Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 11-04-2020
Exécuté par Yann (administrateur) sur PCHEZOUG (Acer, inc. Aspire 7730ZG) (11-04-2020 11:38:08)
Exécuté depuis C:\Users\Yann\Desktop\Bureau
Profils chargés: Yann (Profils disponibles: Yann & Helen & Invité)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) [Fichier non signé] C:\Program Files\QuickTime\QTTask.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.141.333\AvastBrowserCrashHandler.exe
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\Quick Menu\CNQMUPDT.EXE
(Cole Williams Software Limited -> ) C:\Windows\System32\Codecs\TrayMenu.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(Google Inc. -> Google Inc.) C:\Program Files\Picasa2\PicasaMediaDetector.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Hewlett-Packard Co.) [Fichier non signé] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Protexis Inc. -> Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK32.EXE
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [eRecoveryService] => [X]
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421160 2011-01-25] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [fst_fr_94] => [X]
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.) [Fichier non signé]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-07-22] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [CanonQuickMenu] => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Run: [Codec Settings UAC Manager] => C:\Windows\system32\Codecs\CodecUACManager.exe [71568 2019-08-08] (Cole Williams Software Limited -> )
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe [443968 2008-08-21] (Google Inc. -> Google Inc.)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [AvastBrowserAutoLaunch_419691F9C1B9F769F3897B45FBF1F8DE] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [1027624 2018-06-13] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [AvastBrowserIsDefault] => "C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtector.exe" --force-protect
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [WallpaperHd] => C:\Users\Yann\AppData\Local\WallpaperHd\WallpaperHd.exe [1830912 2018-06-28] (WallpaperHd) [Fichier non signé]
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\MountPoints2: {0ac4fe09-532d-11df-9f12-00238b4c6405} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\launcher.exe
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\MountPoints2: {3099868b-f132-11de-ae88-00238b4c6405} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\launcher.exe
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Winlogon: [Shell] - <==== ATTENTION
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [220672 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\Windows\system32\advpack.dll [2011-05-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\49.0.79.76\Installer\chrmstp.exe [2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2019-10-14]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\System32\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Notifications de Mises à jour.lnk [2017-02-07]
ShortcutTarget: Notifications de Mises à jour.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (WinZip) [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Préchargeur.lnk [2017-02-07]
ShortcutTarget: WinZip Préchargeur.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing LLC -> WinZip Computing, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk [2017-02-07]
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK32.EXE (WinZip Computing LLC -> WinZip Computing, S.L.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0244C730-37A0-40A5-8947-504EF4E31C4F} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {13E058AF-41BF-41DB-8EAF-E2502527E4DF} - System32\Tasks\{34C2DA4C-BE97-4C2A-A020-0DC620FACAFB} => C:\Windows\system32\pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {234FBB5A-C4A0-4CE9-B3AF-CA96B7D4C474} - System32\Tasks\GoogleUpdateTaskMachineCore1d1f4ad5694df7a => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {270D09B2-9E10-4D3B-805E-4D5D21EF72C7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561952 2009-10-22] (Apple Inc. -> Apple Inc.)
Task: {2DE4667F-4D22-4233-B125-B2E115138F5E} - System32\Tasks\WinZip Update Notifier => C:\Program Files\WinZip\WZUpdateNotifier.exe [1444352 2016-12-13] (WinZip) [Fichier non signé]
Task: {33C1E661-22E4-4AE4-A97D-F0C6F315D9C1} - \free ven-updater -> Pas de fichier <==== ATTENTION
Task: {3A42A05D-40D6-4EC3-AA71-E6537A9388B1} - System32\Tasks\Start WinZip Registry Optimizer Schedule => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
Task: {3CEFA937-8D7D-4DC2-878E-BA879D34CC93} - \free ven-codedownloader -> Pas de fichier <==== ATTENTION
Task: {44E9243D-CB0F-43E1-951C-74FA374B120E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {4EE7580D-3C81-4A41-8E18-032D4139FFB9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {80BF888E-8E27-4F71-96C5-7AED3103B7A9} - System32\Tasks\Start WinZip Registry Optimizer Update => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
Task: {8B962B38-A76E-40DA-AA98-E03A9B491689} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_344_pepper.exe [1453624 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {93E8468B-AC56-40B1-92BF-89BC5E55DD5F} - System32\Tasks\NCH Software\PhotoPadDowngrade => C:\Program Files\NCH Software\PhotoPad\photopad.exe [7433336 2017-11-09] (NCH Software -> NCH Software)
Task: {AAF520B3-76E6-4A5E-B41F-06F07848D6DF} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {B1F70D8D-29BE-4CCB-8416-F38F16588D6E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2762968 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {B40D3405-B148-4A4C-BCF5-B10F491FC0EF} - Accès refusé.
Task: {B41389F4-7E32-4278-9D1A-D3484E8C996F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {B57EBC05-F586-4A42-8A33-9A9E2A5FB683} - System32\Tasks\Opera scheduled Autoupdate 1510044029 => C:\Program Files\Opera\launcher.exe [695816 2016-08-05] (Opera Software ASA -> Opera Software)
Task: {C8B9DBD3-80D8-4CAA-A6E8-CA1DE098CD4F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} C:\Program Files\Windows Live\SOXE\wlsoxe.dll [179584 2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCA840A7-32E5-4D91-AC49-2C1514A11F34} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1521952 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {DBE7E21E-90E2-4765-9331-A1A4ABADF386} - System32\Tasks\{E60B9C16-AEF7-46BD-80B2-28034408ADC8} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe -d E:\
Task: {DD903688-839F-4E29-B9B3-17B30682C345} - \PCHelpers_period -> Pas de fichier <==== ATTENTION
Task: {EF4F9BC9-3B15-4643-9B81-F3CF80502331} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {EF779A45-FD6F-46F1-9CBD-A4B10AD5D3F9} - System32\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon) => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\bench-Updater removing.job => /verysilentSYSTEMThis will uninstall Updater 00 <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon).job => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864 2010-10-07] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E8F12856-CB59-4E42-98E7-0AE512888537}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730zg
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730zg
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=TuguuTU&co=FR&userid=4bf35ff6-62f0-4d8b-79db-3cc2c1256ea9&searchtype=ds&q={searchTerms}&installDate=19/02/2014
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395592020&from=tugs&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE908R5M3205M320&q={searchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=TuguuTU&co=FR&userid=4bf35ff6-62f0-4d8b-79db-3cc2c1256ea9&searchtype=ds&q={searchTerms}&installDate=19/02/2014
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Pas de nom -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> Pas de fichier
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (Canon Inc. -> CANON INC.)
BHO: Pas de nom -> {4723AAA8-B2F9-4CC1-9E60-190976DB1FA4} -> Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\assembly\GAC_MSIL\IEExtension\1.0.0.876__c8e1c1f3d6d8e203\IEExtension.dll [2014-07-31] (Vitzo) [Fichier non signé]
BHO: Pas de nom -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> Pas de fichier
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: Skype Plug-In -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15] (Skype Technologies SA -> Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
BHO: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files\Yahoo!\Companion\Installs\cpn3\YTSingleInstance.dll [2010-05-25] (Yahoo! Inc. -> Yahoo! Inc) [Fichier non signé]
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH) [Fichier non signé]
Toolbar: HKLM - Pas de nom - {0BF43445-2F28-4351-9252-17FE6E806AA0} - Pas de fichier
Toolbar: HKLM - Pas de nom - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Pas de fichier
Toolbar: HKLM - Pas de nom - {ae07101b-46d4-4a98-af68-0333ea26e113} - Pas de fichier
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} hxxp://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20120404052537
DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} hxxp://cdn.scan.onecare.live.com/resource/download/scanner/en-us/wlscctrl2.cab
DPF: {4ECE056F-E50F-4F9D-B069-EB342D21F26A} hxxp://www2.snapfish.com/SnapfishActivia3.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation) [Fichier non signé]
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15] (Skype Technologies SA -> Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Software Sarl -> Skype Technologies) [Fichier non signé]
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=sc&from=adks&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE908R5M3205M320&ts=1379426278
FireFox:
========
FF ProfilePath: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372 [2020-04-11]
FF DownloadDir: C:\Users\Yann\Desktop\Bureau
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\Extensions\sp@avast.com.xpi [2019-11-19] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\Extensions\wrc@avast.com.xpi [2019-11-19] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\features\{2b738541-b0ec-4e7a-a140-1dd473d2972e}\hotfix-bug-1548973@mozilla.org.xpi [2019-09-30] []
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-01-21] (Apple Inc. -> )
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2016-04-14] (CANON INC.) [Fichier non signé]
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.) [Fichier non signé]
FF Plugin: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files\Picasa2\npPicasa2.dll [2008-08-21] (Google, Inc.) [Fichier non signé]
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Picasa2\npPicasa3.dll [2014-06-06] (Google Inc -> Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.2.32 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2013-07-14] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpplugin;version=16.0.2.32 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2013-07-14] (RealNetworks, Inc. -> RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-04-16] (RealNetworks, Inc. -> RealDownloader)
FF Plugin: @videolan.org/vlc,version=1.1.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2011-08-09] (the VideoLAN Team) [Fichier non signé]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin HKU\S-1-5-21-85662379-2031076083-3301479797-1000: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll [Pas de fichier]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [cfcbmgbfdbijmjgjihagbomfbjfjmgon] - C:\Users\Yann\AppData\Roaming\SpeedanAlysis\speedanalysis.crx
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM\...\Chrome\Extension: [mocblcnaofikinigmceddfghppkkjbog] - C:\Users\Yann\AppData\Roaming\PlusWinks\pluswinks.crx [2013-03-20]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
Opera:
=======
OPR Notifications: hxxps://drive.google.com; hxxps://mail.google.com; hxxps://www.francecasse.fr; hxxps://www.francecasse.fr; hxxps://www.piecesautodiscount.fr; hxxps://www.youtube.com
OPR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Yann\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2020-04-02]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
S2 gupdate1ca097986ef7254; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Software Sarl -> Skype Technologies) [Fichier non signé]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [1145640 2020-01-09] (Corel Corporation -> Corel Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1710464 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AgereSoftModem; C:\Windows\System32\DRIVERS\AGRSM.sys [1202560 2008-02-29] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)
S3 androidusb; C:\Windows\System32\Drivers\ssadadb.sys [32064 2013-06-21] (MCCI Internal Testing Software -> Google Inc)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [167480 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [165384 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [284256 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [57904 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software s.r.o. -> AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42736 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [40688 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [135200 2019-05-07] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr.sys [70640 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [72800 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [784560 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [398200 2019-05-07] (AVAST Software s.r.o. -> AVAST Software)
R3 aswStmXP; C:\Windows\System32\drivers\aswStmXP.sys [146584 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [310200 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [919552 2008-07-28] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
S3 b57nd60x; C:\Windows\System32\DRIVERS\b57nd60x.sys [210432 2008-03-28] (Broadcom Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [84248 2013-06-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] () [Fichier non signé]
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
R3 JMCR; C:\Windows\System32\DRIVERS\jmcr.sys [81296 2008-04-21] (Contoso.com(Test) -> JMicron Technology Corp.)
S4 Mraid35x; C:\Windows\system32\drivers\mraid35x.sys [33384 2006-11-02] (Microsoft Windows -> LSI Logic Corporation)
R1 nm3; C:\Windows\System32\DRIVERS\nm3.sys [39736 2010-06-09] (Microsoft Corporation -> Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 NTIPPKernel; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [122368 2008-01-16] (Cyberlink Corp.) [Fichier non signé]
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation -> Microsoft Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [181912 2013-06-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [238648 2008-01-21] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2008-01-21] (Microsoft Windows -> Promise Technology, Inc.)
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Winbond Electronics Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-05-09] (CyberLink -> Cyberlink Corp.)
S3 cpuz134; \??\C:\Users\Yann\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] <==== ATTENTION
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-04-11 11:36 - 2020-04-11 11:38 - 000000000 ____D C:\Users\Yann\Desktop\Bureau
2020-04-10 12:10 - 2020-04-10 12:11 - 000000000 ____D C:\Users\Yann\AppData\Local\Discord
2020-04-10 12:09 - 2020-04-10 12:09 - 050899640 _____ (Hammer & Chisel, Inc.) C:\Users\Yann\Downloads\DiscordSetup_322903.exe
2020-04-08 12:06 - 2020-04-11 11:38 - 000000000 ____D C:\FRST
2020-04-08 12:06 - 2020-04-08 12:06 - 002009088 _____ (Farbar) C:\Users\Yann\Downloads\FRST (1).exe
2020-04-08 12:02 - 2020-04-08 12:02 - 002009088 _____ (Farbar) C:\Users\Yann\Downloads\FRST.exe
2020-04-08 11:28 - 2020-04-08 11:29 - 062620472 _____ (Discord Inc.) C:\Users\Yann\Downloads\DiscordSetup (1).exe
2020-04-08 11:25 - 2020-04-10 12:11 - 000000000 ____D C:\Users\Yann\AppData\Local\SquirrelTemp
2020-04-08 11:25 - 2020-04-08 11:25 - 062620472 _____ (Discord Inc.) C:\Users\Yann\Downloads\DiscordSetup.exe
2020-04-07 18:11 - 2020-04-07 18:12 - 014703786 _____ C:\Users\Yann\Downloads\-media-media_fr-local-docs_gamme-docs_2019-Catalogue_GAC_2019_BD.pdf
2020-04-07 14:27 - 2020-04-07 14:27 - 000010549 _____ C:\Users\Yann\Downloads\TAOLENN DIAESTERIOU U1 2 3 4 5.ods
2020-03-31 11:29 - 2020-03-31 11:29 - 000026649 _____ C:\Users\Yann\Downloads\Accusé de réception (1).pdf
2020-03-31 11:05 - 2020-03-31 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2020-03-31 11:04 - 2020-03-31 11:04 - 000003448 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer Schedule
2020-03-31 11:04 - 2020-03-31 11:04 - 000003380 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer Update
2020-03-23 11:34 - 2020-03-23 11:34 - 001028507 _____ C:\Users\Yann\Downloads\2019_FINANCEMENT PARTICIPATIF.pdf
2020-03-20 17:04 - 2020-03-20 17:04 - 000000000 ____D C:\Users\Helen\AppData\LocalLow\Adobe
2020-03-20 17:02 - 2020-03-20 17:07 - 000000000 ____D C:\Users\Helen\AppData\LocalLow\Mozilla
2020-03-20 17:02 - 2020-03-20 17:02 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Mozilla
2020-03-20 17:02 - 2020-03-20 17:02 - 000000000 ____D C:\Users\Helen\AppData\Local\Mozilla
2020-03-18 13:32 - 2020-03-18 13:32 - 000107274 _____ C:\Users\Yann\Downloads\Testeni-dilec-hian-disdalc-hus-pdf-2.pdf
2020-03-18 10:05 - 2020-03-18 10:05 - 000031749 _____ C:\Users\Yann\Downloads\travail Semaine 1.odt
2020-03-17 13:29 - 2020-03-18 13:25 - 000000000 ____D C:\Users\Yann\Desktop\Eileen labour
2020-03-16 12:30 - 2020-03-16 12:30 - 000138864 _____ C:\Users\Yann\Downloads\Rhaglen 2020 Programme.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-04-11 11:39 - 2008-10-31 18:44 - 000000000 ____D C:\Windows\system32\Macromed
2020-04-11 11:24 - 2019-12-05 11:55 - 000000000 ____D C:\Users\Yann\Documents\Bara Soup
2020-04-11 11:18 - 2017-10-12 09:51 - 000000000 ____D C:\Users\Yann\AppData\LocalLow\Mozilla
2020-04-11 10:53 - 2006-11-02 14:47 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2020-04-11 10:53 - 2006-11-02 14:47 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2020-04-10 12:21 - 2015-09-08 20:05 - 000000000 ____D C:\Users\Yann\AppData\Local\CrashDumps
2020-04-10 12:21 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\inf
2020-04-10 11:08 - 2013-10-02 12:56 - 000000000 ___RD C:\Users\Yann\Dropbox
2020-04-10 11:06 - 2018-06-22 17:49 - 000000000 ____D C:\Users\Yann\AppData\Local\AVAST Software
2020-04-10 09:40 - 2008-01-21 10:41 - 001615904 _____ C:\Windows\system32\PerfStringBackup.INI
2020-04-10 09:40 - 2008-01-21 10:40 - 000722488 _____ C:\Windows\system32\perfh00C.dat
2020-04-10 09:40 - 2008-01-21 10:40 - 000146290 _____ C:\Windows\system32\perfc00C.dat
2020-04-10 09:34 - 2012-08-08 12:46 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2020-04-10 09:34 - 2006-11-02 15:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-04-09 22:45 - 2006-11-02 15:01 - 000032502 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2020-04-08 18:46 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\tracing
2020-04-07 17:06 - 2019-11-05 16:22 - 000000000 ____D C:\Users\Yann\Documents\Welsh course
2020-04-02 12:09 - 2017-11-03 23:35 - 000000000 ____D C:\ProgramData\CanonIJPLM
2020-03-31 18:50 - 2017-11-07 11:03 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-31 18:30 - 2019-10-14 10:41 - 000000352 _____ C:\Windows\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon).job
2020-03-31 11:30 - 2011-08-08 10:37 - 000000000 ____D C:\Users\Yann\Tailhoù
2020-03-31 11:05 - 2019-10-14 10:41 - 000002642 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon)
2020-03-31 11:03 - 2019-10-14 10:41 - 000000000 ____D C:\Program Files\WinZip Registry Optimizer
2020-03-31 11:03 - 2015-05-27 11:13 - 000000000 ____D C:\ProgramData\WinZip
2020-03-23 11:37 - 2017-11-05 20:58 - 000000000 _____ C:\Windows\system32\last.dump
2020-03-23 10:56 - 2016-08-12 17:22 - 000003364 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore1d1f4ad5694df7a
2020-03-23 10:56 - 2009-07-20 22:42 - 000003492 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-20 17:04 - 2009-11-21 19:51 - 000000000 ____D C:\Users\Helen\AppData\Local\Adobe
2020-03-20 17:04 - 2009-07-27 10:30 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Adobe
2020-03-20 16:53 - 2013-10-02 12:53 - 000002769 _____ C:\Windows\wininit.ini
2020-03-20 16:53 - 2009-11-21 19:51 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Skype
2020-03-18 13:33 - 2019-11-13 11:14 - 000000000 ____D C:\Users\Yann\Documents\BWW
2020-03-16 12:30 - 2020-02-20 11:34 - 000000000 ____D C:\Users\Yann\Documents\Kendalc'h keltiek 2020
==================== Fichiers à la racine de certains dossiers ========
2017-10-21 09:40 - 2017-10-21 10:46 - 015416880 _____ (RealityMine Ltd) C:\Users\Yann\7-windowsDesktop-release-1.15.0.0-zc--mC+-Setup.exe
2017-10-25 21:11 - 2017-10-28 21:27 - 001204720 _____ (Adobe Systems Incorporated) C:\Users\Yann\flashplayer27_ga_install.exe
2017-10-28 21:31 - 2017-10-28 21:31 - 001204720 _____ (Adobe Systems Incorporated) C:\Users\Yann\flashplayer27_ha_install.exe
2009-11-01 18:40 - 2009-11-01 18:40 - 000194333 _____ () C:\Users\Yann\SkypeSetup.exe
2014-03-24 11:57 - 2014-03-27 12:00 - 000005265 _____ () C:\Users\Yann\AppData\Roaming\callbanner.png
2017-10-29 17:44 - 2017-11-07 10:26 - 000000053 _____ () C:\Users\Yann\AppData\Roaming\LogFile.txt
2013-04-04 14:04 - 2013-04-04 14:02 - 000030894 _____ () C:\Users\Yann\AppData\Roaming\speedanalysis.ico
2009-09-27 12:43 - 2009-09-27 12:43 - 000024206 _____ () C:\Users\Yann\AppData\Roaming\UserTile.png
2009-09-09 12:43 - 2020-02-05 15:48 - 000000680 _____ () C:\Users\Yann\AppData\Local\d3d9caps.dat
2012-09-12 13:37 - 2012-09-12 13:37 - 000004096 ____H () C:\Users\Yann\AppData\Local\keyfile3.drm
2014-02-19 14:10 - 2014-02-19 14:10 - 000295728 _____ (VuuPC Limited) C:\Users\Yann\AppData\Local\VuuPCSetup.exe
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\Windows\TLCUninstall.exe [2002-06-13] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2020-04-10 09:45
==================== Fin de FRST.txt ========================
Exécuté par Yann (administrateur) sur PCHEZOUG (Acer, inc. Aspire 7730ZG) (11-04-2020 11:38:08)
Exécuté depuis C:\Users\Yann\Desktop\Bureau
Profils chargés: Yann (Profils disponibles: Yann & Helen & Invité)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) [Fichier non signé] C:\Program Files\QuickTime\QTTask.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.141.333\AvastBrowserCrashHandler.exe
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE
(Canon Inc. -> CANON INC.) C:\Program Files\Canon\Quick Menu\CNQMUPDT.EXE
(Cole Williams Software Limited -> ) C:\Windows\System32\Codecs\TrayMenu.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(Google Inc. -> Google Inc.) C:\Program Files\Picasa2\PicasaMediaDetector.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Hewlett-Packard Co.) [Fichier non signé] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Protexis Inc. -> Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK32.EXE
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [eRecoveryService] => [X]
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.) [Fichier non signé]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421160 2011-01-25] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [fst_fr_94] => [X]
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.) [Fichier non signé]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-07-22] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [CanonQuickMenu] => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Run: [Codec Settings UAC Manager] => C:\Windows\system32\Codecs\CodecUACManager.exe [71568 2019-08-08] (Cole Williams Software Limited -> )
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe [443968 2008-08-21] (Google Inc. -> Google Inc.)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [AvastBrowserAutoLaunch_419691F9C1B9F769F3897B45FBF1F8DE] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [1027624 2018-06-13] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [AvastBrowserIsDefault] => "C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtector.exe" --force-protect
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [WallpaperHd] => C:\Users\Yann\AppData\Local\WallpaperHd\WallpaperHd.exe [1830912 2018-06-28] (WallpaperHd) [Fichier non signé]
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\MountPoints2: {0ac4fe09-532d-11df-9f12-00238b4c6405} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\launcher.exe
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\MountPoints2: {3099868b-f132-11de-ae88-00238b4c6405} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\launcher.exe
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\...\Winlogon: [Shell] - <==== ATTENTION
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [220672 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\Windows\system32\advpack.dll [2011-05-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\49.0.79.76\Installer\chrmstp.exe [2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2019-10-14]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\System32\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Notifications de Mises à jour.lnk [2017-02-07]
ShortcutTarget: Notifications de Mises à jour.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (WinZip) [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Préchargeur.lnk [2017-02-07]
ShortcutTarget: WinZip Préchargeur.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing LLC -> WinZip Computing, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk [2017-02-07]
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK32.EXE (WinZip Computing LLC -> WinZip Computing, S.L.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0244C730-37A0-40A5-8947-504EF4E31C4F} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {13E058AF-41BF-41DB-8EAF-E2502527E4DF} - System32\Tasks\{34C2DA4C-BE97-4C2A-A020-0DC620FACAFB} => C:\Windows\system32\pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {234FBB5A-C4A0-4CE9-B3AF-CA96B7D4C474} - System32\Tasks\GoogleUpdateTaskMachineCore1d1f4ad5694df7a => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {270D09B2-9E10-4D3B-805E-4D5D21EF72C7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561952 2009-10-22] (Apple Inc. -> Apple Inc.)
Task: {2DE4667F-4D22-4233-B125-B2E115138F5E} - System32\Tasks\WinZip Update Notifier => C:\Program Files\WinZip\WZUpdateNotifier.exe [1444352 2016-12-13] (WinZip) [Fichier non signé]
Task: {33C1E661-22E4-4AE4-A97D-F0C6F315D9C1} - \free ven-updater -> Pas de fichier <==== ATTENTION
Task: {3A42A05D-40D6-4EC3-AA71-E6537A9388B1} - System32\Tasks\Start WinZip Registry Optimizer Schedule => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
Task: {3CEFA937-8D7D-4DC2-878E-BA879D34CC93} - \free ven-codedownloader -> Pas de fichier <==== ATTENTION
Task: {44E9243D-CB0F-43E1-951C-74FA374B120E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {4EE7580D-3C81-4A41-8E18-032D4139FFB9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {80BF888E-8E27-4F71-96C5-7AED3103B7A9} - System32\Tasks\Start WinZip Registry Optimizer Update => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
Task: {8B962B38-A76E-40DA-AA98-E03A9B491689} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_344_pepper.exe [1453624 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {93E8468B-AC56-40B1-92BF-89BC5E55DD5F} - System32\Tasks\NCH Software\PhotoPadDowngrade => C:\Program Files\NCH Software\PhotoPad\photopad.exe [7433336 2017-11-09] (NCH Software -> NCH Software)
Task: {AAF520B3-76E6-4A5E-B41F-06F07848D6DF} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {B1F70D8D-29BE-4CCB-8416-F38F16588D6E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2762968 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {B40D3405-B148-4A4C-BCF5-B10F491FC0EF} - Accès refusé.
Task: {B41389F4-7E32-4278-9D1A-D3484E8C996F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {B57EBC05-F586-4A42-8A33-9A9E2A5FB683} - System32\Tasks\Opera scheduled Autoupdate 1510044029 => C:\Program Files\Opera\launcher.exe [695816 2016-08-05] (Opera Software ASA -> Opera Software)
Task: {C8B9DBD3-80D8-4CAA-A6E8-CA1DE098CD4F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} C:\Program Files\Windows Live\SOXE\wlsoxe.dll [179584 2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCA840A7-32E5-4D91-AC49-2C1514A11F34} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1521952 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {DBE7E21E-90E2-4765-9331-A1A4ABADF386} - System32\Tasks\{E60B9C16-AEF7-46BD-80B2-28034408ADC8} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe -d E:\
Task: {DD903688-839F-4E29-B9B3-17B30682C345} - \PCHelpers_period -> Pas de fichier <==== ATTENTION
Task: {EF4F9BC9-3B15-4643-9B81-F3CF80502331} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {EF779A45-FD6F-46F1-9CBD-A4B10AD5D3F9} - System32\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon) => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe [27698984 2020-01-13] (Corel Corporation -> Corel Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\bench-Updater removing.job => /verysilentSYSTEMThis will uninstall Updater 00 <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon).job => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864 2010-10-07] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E8F12856-CB59-4E42-98E7-0AE512888537}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730zg
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730zg
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKU\S-1-5-21-85662379-2031076083-3301479797-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=TuguuTU&co=FR&userid=4bf35ff6-62f0-4d8b-79db-3cc2c1256ea9&searchtype=ds&q={searchTerms}&installDate=19/02/2014
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395592020&from=tugs&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE908R5M3205M320&q={searchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=TuguuTU&co=FR&userid=4bf35ff6-62f0-4d8b-79db-3cc2c1256ea9&searchtype=ds&q={searchTerms}&installDate=19/02/2014
SearchScopes: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Pas de nom -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> Pas de fichier
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (Canon Inc. -> CANON INC.)
BHO: Pas de nom -> {4723AAA8-B2F9-4CC1-9E60-190976DB1FA4} -> Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
BHO: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\assembly\GAC_MSIL\IEExtension\1.0.0.876__c8e1c1f3d6d8e203\IEExtension.dll [2014-07-31] (Vitzo) [Fichier non signé]
BHO: Pas de nom -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> Pas de fichier
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: Skype Plug-In -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15] (Skype Technologies SA -> Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
BHO: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files\Yahoo!\Companion\Installs\cpn3\YTSingleInstance.dll [2010-05-25] (Yahoo! Inc. -> Yahoo! Inc) [Fichier non signé]
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH) [Fichier non signé]
Toolbar: HKLM - Pas de nom - {0BF43445-2F28-4351-9252-17FE6E806AA0} - Pas de fichier
Toolbar: HKLM - Pas de nom - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Pas de fichier
Toolbar: HKLM - Pas de nom - {ae07101b-46d4-4a98-af68-0333ea26e113} - Pas de fichier
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-85662379-2031076083-3301479797-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} hxxp://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20120404052537
DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} hxxp://cdn.scan.onecare.live.com/resource/download/scanner/en-us/wlscctrl2.cab
DPF: {4ECE056F-E50F-4F9D-B069-EB342D21F26A} hxxp://www2.snapfish.com/SnapfishActivia3.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-us.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation) [Fichier non signé]
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15] (Skype Technologies SA -> Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Software Sarl -> Skype Technologies) [Fichier non signé]
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=adks&utm_campaign=eXQ&utm_content=sc&from=adks&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE908R5M3205M320&ts=1379426278
FireFox:
========
FF ProfilePath: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372 [2020-04-11]
FF DownloadDir: C:\Users\Yann\Desktop\Bureau
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\Extensions\sp@avast.com.xpi [2019-11-19] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\Extensions\wrc@avast.com.xpi [2019-11-19] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\ftpu4xm4.default-1541440038372\features\{2b738541-b0ec-4e7a-a140-1dd473d2972e}\hotfix-bug-1548973@mozilla.org.xpi [2019-09-30] []
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-01-21] (Apple Inc. -> )
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2016-04-14] (CANON INC.) [Fichier non signé]
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.) [Fichier non signé]
FF Plugin: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files\Picasa2\npPicasa2.dll [2008-08-21] (Google, Inc.) [Fichier non signé]
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Picasa2\npPicasa3.dll [2014-06-06] (Google Inc -> Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-04-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.2.32 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2013-07-14] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-04-16] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpplugin;version=16.0.2.32 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2013-07-14] (RealNetworks, Inc. -> RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-04-16] (RealNetworks, Inc. -> RealDownloader)
FF Plugin: @videolan.org/vlc,version=1.1.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2011-08-09] (the VideoLAN Team) [Fichier non signé]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin HKU\S-1-5-21-85662379-2031076083-3301479797-1000: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll [Pas de fichier]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [cfcbmgbfdbijmjgjihagbomfbjfjmgon] - C:\Users\Yann\AppData\Roaming\SpeedanAlysis\speedanalysis.crx
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM\...\Chrome\Extension: [mocblcnaofikinigmceddfghppkkjbog] - C:\Users\Yann\AppData\Roaming\PlusWinks\pluswinks.crx [2013-03-20]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
Opera:
=======
OPR Notifications: hxxps://drive.google.com; hxxps://mail.google.com; hxxps://www.francecasse.fr; hxxps://www.francecasse.fr; hxxps://www.piecesautodiscount.fr; hxxps://www.youtube.com
OPR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Yann\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2020-04-02]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-06-22] (AVAST Software s.r.o. -> AVAST Software)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
S2 gupdate1ca097986ef7254; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Software Sarl -> Skype Technologies) [Fichier non signé]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [1145640 2020-01-09] (Corel Corporation -> Corel Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1710464 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AgereSoftModem; C:\Windows\System32\DRIVERS\AGRSM.sys [1202560 2008-02-29] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)
S3 androidusb; C:\Windows\System32\Drivers\ssadadb.sys [32064 2013-06-21] (MCCI Internal Testing Software -> Google Inc)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [167480 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [165384 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [284256 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [57904 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software s.r.o. -> AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42736 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [40688 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [135200 2019-05-07] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr.sys [70640 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [72800 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [784560 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [398200 2019-05-07] (AVAST Software s.r.o. -> AVAST Software)
R3 aswStmXP; C:\Windows\System32\drivers\aswStmXP.sys [146584 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [310200 2018-11-19] (AVAST Software s.r.o. -> AVAST Software)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [919552 2008-07-28] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
S3 b57nd60x; C:\Windows\System32\DRIVERS\b57nd60x.sys [210432 2008-03-28] (Broadcom Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [84248 2013-06-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] () [Fichier non signé]
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
R3 JMCR; C:\Windows\System32\DRIVERS\jmcr.sys [81296 2008-04-21] (Contoso.com(Test) -> JMicron Technology Corp.)
S4 Mraid35x; C:\Windows\system32\drivers\mraid35x.sys [33384 2006-11-02] (Microsoft Windows -> LSI Logic Corporation)
R1 nm3; C:\Windows\System32\DRIVERS\nm3.sys [39736 2010-06-09] (Microsoft Corporation -> Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 NTIPPKernel; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [122368 2008-01-16] (Cyberlink Corp.) [Fichier non signé]
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation -> Microsoft Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [181912 2013-06-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [238648 2008-01-21] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2008-01-21] (Microsoft Windows -> Promise Technology, Inc.)
R3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Winbond Electronics Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [61424 2008-05-09] (CyberLink -> Cyberlink Corp.)
S3 cpuz134; \??\C:\Users\Yann\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] <==== ATTENTION
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-04-11 11:36 - 2020-04-11 11:38 - 000000000 ____D C:\Users\Yann\Desktop\Bureau
2020-04-10 12:10 - 2020-04-10 12:11 - 000000000 ____D C:\Users\Yann\AppData\Local\Discord
2020-04-10 12:09 - 2020-04-10 12:09 - 050899640 _____ (Hammer & Chisel, Inc.) C:\Users\Yann\Downloads\DiscordSetup_322903.exe
2020-04-08 12:06 - 2020-04-11 11:38 - 000000000 ____D C:\FRST
2020-04-08 12:06 - 2020-04-08 12:06 - 002009088 _____ (Farbar) C:\Users\Yann\Downloads\FRST (1).exe
2020-04-08 12:02 - 2020-04-08 12:02 - 002009088 _____ (Farbar) C:\Users\Yann\Downloads\FRST.exe
2020-04-08 11:28 - 2020-04-08 11:29 - 062620472 _____ (Discord Inc.) C:\Users\Yann\Downloads\DiscordSetup (1).exe
2020-04-08 11:25 - 2020-04-10 12:11 - 000000000 ____D C:\Users\Yann\AppData\Local\SquirrelTemp
2020-04-08 11:25 - 2020-04-08 11:25 - 062620472 _____ (Discord Inc.) C:\Users\Yann\Downloads\DiscordSetup.exe
2020-04-07 18:11 - 2020-04-07 18:12 - 014703786 _____ C:\Users\Yann\Downloads\-media-media_fr-local-docs_gamme-docs_2019-Catalogue_GAC_2019_BD.pdf
2020-04-07 14:27 - 2020-04-07 14:27 - 000010549 _____ C:\Users\Yann\Downloads\TAOLENN DIAESTERIOU U1 2 3 4 5.ods
2020-03-31 11:29 - 2020-03-31 11:29 - 000026649 _____ C:\Users\Yann\Downloads\Accusé de réception (1).pdf
2020-03-31 11:05 - 2020-03-31 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2020-03-31 11:04 - 2020-03-31 11:04 - 000003448 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer Schedule
2020-03-31 11:04 - 2020-03-31 11:04 - 000003380 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer Update
2020-03-23 11:34 - 2020-03-23 11:34 - 001028507 _____ C:\Users\Yann\Downloads\2019_FINANCEMENT PARTICIPATIF.pdf
2020-03-20 17:04 - 2020-03-20 17:04 - 000000000 ____D C:\Users\Helen\AppData\LocalLow\Adobe
2020-03-20 17:02 - 2020-03-20 17:07 - 000000000 ____D C:\Users\Helen\AppData\LocalLow\Mozilla
2020-03-20 17:02 - 2020-03-20 17:02 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Mozilla
2020-03-20 17:02 - 2020-03-20 17:02 - 000000000 ____D C:\Users\Helen\AppData\Local\Mozilla
2020-03-18 13:32 - 2020-03-18 13:32 - 000107274 _____ C:\Users\Yann\Downloads\Testeni-dilec-hian-disdalc-hus-pdf-2.pdf
2020-03-18 10:05 - 2020-03-18 10:05 - 000031749 _____ C:\Users\Yann\Downloads\travail Semaine 1.odt
2020-03-17 13:29 - 2020-03-18 13:25 - 000000000 ____D C:\Users\Yann\Desktop\Eileen labour
2020-03-16 12:30 - 2020-03-16 12:30 - 000138864 _____ C:\Users\Yann\Downloads\Rhaglen 2020 Programme.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-04-11 11:39 - 2008-10-31 18:44 - 000000000 ____D C:\Windows\system32\Macromed
2020-04-11 11:24 - 2019-12-05 11:55 - 000000000 ____D C:\Users\Yann\Documents\Bara Soup
2020-04-11 11:18 - 2017-10-12 09:51 - 000000000 ____D C:\Users\Yann\AppData\LocalLow\Mozilla
2020-04-11 10:53 - 2006-11-02 14:47 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2020-04-11 10:53 - 2006-11-02 14:47 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2020-04-10 12:21 - 2015-09-08 20:05 - 000000000 ____D C:\Users\Yann\AppData\Local\CrashDumps
2020-04-10 12:21 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\inf
2020-04-10 11:08 - 2013-10-02 12:56 - 000000000 ___RD C:\Users\Yann\Dropbox
2020-04-10 11:06 - 2018-06-22 17:49 - 000000000 ____D C:\Users\Yann\AppData\Local\AVAST Software
2020-04-10 09:40 - 2008-01-21 10:41 - 001615904 _____ C:\Windows\system32\PerfStringBackup.INI
2020-04-10 09:40 - 2008-01-21 10:40 - 000722488 _____ C:\Windows\system32\perfh00C.dat
2020-04-10 09:40 - 2008-01-21 10:40 - 000146290 _____ C:\Windows\system32\perfc00C.dat
2020-04-10 09:34 - 2012-08-08 12:46 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2020-04-10 09:34 - 2006-11-02 15:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-04-09 22:45 - 2006-11-02 15:01 - 000032502 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2020-04-08 18:46 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\tracing
2020-04-07 17:06 - 2019-11-05 16:22 - 000000000 ____D C:\Users\Yann\Documents\Welsh course
2020-04-02 12:09 - 2017-11-03 23:35 - 000000000 ____D C:\ProgramData\CanonIJPLM
2020-03-31 18:50 - 2017-11-07 11:03 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-31 18:30 - 2019-10-14 10:41 - 000000352 _____ C:\Windows\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon).job
2020-03-31 11:30 - 2011-08-08 10:37 - 000000000 ____D C:\Users\Yann\Tailhoù
2020-03-31 11:05 - 2019-10-14 10:41 - 000002642 _____ C:\Windows\system32\Tasks\Start WinZip Registry Optimizer for PCHEZOUG@Yann(logon)
2020-03-31 11:03 - 2019-10-14 10:41 - 000000000 ____D C:\Program Files\WinZip Registry Optimizer
2020-03-31 11:03 - 2015-05-27 11:13 - 000000000 ____D C:\ProgramData\WinZip
2020-03-23 11:37 - 2017-11-05 20:58 - 000000000 _____ C:\Windows\system32\last.dump
2020-03-23 10:56 - 2016-08-12 17:22 - 000003364 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore1d1f4ad5694df7a
2020-03-23 10:56 - 2009-07-20 22:42 - 000003492 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-20 17:04 - 2009-11-21 19:51 - 000000000 ____D C:\Users\Helen\AppData\Local\Adobe
2020-03-20 17:04 - 2009-07-27 10:30 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Adobe
2020-03-20 16:53 - 2013-10-02 12:53 - 000002769 _____ C:\Windows\wininit.ini
2020-03-20 16:53 - 2009-11-21 19:51 - 000000000 ____D C:\Users\Helen\AppData\Roaming\Skype
2020-03-18 13:33 - 2019-11-13 11:14 - 000000000 ____D C:\Users\Yann\Documents\BWW
2020-03-16 12:30 - 2020-02-20 11:34 - 000000000 ____D C:\Users\Yann\Documents\Kendalc'h keltiek 2020
==================== Fichiers à la racine de certains dossiers ========
2017-10-21 09:40 - 2017-10-21 10:46 - 015416880 _____ (RealityMine Ltd) C:\Users\Yann\7-windowsDesktop-release-1.15.0.0-zc--mC+-Setup.exe
2017-10-25 21:11 - 2017-10-28 21:27 - 001204720 _____ (Adobe Systems Incorporated) C:\Users\Yann\flashplayer27_ga_install.exe
2017-10-28 21:31 - 2017-10-28 21:31 - 001204720 _____ (Adobe Systems Incorporated) C:\Users\Yann\flashplayer27_ha_install.exe
2009-11-01 18:40 - 2009-11-01 18:40 - 000194333 _____ () C:\Users\Yann\SkypeSetup.exe
2014-03-24 11:57 - 2014-03-27 12:00 - 000005265 _____ () C:\Users\Yann\AppData\Roaming\callbanner.png
2017-10-29 17:44 - 2017-11-07 10:26 - 000000053 _____ () C:\Users\Yann\AppData\Roaming\LogFile.txt
2013-04-04 14:04 - 2013-04-04 14:02 - 000030894 _____ () C:\Users\Yann\AppData\Roaming\speedanalysis.ico
2009-09-27 12:43 - 2009-09-27 12:43 - 000024206 _____ () C:\Users\Yann\AppData\Roaming\UserTile.png
2009-09-09 12:43 - 2020-02-05 15:48 - 000000680 _____ () C:\Users\Yann\AppData\Local\d3d9caps.dat
2012-09-12 13:37 - 2012-09-12 13:37 - 000004096 ____H () C:\Users\Yann\AppData\Local\keyfile3.drm
2014-02-19 14:10 - 2014-02-19 14:10 - 000295728 _____ (VuuPC Limited) C:\Users\Yann\AppData\Local\VuuPCSetup.exe
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\Windows\TLCUninstall.exe [2002-06-13] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2020-04-10 09:45
==================== Fin de FRST.txt ========================