Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-12-2019
Ran by Nyco (administrator) on DESKTOP-F5S3VRS (HP HP Laptop 14-bs0xx) (28-12-2019 21:42:05)
Running from C:\Users\Nyco\Desktop
Loaded Profiles: Nyco (Available Profiles: Nyco)
Platform: Windows 10 Home Version 1909 18363.535 (X64) Language: Anglais (États-Unis)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ACD Systems International Inc. -> ) [File not signed] C:\Program Files (x86)\ACD Systems\ACDSee\21.0\ACDSeeCommander21.exe
(ACD Systems International Inc. -> ACD Systems) [File not signed] C:\Program Files (x86)\ACD Systems\ACDSee\21.0\acdIDInTouch2.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Garmin International, Inc. -> Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Express\express.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f3a64c75ee4defb7\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f3a64c75ee4defb7\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\IntelCpHeciSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Nyco\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19081.22010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIC.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\NisSrv.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3674864 2018-10-30] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [ACSW21EN] => C:\Program Files (x86)\ACD Systems\ACDSee\21.0\acdIDInTouch2.exe [1854416 2019-11-08] (ACD Systems International Inc. -> ACD Systems) [File not signed]
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709160 2018-05-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\...\Run: [ACDSeeCommanderStd20] => C:\Program Files (x86)\ACD Systems\ACDSee\21.0\ACDSeeCommander21.exe [4814288 2019-11-08] (ACD Systems International Inc. -> ) [File not signed]
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\...\Run: [ACDSeeCommander21] => C:\Program Files (x86)\ACD Systems\ACDSee\21.0\ACDSeeCommander21.exe [4814288 2019-11-08] (ACD Systems International Inc. -> ) [File not signed]
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30868464 2019-12-12] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-20] (Google LLC -> Google LLC)
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe
IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {157C9F40-FFAB-43C8-9F39-1A5B56786B74} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {35653C2B-3D01-4F31-9771-21B9F6F2B6E0} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {3752F789-2EBC-46F3-9F25-04BC39FAC490} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2050968 2019-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {3813E924-ADEF-4B3D-AD38-EB36294D68CE} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic path SoftwareLicensingProduct where (ID="d450596f-894d-49e0-966a-fd39ed4c4c64") call Activate
Task: {49C26DD9-E65D-4843-8DE3-DA8936DD10A8} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2019-12-12] (Garmin International, Inc. -> )
Task: {55EFAAA0-D2C4-46EF-8350-1669CA0C558F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {6327894A-D10C-43E1-B962-B073599B7AA7} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {78C10934-C0A6-4831-A36D-C3C5B66E2D68} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158536 2019-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {80352C89-2149-401A-9A63-DDDC984A7100} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24625520 2019-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {8186871D-EED0-449E-9754-A5BAA34C6979} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6128016 2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {81B6C55E-31F3-49C5-A9F1-A0CFDCD2F074} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8E949603-EBA0-4D0F-A4F9-187A4DF27DEF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24625520 2019-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D29B779-FC01-41BF-919A-6CAB1E8E8B78} - System32\Tasks\RtHDVBg_Session => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1505832 2018-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {A0D6F9F4-E72D-4F5A-ACFE-2CCAD39C2F53} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A64635F1-0966-4383-B1D6-593EC32C9A51} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A9B91825-76FC-40CF-A2F1-AED5627011DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-11-08] (Google Inc -> Google LLC)
Task: {AB0C10EA-8EDD-4626-9DE1-2A1E056C8653} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-11-08] (Google Inc -> Google LLC)
Task: {CDFD6747-B860-472C-B72F-B8F334C0C462} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2050968 2019-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2FAD208-0408-4303-A1B2-A28E78793071} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpCmdRun.exe [469648 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4021203-D01C-4D47-9065-8A5947B81C5E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6128016 2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F55DE9EC-A202-4AAF-ACF5-3628AD8458A7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158536 2019-12-22] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{ee530ffb-e0f1-492f-9550-94f77bc56981}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-3359971815-2725746550-903856936-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Foxit PhantomPDF Create PDF ToolBar Helper -> {A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A} -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2019-06-28] (FOXIT SOFTWARE INC. -> )
Toolbar: HKLM-x32 - Foxit PhantomPDF Create PDF ToolBar - {BFD9D8A8-57FF-488A-B919-065EC77CF82F} - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll [2019-06-28] (FOXIT SOFTWARE INC. -> )
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 932ritjr.default
FF ProfilePath: C:\Users\Nyco\AppData\Roaming\Mozilla\Firefox\Profiles\932ritjr.default [2019-11-08]
FF ProfilePath: C:\Users\Nyco\AppData\Roaming\Mozilla\Firefox\Profiles\a5kmpy71.default-release [2019-12-28]
FF HKLM\...\Firefox\Extensions: [FFExtnHTML2PDF@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi
FF Extension: (Foxit PDF Creator) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi [2019-05-05] [Legacy]
FF HKLM\...\Firefox\Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi
FF Extension: (Foxit PDF Creator) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi [2019-05-05]
FF HKLM-x32\...\Firefox\Extensions: [FFExtnHTML2PDF@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi
FF HKLM-x32\...\Firefox\Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2019-06-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2019-06-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2019-06-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2019-06-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default [2019-12-28]
CHR DownloadDir: C:\Users\Nyco\Desktop
CHR Extension: (Slides) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-11-08]
CHR Extension: (Docs) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-11-08]
CHR Extension: (Google Drive) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-11-08]
CHR Extension: (YouTube) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-11-08]
CHR Extension: (Foxit PDF Creator) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\cifnddnffldieaamihfkhkdgnbhfmaci [2019-11-08]
CHR Extension: (Sheets) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-11-08]
CHR Extension: (Google Docs hors connexion) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-11-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-08]
CHR Extension: (Gmail) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-11-08]
CHR Extension: (Chrome Media Router) - C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-14]
CHR Profile: C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-12-23]
CHR Profile: C:\Users\Nyco\AppData\Local\Google\Chrome\User Data\System Profile [2019-12-23]
CHR HKLM\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2019-05-05]
CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2019-05-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11165560 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 esifsvc; C:\Windows\System32\Intel\DPTF\esif_uf.exe [1865224 2018-05-01] (Intel Corporation -> Intel Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [152816 2018-10-30] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 ibtsiva; C:\Windows\System32\ibtsiva.exe [529912 2018-12-21] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [268128 2018-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [135520 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [78680 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [71000 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [402264 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 ETDSMBus; C:\Windows\System32\drivers\ETDSMBus.sys [41200 2018-10-30] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.)
R0 iaStorAC; C:\Windows\System32\drivers\iaStorAC.sys [1096192 2019-08-12] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R3 ibtusb; C:\Windows\System32\drivers\ibtusb.sys [199192 2018-05-11] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [8720384 2019-08-27] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [45664 2019-12-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [355760 2019-12-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [54192 2019-12-08] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [35392 2019-08-06] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-28 21:42 - 2019-12-28 21:42 - 000027110 _____ C:\Users\Nyco\Desktop\FRST.txt
2019-12-28 21:41 - 2019-12-28 21:42 - 000000000 ____D C:\FRST
2019-12-28 21:39 - 2019-12-28 21:39 - 002272256 _____ (Farbar) C:\Users\Nyco\Desktop\FRST64.exe
2019-12-28 19:10 - 2019-12-28 19:10 - 000000000 ___HD C:\OneDriveTemp
2019-12-28 18:41 - 2019-12-28 18:41 - 003326336 _____ (Nicolas Coolman) C:\Users\Nyco\Downloads\ZHPCleaner.exe
2019-12-28 18:34 - 2019-12-28 18:57 - 000000000 ____D C:\Users\Nyco\AppData\Roaming\ZHP
2019-12-28 18:34 - 2019-12-28 18:41 - 000000000 ____D C:\Users\Nyco\AppData\Local\ZHP
2019-12-28 18:34 - 2019-12-28 18:34 - 003252608 _____ (Nicolas Coolman) C:\Users\Nyco\Downloads\ZHPDiag3.exe
2019-12-28 15:40 - 2019-12-28 15:40 - 000120955 _____ C:\Users\Nyco\Downloads\cv update.pdf
2019-12-25 11:47 - 2019-12-25 11:47 - 000001963 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2019-12-25 11:47 - 2019-12-25 11:47 - 000001963 _____ C:\ProgramData\Desktop\Garmin Express.lnk
2019-12-25 11:47 - 2019-12-25 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2019-12-24 16:10 - 2019-12-24 16:10 - 006950624 _____ (EnigmaSoft Limited) C:\Users\Nyco\Downloads\SpyHunter-Installer (1).exe
2019-12-24 15:44 - 2019-12-24 15:44 - 006950624 _____ (EnigmaSoft Limited) C:\Users\Nyco\Downloads\SpyHunter-Installer.exe
2019-12-22 18:11 - 2019-12-22 18:11 - 131726386 _____ C:\Users\Nyco\Desktop\P1120179-2.psd
2019-12-22 09:50 - 2019-12-22 09:50 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2019-12-22 09:50 - 2019-12-22 09:50 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2019-12-22 09:50 - 2019-12-22 09:50 - 000002413 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2019-12-22 09:50 - 2019-12-22 09:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2019-12-20 20:52 - 2019-12-20 20:52 - 000000000 ____D C:\Users\Nyco\Documents\cv
2019-12-20 16:10 - 2019-12-21 18:52 - 000000000 ____D C:\Users\Nyco\Desktop\preset
2019-12-19 21:55 - 2019-12-19 21:55 - 000008593 _____ C:\Users\Nyco\Downloads\Sam-Horines-Lightroom-Presets (2).zip
2019-12-19 21:51 - 2019-12-19 21:51 - 000008593 _____ C:\Users\Nyco\Downloads\Sam-Horines-Lightroom-Presets (1).zip
2019-12-19 21:49 - 2019-12-19 21:49 - 000008593 _____ C:\Users\Nyco\Downloads\Sam-Horines-Lightroom-Presets.zip
2019-12-19 21:26 - 2019-12-19 21:26 - 000000541 _____ C:\Users\Nyco\Downloads\Disque local (C) - Raccourci.lnk
2019-12-13 15:21 - 2019-12-14 08:59 - 000000000 ____D C:\Users\Nyco\Desktop\pui
2019-12-13 11:34 - 2019-12-13 11:35 - 000000000 ____D C:\AdwCleaner
2019-12-13 11:33 - 2019-12-13 11:34 - 008218800 _____ (Malwarebytes) C:\Users\Nyco\Downloads\adwcleaner_8.0.0.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 025443840 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 018020352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 009927992 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 007905000 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 007754240 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 007278592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 006516648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 006083832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 005943296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 005914112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 005764664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 003729408 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 002800640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 002762296 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 002698768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 002494432 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 002284544 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 002147328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 002082208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001757304 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-12 00:20 - 2019-12-12 00:20 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001743888 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001697280 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001664904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001656600 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001647072 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001610752 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001539584 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001512528 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001451520 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001413840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001399312 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-12-12 00:20 - 2019-12-12 00:20 - 001261464 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001182448 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001098928 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001072952 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 001066496 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001054864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 001006904 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000986936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Service.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000842552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000826368 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000822416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000797112 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000774456 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000674280 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000673456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000598016 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000593128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000532480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000530944 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000524264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000511000 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000422712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000406480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000404480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000127272 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000097080 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000089536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2019-12-12 00:20 - 2019-12-12 00:20 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\autopilot.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000067112 _____ (Microsoft Corporation) C:\Windows\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000032056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2019-12-12 00:20 - 2019-12-12 00:20 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\autopilotdiag.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2019-12-12 00:20 - 2019-12-12 00:20 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2019-12-02 04:02 - 2018-12-29 16:41 - 019661824 _____ C:\Users\Nyco\Desktop\P1010034.RW2

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-28 21:33 - 2019-11-08 20:43 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-12-28 21:33 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-28 19:14 - 2019-11-09 05:42 - 000794830 _____ C:\Windows\system32\perfh00C.dat
2019-12-28 19:14 - 2019-11-09 05:42 - 000150884 _____ C:\Windows\system32\perfc00C.dat
2019-12-28 19:14 - 2019-11-08 20:49 - 001772410 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-28 19:14 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2019-12-28 19:10 - 2019-11-08 20:51 - 000000000 ___RD C:\Users\Nyco\OneDrive
2019-12-28 19:10 - 2019-11-08 20:43 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-28 19:10 - 2019-11-08 12:17 - 000000000 __SHD C:\Users\Nyco\IntelGraphicsProfiles
2019-12-28 19:10 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2019-12-28 19:10 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2019-12-28 17:22 - 2019-11-08 11:57 - 000000000 ____D C:\Users\Nyco\AppData\Local\PlaceholderTileLogoFolder
2019-12-28 15:46 - 2019-11-08 20:48 - 000000000 ____D C:\Users\Nyco\AppData\Local\Packages
2019-12-28 15:41 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-27 11:21 - 2019-11-08 17:13 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2019-12-27 11:21 - 2019-11-08 17:13 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2019-12-26 10:13 - 2019-11-20 16:48 - 000000000 ____D C:\Program Files\CCleaner
2019-12-25 21:32 - 2019-11-22 08:45 - 000000000 ____D C:\Users\Nyco\AppData\Local\Garmin
2019-12-25 11:47 - 2019-11-22 08:45 - 000000000 ____D C:\ProgramData\Garmin
2019-12-25 11:47 - 2019-11-22 08:42 - 000003650 _____ C:\Windows\system32\Tasks\GarminUpdaterTask
2019-12-25 11:47 - 2019-11-22 08:42 - 000000000 ____D C:\Program Files (x86)\Garmin
2019-12-25 11:47 - 2019-11-08 12:41 - 000000000 ____D C:\ProgramData\Package Cache
2019-12-25 11:44 - 2019-11-08 20:48 - 000000000 ____D C:\Users\Nyco\AppData\Local\VirtualStore
2019-12-23 17:48 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\LiveKernelReports
2019-12-22 18:11 - 2019-11-08 20:47 - 000000000 ____D C:\Users\Nyco
2019-12-22 09:49 - 2019-11-08 12:52 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-20 15:23 - 2019-11-09 16:27 - 000000000 ____D C:\Users\Nyco\Desktop\AdobePhotoshop19-fr_FR_x64
2019-12-20 15:14 - 2019-11-08 12:06 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-20 15:14 - 2019-11-08 12:06 - 000002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-20 15:14 - 2019-11-08 12:06 - 000002258 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2019-12-19 21:25 - 2019-11-08 12:47 - 000000000 ____D C:\Users\Nyco\Documents\Adobe
2019-12-19 20:33 - 2019-11-08 12:42 - 000000000 ____D C:\Users\Public\Documents\Adobe
2019-12-19 20:33 - 2019-11-08 12:42 - 000000000 ____D C:\ProgramData\Documents\Adobe
2019-12-18 20:37 - 2019-11-08 20:49 - 000000000 ____D C:\Users\Nyco\AppData\Local\MicrosoftEdge
2019-12-14 09:13 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-14 08:54 - 2019-11-08 12:05 - 000003590 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-14 08:54 - 2019-11-08 12:05 - 000003466 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-12-12 00:48 - 2019-11-08 20:48 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-12-12 00:48 - 2019-11-08 20:48 - 000000000 ___RD C:\Users\Nyco\3D Objects
2019-12-12 00:48 - 2019-11-08 20:43 - 000303080 _____ C:\Windows\system32\FNTCACHE.DAT
2019-12-12 00:48 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2019-12-12 00:48 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2019-12-12 00:48 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2019-12-12 00:24 - 2019-11-08 12:13 - 000000000 ____D C:\Windows\system32\MRT
2019-12-12 00:22 - 2019-11-08 12:13 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-12 00:22 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2019-12-08 14:22 - 2019-11-08 20:43 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-12-07 17:41 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Drivers\DriverData
2019-12-07 09:49 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\NDF
2019-12-07 09:21 - 2019-11-20 16:48 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-12-05 02:48 - 2019-11-08 20:51 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3359971815-2725746550-903856936-1001
2019-12-05 02:48 - 2019-11-08 20:47 - 000002398 _____ C:\Users\Nyco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== Files in the root of some directories ========

2019-11-08 12:32 - 2019-11-08 12:32 - 000000410 _____ () C:\Users\Nyco\AppData\Local\oobelibMkey.log
2019-11-21 09:57 - 2019-11-21 09:57 - 000007597 _____ () C:\Users\Nyco\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================