAC0F19D9E2A2 (1).pdf 2024-10-03 15:02 - 2024-10-03 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2024-10-03 14:50 - 2024-10-03 14:51 - 000374719 _____ C:\Users\PC\Downloads\archive (26).zip 2024-10-03 14:50 - 2024-10-03 14:50 - 000196122 _____ C:\Users\PC\Downloads\EC9DDBD4F46A6841FACCC7F83F242EA68C13C3CEAC0F19D9E2A2.pdf 2024-10-03 14:50 - 2024-10-03 14:50 - 000196121 _____ C:\Users\PC\Downloads\EC9DDBD4F46A6841FACCC7F83F2B2BA58E16C3CEAC0F19D9E2A2.pdf 2024-10-03 14:50 - 2024-10-03 14:50 - 000196121 _____ C:\Users\PC\Downloads\EC9DDBD4F46A6841FACCC7F83F2B2BA58E16C3CEAC0F19D9E2A2 (1).pdf 2024-10-03 12:38 - 2024-10-03 12:38 - 000000000 _____ C:\Users\PC\netsh 2024-10-02 13:02 - 2024-10-02 13:02 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2024-09-30 23:46 - 2024-09-30 23:46 - 000215408 _____ C:\Users\PC\Documents\001-ATTESTATION (4).pdf 2024-09-30 21:00 - 2024-09-30 21:00 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (6).pdf 2024-09-30 20:56 - 2024-09-30 20:56 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (5).pdf 2024-09-30 17:21 - 2024-09-30 17:21 - 000001314 _____ C:\Users\PC\Documents\Centrale_Adetec_VOCALYS_CW32-0-1411571731gsm.pdf - Raccourci.lnk 2024-09-30 17:21 - 2024-09-30 17:21 - 000001204 _____ C:\Users\PC\Documents\Mail envoyé a ADETEC.docx - Raccourci.lnk 2024-09-30 15:50 - 2024-09-30 15:50 - 000029887 _____ C:\Users\PC\Downloads\ticket-PAYFIP0000000119008123 (4).pdf 2024-09-30 15:50 - 2024-09-30 15:50 - 000029887 _____ C:\Users\PC\Downloads\ticket-PAYFIP0000000119008123 (3).pdf 2024-09-30 15:50 - 2024-09-30 15:50 - 000029887 _____ C:\Users\PC\Downloads\ticket-PAYFIP0000000119008123 (2).pdf 2024-09-30 14:32 - 2024-09-30 14:47 - 000000000 ____D C:\Users\PC\Documents\contribution incitative 2024 2024-09-30 14:03 - 2024-09-30 14:03 - 000029910 _____ C:\Users\PC\Downloads\ticket-PAYFIP0000000119008123 (1).pdf 2024-09-30 14:02 - 2024-09-30 14:03 - 000029910 _____ C:\Users\PC\Downloads\ticket-PAYFIP0000000119008123.pdf 2024-09-30 11:10 - 2024-09-30 11:10 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (4).pdf 2024-09-30 10:41 - 2024-09-30 10:41 - 000187566 _____ C:\Users\PC\Downloads\001-ATTESTATION (3) Copy.pdf 2024-09-30 10:40 - 2024-09-30 10:40 - 000187566 _____ C:\Users\PC\Documents\attestation envoyé par Mr Lopez le 30 09 24 mon véhicule assuré a partir du 27 09 24.pdf 2024-09-30 10:34 - 2024-09-30 10:34 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (3).pdf 2024-09-30 10:31 - 2024-09-30 10:31 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (2).pdf 2024-09-30 10:31 - 2024-09-30 10:31 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION (1).pdf 2024-09-30 10:19 - 2024-09-30 10:19 - 000050015 _____ C:\Users\PC\Documents\récapitulatif de ma question allianz.pdf 2024-09-30 10:18 - 2024-09-30 10:18 - 000215408 _____ C:\Users\PC\Downloads\001-ATTESTATION.pdf 2024-09-29 13:27 - 2024-09-29 13:27 - 000000000 ____D C:\Users\Default\AppData\Local\Malwarebytes 2024-09-28 09:02 - 2024-09-30 23:45 - 000050015 _____ C:\Users\PC\Documents\975651ed-5dca-434d-b985-ace2b515daa3.pdf 2024-09-27 18:28 - 2024-09-27 18:28 - 000051445 _____ C:\Users\PC\Downloads\Assurance auto 207 2024 (9).pdf 2024-09-27 18:28 - 2024-09-27 18:28 - 000051445 _____ C:\Users\PC\Downloads\Assurance auto 207 2024 (8).pdf 2024-09-27 18:28 - 2024-09-27 18:28 - 000051445 _____ C:\Users\PC\Downloads\Assurance auto 207 2024 (7).pdf 2024-09-26 11:49 - 2024-09-26 11:49 - 000696356 _____ C:\Users\PC\Documents\Avis_de_taxes_foncieres_2024 (1).pdf 2024-09-26 11:47 - 2024-09-26 11:47 - 000162908 _____ C:\Users\PC\Documents\Avis_d_impot_2024_sur_les_revenus_et_prelev_sociaux_2023 (2).pdf 2024-09-26 09:40 - 2024-09-26 09:40 - 000050558 _____ C:\Users\PC\Documents\justificatif de voyage marie paule 2.pdf 2024-09-26 09:40 - 2024-09-26 09:40 - 000050558 _____ C:\Users\PC\Documents\justificatif de voyage marie paule 1.pdf 2024-09-25 10:45 - 2024-09-25 10:45 - 000000000 ___HD C:\$WinREAgent 2024-09-23 21:50 - 2024-09-23 21:50 - 000239886 _____ C:\Users\PC\Downloads\418f0de4-5f28-407e-98b7-bc2d8af933f5.jfif 2024-09-23 21:50 - 2024-09-23 21:50 - 000239886 _____ C:\Users\PC\Downloads\418f0de4-5f28-407e-98b7-bc2d8af933f5 (1).jfif 2024-09-23 21:41 - 2024-09-23 21:41 - 000581158 _____ C:\Users\PC\Documents\eto-cfa2a3bf-e08d-4f32-81cc-ad0dbdec8f5c.pdf 2024-09-23 21:38 - 2024-09-23 21:38 - 000581160 _____ C:\Users\PC\Documents\eto-ad5cddc0-b726-4eec-ab66-c605cb29050a.pdf 2024-09-23 21:35 - 2024-09-23 21:37 - 000495558 _____ C:\Users\PC\Documents\Marie Paule aller .pdf 2024-09-23 21:31 - 2024-09-23 21:31 - 000581147 _____ C:\Users\PC\Documents\eto-0f143793-614f-4a9f-9566-c2d2ca1e7d40.pdf 2024-09-23 12:46 - 2024-09-23 12:46 - 000162908 _____ C:\Users\PC\Documents\Avis_d_impot_2024_sur_les_revenus_et_prelev_sociaux_2023 (1).pdf 2024-09-23 12:43 - 2024-09-23 12:43 - 000696356 _____ C:\Users\PC\Documents\Avis_de_taxes_foncieres_2024.pdf 2024-09-19 11:40 - 2024-09-19 11:40 - 000495558 _____ C:\Users\PC\Documents\eto-8e6e30f1-a747-4b80-9d8c-66fd6a31a7b3 (1).pdf 2024-09-19 11:35 - 2024-09-19 11:35 - 000495555 _____ C:\Users\PC\Documents\eto-8d95609f-67dc-4a6c-9fe2-3c1e45c4b3ea.pdf 2024-09-19 11:35 - 2024-09-19 11:35 - 000495549 _____ C:\Users\PC\Documents\eto-d9a3e874-a74c-4235-8402-86e2a385a100.pdf 2024-09-19 11:34 - 2024-09-19 11:34 - 000495548 _____ C:\Users\PC\Documents\eto-f762844e-f1f0-4acf-b289-9e9616fd180b.pdf 2024-09-19 11:33 - 2024-09-19 11:33 - 000495558 _____ C:\Users\PC\Documents\eto-8e6e30f1-a747-4b80-9d8c-66fd6a31a7b3.pdf 2024-09-18 12:26 - 2024-09-18 12:27 - 008917384 _____ (Google LLC) C:\Users\PC\Downloads\ChromeSetup (3).exe 2024-09-16 16:33 - 2024-09-16 16:33 - 002753065 _____ C:\Users\PC\Documents\Table de nuit la redoute.pdf 2024-09-15 12:54 - 2024-09-15 12:54 - 000635089 _____ C:\Users\PC\Documents\IPID_Protection Accidents_de_la_Vie.pdf 2024-09-15 12:23 - 2024-09-15 12:23 - 000000162 ____H C:\Users\PC\Documents\~$lianz 2024 Assurance voiture.pdf 2024-09-15 12:21 - 2024-09-15 12:21 - 000000162 ____H C:\Users\PC\Documents\~$llianz 2024 contrat habitation.pdf 2024-09-15 12:18 - 2024-09-15 12:18 - 000469162 _____ C:\Users\PC\Documents\alllianz 2024 contrat habitation.pdf 2024-09-15 12:16 - 2024-09-15 12:16 - 000469162 _____ C:\Users\PC\Documents\Allianz 2024 Assurance voiture.pdf 2024-09-14 11:45 - 2024-09-14 11:45 - 000009409 _____ C:\Users\PC\Documents\recap compte 14 06 24.xlsx 2024-09-14 11:44 - 2024-10-03 22:32 - 000026388 _____ C:\Users\PC\Documents\compte recap le 14 09 24.xlsx 2024-09-14 11:40 - 2024-09-14 11:40 - 000009410 _____ C:\Users\PC\Documents\tecap compte 14 06 24.xlsx 2024-09-14 11:08 - 2024-09-14 11:39 - 000009414 _____ C:\Users\PC\Documents\Classeur10.xlsx 2024-09-13 09:29 - 2024-09-13 09:29 - 000237471 _____ C:\Users\PC\Documents\Notice_Protection_Donnees_PersonnellesBNP.pdf 2024-09-12 23:22 - 2024-09-12 23:53 - 000009331 _____ C:\Users\PC\Documents\cheque cde séances chakra.xlsx 2024-09-09 17:58 - 2024-09-09 17:59 - 000126511 _____ C:\Users\PC\Downloads\2024 DEVIS BONNET 1 (3).pdf ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-10-06 14:47 - 2023-05-10 17:00 - 000000000 ____D C:\Users\PC\AppData\Local\Malwarebytes 2024-10-06 14:41 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-10-06 14:35 - 2023-01-08 13:47 - 000000000 ____D C:\FRST 2024-10-06 14:25 - 2018-03-31 20:03 - 000000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Word 2024-10-06 14:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-10-06 14:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-10-06 14:13 - 2018-03-31 11:37 - 000000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Excel 2024-10-06 13:45 - 2021-06-06 13:03 - 000000000 ____D C:\Users\PC\AppData\LocalLow\IGDump 2024-10-06 13:35 - 2021-07-04 16:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-10-06 12:14 - 2023-01-08 13:44 - 002434048 _____ (Farbar) C:\Users\PC\Downloads\FRST64-2.1.exe 2024-10-06 12:05 - 2018-04-01 12:03 - 000000000 ____D C:\Users\PC\AppData\Local\Packages 2024-10-06 10:54 - 2021-12-16 12:15 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-10-06 10:53 - 2018-09-03 12:48 - 000000000 ____D C:\Users\PC\AppData\Local\Dropbox 2024-10-06 10:52 - 2022-04-07 23:31 - 000000000 ____D C:\Users\PC\AppData\Roaming\Dropbox 2024-10-05 17:14 - 2019-05-16 22:09 - 000000000 ____D C:\Users\PC\Contacts\Desktop\Bul val 2024-10-05 14:24 - 2021-11-21 22:29 - 000001337 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk 2024-10-05 14:24 - 2021-11-21 22:29 - 000000000 ____D C:\Users\PC\AppData\Local\PCHealthCheck 2024-10-05 11:36 - 2022-02-24 11:48 - 000000432 _____ C:\WINDOWS\SysWOW64\winsevr.dat 2024-10-05 11:36 - 2022-02-24 11:48 - 000000208 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat 2024-10-05 11:35 - 2021-07-04 17:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-10-05 11:35 - 2020-08-18 23:05 - 000008192 ___SH C:\DumpStack.log.tmp 2024-10-05 11:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2024-10-05 11:34 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2024-10-05 11:34 - 2018-03-21 11:42 - 000000000 ____D C:\ProgramData\Realtek 2024-10-05 11:34 - 2018-03-21 11:40 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2024-10-05 11:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF 2024-10-05 10:15 - 2020-01-27 11:32 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-10-04 23:40 - 2018-03-31 20:03 - 000000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Office 2024-10-04 23:39 - 2024-01-09 13:13 - 000031624 _____ C:\Users\PC\Documents\plumo3.xlsx 2024-10-04 18:24 - 2021-07-04 17:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard 2024-10-04 07:26 - 2024-05-19 17:25 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-10-03 22:33 - 2024-05-01 12:29 - 000000000 ____D C:\Users\PC\Documents\Documents de circonstance 2024-10-03 15:06 - 2016-10-25 07:09 - 000000000 ____D C:\Program Files (x86)\Dropbox 2024-10-03 12:38 - 2021-07-04 15:22 - 000000000 ____D C:\Users\PC 2024-10-02 22:12 - 2022-01-20 12:51 - 014233600 _____ C:\Users\PC\Downloads\WindowsPCHealthCheckSetup (8).msi 2024-10-02 21:44 - 2021-07-04 17:09 - 000004168 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{58D0B303-304A-45AF-AC5B-0E281A6A645F} 2024-10-01 13:17 - 2020-07-12 11:42 - 000000000 ____D C:\Users\PC\AppData\Local\CrashDumps 2024-10-01 13:15 - 2016-10-25 07:09 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2024-09-29 17:19 - 2021-07-04 16:46 - 001924286 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-09-29 17:19 - 2019-12-07 16:49 - 000831904 _____ C:\WINDOWS\system32\perfh00C.dat 2024-09-29 17:19 - 2019-12-07 16:49 - 000167670 _____ C:\WINDOWS\system32\perfc00C.dat 2024-09-29 17:19 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2024-09-29 17:15 - 2019-09-27 14:28 - 000000446 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2024-09-28 10:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2024-09-25 20:55 - 2021-07-04 16:22 - 000414312 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2024-09-25 20:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-09-25 15:08 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-09-25 09:29 - 2019-09-28 14:43 - 000000000 ____D C:\Users\PC\Contacts\Desktop\Maison candillargues 2024-09-20 08:46 - 2024-05-19 17:11 - 000000000 ____D C:\Users\PC\AppData\Local\Google 2024-09-18 08:53 - 2018-03-31 22:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2024-09-17 08:21 - 2022-09-11 21:56 - 000000000 ____D C:\Users\PC\AppData\Roaming\com.adobe.dunamis 2024-09-17 08:21 - 2018-07-05 12:00 - 000000000 ____D C:\Users\PC\AppData\Local\Adobe 2024-09-17 08:21 - 2018-03-21 15:15 - 000000000 ____D C:\Users\PC\AppData\Roaming\Adobe 2024-09-16 19:24 - 2021-07-04 17:09 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2024-09-16 19:23 - 2022-10-13 20:17 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2024-09-14 11:42 - 2022-12-24 00:17 - 000026392 _____ C:\Users\PC\Documents\compte recap le 23 12 22.xlsx 2024-09-11 20:25 - 2021-07-04 16:28 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2024-09-11 17:50 - 2016-10-25 07:05 - 000000000 ____D C:\Program Files\HP 2024-09-11 17:11 - 2018-03-31 16:20 - 000000000 ____D C:\WINDOWS\system32\MRT 2024-09-11 16:59 - 2018-03-31 16:20 - 199688632 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2024-09-08 22:43 - 2021-07-04 17:09 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-09-08 22:43 - 2021-07-04 17:09 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore ==================== Fichiers à la racine de certains dossiers ======== 2018-03-21 15:15 - 2024-10-06 10:48 - 008129618 _____ () C:\Users\PC\AppData\Local\BTServer.log 2020-10-08 13:26 - 2023-07-03 21:27 - 000030208 _____ () C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2018-04-07 08:10 - 2018-04-07 08:10 - 000000017 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg ==================== FLock ============================== 2018-03-31 16:40 C:\WINDOWS\UpdateAssistant ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================