Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2020
Exécuté par Yacine (administrateur) sur MERABET (Acer Aspire XC600) (02-11-2020 14:50:29)
Exécuté depuis C:\Users\Yacine\Desktop
Profils chargés: Yacine
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adguard Software Ltd) [Fichier non signé] D:\Système\Portables\Portables Internet\Portable Adguard 7.3.3048.0 Premium\App\Adguard\AdguardSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2009.4.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\NisSrv.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Shanghai Oriental Webcasting Co. Ltd. -> www.ejie.me) C:\Program Files (x86)\Clover\Clover.exe
(Stéphane Mitermite) [Fichier non signé] D:\Système\Portables\Portables Système\Portable FreeMi UPnP Media Server 2.0.10\FreeMi UPnP Media Server.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Run: [FreeMi UPnP Media Server] => D:\Système\Portables\Portables Système\Portable FreeMi UPnP Media Server 2.0.10\FreeMi UPnP Media Server.exe [279552 2016-05-24] (Stéphane Mitermite) [Fichier non signé]
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideSCANetwork] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideSCAVolume] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {15e48cc3-7d7a-11ea-9e4a-00158307c70f} - "G:\AutoRun.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {32c4a597-5ef4-11ea-9e36-00158307c70f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {32c4a675-5ef4-11ea-9e36-00158307c70f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {544771e8-0ae7-11eb-9fbb-bde046ad9bee} - "E:\AutoRun.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {a79bed6a-5f95-11ea-9e3d-00158307c70f} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {ba76ccc8-49a5-11ea-9dbb-97905dffdb64} - "F:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {03E179AC-FC9A-4B71-968B-66F6D12DE1BE} - System32\Tasks\Opera scheduled assistant Autoupdate 1592304556 => C:\Users\Yacine\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Yacine\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {0D6FA71A-E7A4-45F7-9CDD-AA41083E1423} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_Plugin.exe [1502264 2020-10-14] (Adobe Inc. -> Adobe)
Task: {26B07B15-FCBA-4BAF-A13D-32C2321EF297} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2A2EB3AC-1B44-4A69-B1EE-DA31C7AE07DE} - System32\Tasks\Opera scheduled Autoupdate 1591314721 => C:\Users\Yacine\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software)
Task: {2CFFD82E-CFB4-483C-82C3-ABD865D97FB9} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_pepper.exe [1497656 2020-10-14] (Adobe Inc. -> Adobe)
Task: {37960E2C-C79C-4178-9DDC-B9EA99892B59} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5FA39AA2-DAD3-48B6-A5B7-586B99F5B0B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {70048156-32ED-46B4-BF32-6A12C16A62E7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {77000387-50D8-4C91-B76D-320C07AFE666} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {7C6CCC3E-BA0A-49AC-8B0F-47EC74256238} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D39D279-A495-447D-A588-B612AB637D59} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {930CC600-1CC6-4F02-9667-88A6BF6FAB73} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3576917301-747911037-3154256680-1001 => C:\Windows\System32\AgentActivationRuntimeStarter.exe [13312 2019-03-19] (Microsoft Windows -> )
Task: {ABB88D91-53BC-4241-8792-B3B9092043D9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {BD776CFE-BA32-4FF1-8206-5A6885208B83} - System32\Tasks\Uninstaller_SkipUac_Yacine => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5991184 2020-03-23] (IObit Information Technology -> IObit)
Task: {CACA64F7-A095-4CD5-B0DB-5EC3BA52AA68} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{19010f3d-84ec-47cc-896f-eef79440bdd9}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{19010f3d-84ec-47cc-896f-eef79440bdd9}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{20ca23d6-e78d-42c7-ba3e-ff0d4bf3d923}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{684b012f-65a2-43e4-86a6-8eb0ba5947c2}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{684b012f-65a2-43e4-86a6-8eb0ba5947c2}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{8fdb528f-cbe4-4715-9a21-cc08b616d6ff}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{97a39ee0-12b6-4624-a42c-b58b046b3176}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{97a39ee0-12b6-4624-a42c-b58b046b3176}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{b0e38772-12cc-4668-bcdd-a4cc9bba40ef}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{b0e38772-12cc-4668-bcdd-a4cc9bba40ef}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{ca7882bc-ba37-41e0-9a6c-b3381e853115}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{ce3033b2-d173-4d2a-82f2-2d82a77a1f7c}: [DhcpNameServer] 1.1.1.1 1.0.0.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
======
Edge DefaultProfile: Profile 1
Edge HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2020-10-30]
Edge HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
FireFox:
========
FF HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Yacine\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Yacine\AppData\Roaming\IDM\idmmzcc5 [2020-02-09] [] [non signé]
FF HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1235205.dll [2019-03-15] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
CHR HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
Opera:
=======
OPR DownloadDir: C:\Users\Yacine\Desktop
OPR Notifications: hxxps://bvideo.pro; hxxps://dzchaabi.listen2myshow.com; hxxps://findmedia.biz; hxxps://nevertherekay.club; hxxps://s4.mtr.ru.net; hxxps://watch-video.net; hxxps://web.facebook.com; hxxps://www.doctissimo.fr; hxxps://www27a.tabathaherman.pro
OPR Extension: (Rich Hints Agent) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-10-23]
OPR Extension: (Save As MHT) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\hfmodljjaibbdndlikgagimhhodmobkc [2020-06-05]
OPR Extension: (World weather online®) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk [2020-06-05]
OPR Extension: (View Image) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\jpcmhcelnjdmblfmjabdeclccemkghjk [2020-06-05]
OPR Extension: (Install Chrome Extensions) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-06-05]
OPR Extension: (Google Translate) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2020-08-27]
OPR Extension: (IDM Integration Module) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-10-17]
OPR Extension: (Save for later) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkphlkgkhmdaecflflapohlkkchmcacc [2020-06-05]
OPR Extension: (Adblock Plus - free ad blocker) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2020-09-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Adguard Service; D:\Système\Portables\Portables Internet\Portable Adguard 7.3.3048.0 Premium\App\Adguard\AdguardSvc.exe [163840 2019-12-26] (Adguard Software Ltd) [Fichier non signé]
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169032 2020-05-08] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
S3 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1584645087568.exe [532480 2020-03-19] () [Fichier non signé]
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 HCloverService; C:\Program Files (x86)\Clover\CloverSvc.dll [717424 2020-04-14] (Shanghai Oriental Webcasting Co. Ltd. -> )
S3 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [197504 2019-12-24] (AnchorFree Inc -> Pango Inc.)
S3 ImDskSvc; C:\Windows\system32\imdsksvc.exe [31544 2019-01-19] (Lagerkvist Teknisk Rådgivning i Borås HB -> Olof Lagerkvist)
S3 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-01-31] (IObit Information Technology -> IObit)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\NisSrv.exe [2372048 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MsMpEng.exe [128376 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 HuaweiHiSuiteService64.exe; "C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe" -/service [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 adgnetworktdidrv; C:\Windows\System32\drivers\adgnetworktdidrv.sys [67800 2019-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 AWEAlloc; C:\Windows\system32\DRIVERS\awealloc.sys [21048 2019-01-19] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
R3 cmuda3; C:\Windows\system32\drivers\cmudax3.sys [3848192 2014-07-03] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
S3 ew_usbccgpfilter; C:\Windows\System32\drivers\ew_usbccgpfilter.sys [18944 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 ImDisk; C:\Windows\system32\DRIVERS\imdisk.sys [48704 2019-01-19] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2019-11-18] (IObit Information Technology -> IObit)
S3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
S3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-11-18] (IObit Information Technology -> IObit)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R3 MpKsl20b8bb4e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D56A4E6B-EAC2-4D54-91C4-3FCE2E727D01}\MpKslDrv.sys [47336 2020-11-02] (Microsoft Windows -> Microsoft Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tap_ovpnconnect; C:\Windows\System32\drivers\tap_ovpnconnect.sys [39408 2020-03-18] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
U5 UnlockerDriver5; D:\Système\Portables\Portables Système\Portable Unlocker 1.9.2\App\Unlocker\64-bit\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2020-10-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [428264 2020-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [69864 2020-10-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-02 14:50 - 2020-11-02 14:52 - 000020084 _____ C:\Users\Yacine\Desktop\FRST.txt
2020-11-02 11:31 - 2020-11-02 14:51 - 000000000 ____D C:\FRST
2020-11-02 11:30 - 2020-11-02 11:30 - 002298368 _____ (Farbar) C:\Users\Yacine\Desktop\Farbar Recovery Scan Tool 2020 x64.exe
2020-11-02 02:37 - 2020-11-02 14:52 - 000000000 ____D C:\ProgramData\Adguard
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\Windows\SysWOW64\Drivers\vwifikerneldrv.sys
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\Windows\SysWOW64\d3dx9_11.dll.tmp
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\ProgramData\fontcacheev1.dat
2020-11-02 02:37 - 2020-11-02 02:37 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Adguard Software Ltd
2020-11-02 02:37 - 2020-11-02 02:37 - 000000000 ____D C:\Users\Yacine\AppData\Local\Adguard_Software_Ltd
2020-11-02 02:31 - 2019-09-18 13:24 - 000067800 _____ () C:\Windows\system32\Drivers\adgnetworktdidrv.sys_BAK
2020-11-02 02:31 - 2019-09-18 13:24 - 000067800 _____ () C:\Windows\system32\Drivers\adgnetworktdidrv.sys
2020-11-02 01:42 - 2020-11-02 01:54 - 000000000 ____D C:\ProgramData\Martau
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\qtuemdke.aob
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\qmtcubwg.nqd
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\oiptnvyg.xmk
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\ipqbdleq.kee
2020-11-02 01:42 - 2020-11-02 01:42 - 000000008 _____ C:\ProgramData\yiwyxjlh.gfr
2020-11-02 01:42 - 2020-11-02 01:42 - 000000008 _____ C:\ProgramData\lygmafen.sxc
2020-11-02 00:44 - 2020-11-02 00:44 - 000000000 ____D C:\ProgramData\SystemAcCrux
2020-11-01 22:25 - 2020-11-01 22:27 - 000000000 ____D C:\AdwCleaner
2020-11-01 19:12 - 2020-11-01 19:12 - 000000172 _____ C:\Users\Yacine\Desktop\L'installation de Windows 10 Pro 20H2 a échoué.url
2020-11-01 15:04 - 2020-11-01 17:40 - 000000000 ___HD C:\$WINDOWS.~BT
2020-11-01 14:05 - 2020-11-01 14:05 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2020-11-01 13:25 - 2020-11-01 22:45 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\ZHP
2020-11-01 12:48 - 2020-11-01 12:48 - 000000000 _____ C:\Users\Yacine\Desktop\cleanmgr.txt
2020-11-01 02:27 - 2020-11-01 02:27 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\CEZEO software
2020-10-31 20:48 - 2020-11-01 15:04 - 000001186 _____ C:\Users\Yacine\Desktop\setup - Raccourci.lnk
2020-10-31 20:12 - 2020-10-31 20:12 - 000000080 _____ C:\Users\Yacine\Desktop\Résoudre les erreurs de mise à jour Windows 10 - malekal's site.url
2020-10-31 20:04 - 2020-10-31 20:04 - 000000126 _____ C:\Users\Yacine\Desktop\Blocage pendant installation MAJ.url
2020-10-31 19:40 - 2020-11-01 13:24 - 000000251 _____ C:\Users\Yacine\Desktop\SECOND_BOOT MIGRATE_DATA.url
2020-10-31 14:50 - 2020-10-31 14:50 - 000008192 _____ C:\Windows\system32\config\userdiff
2020-10-31 14:18 - 2020-11-01 15:04 - 000001890 _____ C:\Windows\diagwrn.xml
2020-10-31 14:18 - 2020-11-01 15:04 - 000001890 _____ C:\Windows\diagerr.xml
2020-10-30 23:36 - 2020-10-30 23:36 - 000002946 _____ C:\Windows\system32\Tasks\Uninstaller_SkipUac_Yacine
2020-10-30 22:28 - 2020-10-30 22:28 - 000000000 ____D C:\Program Files\Yamicsoft
2020-10-30 22:03 - 2020-10-30 22:03 - 000001362 _____ C:\Users\Yacine\Desktop\Adobe Acrobat DC 20.012.20048 - Raccourci.lnk
2020-10-30 21:29 - 2018-12-20 12:05 - 000229296 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2020-10-30 16:17 - 2020-10-30 17:14 - 000001129 _____ C:\Users\Yacine\Desktop\Adobe CC 20121 Préactivé - Raccourci.lnk
2020-10-30 15:47 - 2020-10-30 15:47 - 000000000 ____D C:\ProgramData\LopeSoft
2020-10-29 14:47 - 2020-10-30 14:32 - 000000000 ____D C:\Program Files\Easy Context Menu
2020-10-28 15:27 - 2020-10-28 15:29 - 000000000 ____D C:\Users\Yacine\Desktop\Al-Kaicer IPTV
2020-10-28 01:39 - 2020-10-28 01:45 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Direct Folders
2020-10-27 20:31 - 2020-10-27 20:31 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à jour de Windows 10.lnk
2020-10-27 20:04 - 2020-10-27 20:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mmm
2020-10-27 16:40 - 2018-04-22 10:39 - 000000047 _____ C:\Users\Yacine\Desktop\1337x-aliaatika-2300ghoulio10.url
2020-10-26 23:12 - 2020-10-26 23:12 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\NeatDM
2020-10-26 01:48 - 2020-10-26 01:48 - 000000000 ____D C:\Users\Yacine\AppData\Local\IPTV_Tools__-__Zaman_NOW
2020-10-26 01:47 - 2020-10-26 01:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\SkinSoft
2020-10-26 01:35 - 2020-10-26 01:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\lddownloader
2020-10-26 01:35 - 2020-10-26 01:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\ChangZhi2
2020-10-26 01:31 - 2020-10-26 01:31 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\InfoServ
2020-10-24 22:25 - 2020-10-31 17:49 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\vlc
2020-10-24 22:01 - 2020-10-24 22:01 - 000000000 ____D C:\Program Files\VideoLAN
2020-10-24 01:28 - 2020-10-24 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-10-24 00:29 - 2020-10-24 01:03 - 000000000 ____D C:\ProgramData\Betternet
2020-10-22 22:10 - 2016-08-11 09:25 - 000111260 _____ (Un4seen Developments) C:\Windows\SysWOW64\bass.dll
2020-10-22 22:06 - 2016-08-11 09:25 - 000111260 _____ (Un4seen Developments) C:\Windows\system32\bass.dll
2020-10-22 22:02 - 2020-10-22 23:13 - 000000000 ____D C:\ProgramData\PopCap Games
2020-10-22 21:56 - 2020-10-22 21:56 - 000001186 _____ C:\Users\Yacine\Desktop\Apprendre le Français.lnk
2020-10-21 20:32 - 2020-10-21 20:32 - 000000000 ____D C:\ProgramData\FreeGrabApp
2020-10-21 15:25 - 2020-10-21 15:29 - 000000000 ____D C:\Users\Yacine\AppData\Local\FreeGrabApp
2020-10-21 15:24 - 2020-10-22 23:26 - 000002472 _____ C:\Users\Yacine\Desktop\Netflix Download.lnk
2020-10-21 01:18 - 2020-10-21 01:18 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\DefaultCompany
2020-10-18 14:56 - 2020-10-29 16:57 - 000000000 ____D C:\Users\Yacine\Desktop\Champions League
2020-10-17 22:05 - 2020-10-26 18:52 - 000001317 _____ C:\Users\Yacine\Desktop\Playlists.lnk
2020-10-17 00:11 - 2020-10-17 00:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\MeuhMeuhTV
2020-10-16 23:22 - 2020-10-16 23:22 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Mozilla
2020-10-16 23:21 - 2020-10-16 23:21 - 000000000 ____D C:\Users\Yacine\AppData\Local\Smart PC Soft
2020-10-16 23:18 - 2020-10-16 23:20 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Pluto TV
2020-10-16 22:59 - 2020-10-16 23:02 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\PerfectPlayer
2020-10-16 22:59 - 2020-10-16 22:59 - 000000243 _____ C:\Users\Yacine\dsj.xml
2020-10-16 21:21 - 2020-10-16 21:21 - 000000000 ____D C:\Users\Yacine\AppData\Local\TVU Networks
2020-10-16 21:21 - 2020-10-16 21:21 - 000000000 ____D C:\ProgramData\TVU Networks
2020-10-16 21:20 - 2020-10-16 21:20 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\TVU Networks
2020-10-16 21:18 - 2020-10-16 21:18 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\WindowsIPTVPlayer
2020-10-16 16:31 - 2020-10-16 16:31 - 000000000 ____D C:\Users\Yacine\AppData\Local\IsolatedStorage
2020-10-16 15:17 - 2020-10-16 15:17 - 000000000 ____D C:\Users\Yacine\AppData\Local\CherryPlayer
2020-10-16 14:45 - 2020-10-16 14:45 - 000000000 ____D C:\Users\Yacine\.config
2020-10-16 14:30 - 2020-11-01 17:10 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\V7 Soft
2020-10-16 14:29 - 2020-10-16 14:32 - 000000000 ____D C:\Users\Yacine\AppData\Local\Deployment
2020-10-16 14:29 - 2020-10-16 14:29 - 000000000 ____D C:\Users\Yacine\AppData\Local\Apps\2.0
2020-10-16 14:28 - 2020-10-16 14:28 - 000001017 _____ C:\Windows\SysWOW64\pcp.bmp
2020-10-16 14:12 - 2020-10-30 17:16 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Media Player Classic
2020-10-15 00:33 - 2020-09-10 05:14 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-10-15 00:33 - 2020-09-10 05:12 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-10-14 19:14 - 2020-10-14 19:14 - 000000022 _____ C:\Windows\cmm.dat
2020-10-12 00:03 - 2020-10-12 00:04 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Umeng
2020-10-12 00:03 - 2020-10-12 00:03 - 000000000 ____D C:\Users\Yacine\Downloads\SHAREit
2020-10-12 00:03 - 2020-10-12 00:03 - 000000000 ____D C:\Users\Yacine\AppData\Local\SHAREit Technologies
2020-10-11 18:39 - 2020-10-11 18:39 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Dat
2020-10-11 18:38 - 2020-10-11 18:39 - 000000000 ____D C:\Users\Yacine\.ffbinaries-cache
2020-10-11 18:38 - 2020-10-11 18:38 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\TeaTV
2020-10-10 12:26 - 2020-10-10 12:26 - 000008033 _____ C:\Users\Yacine\Desktop\Consommer data Y et essayer تخزين.xlsx
2020-10-09 12:02 - 2020-10-31 20:44 - 000003642 _____ C:\Windows\system32\Tasks\CreateExplorerShellUnelevatedTask
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-02 14:45 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-02 14:44 - 2020-03-11 14:01 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\Clover
2020-11-02 14:34 - 2020-02-06 15:22 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-11-02 11:48 - 2020-06-22 11:32 - 000004192 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1591314721
2020-11-02 11:48 - 2020-06-05 00:52 - 000001445 _____ C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2020-11-02 11:29 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-11-02 11:09 - 2020-02-06 15:45 - 000000000 ____D C:\Users\Yacine
2020-11-02 11:07 - 2020-02-06 15:23 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-02 11:00 - 2020-02-09 21:06 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2020-11-02 02:39 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-11-02 01:46 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\DMCache
2020-11-02 01:43 - 2020-03-01 10:52 - 000000000 ____D C:\Users\Yacine\AppData\Local\CrashDumps
2020-11-02 01:13 - 2020-02-09 21:59 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\uTorrent
2020-11-02 00:54 - 2020-02-09 22:03 - 000000000 ____D C:\Users\Yacine\AppData\Local\BitTorrentHelper
2020-11-02 00:17 - 2020-05-02 22:51 - 000000000 ____D C:\Users\Yacine\Desktop\Down
2020-11-01 23:04 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-11-01 22:42 - 2020-02-07 21:01 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2020-11-01 22:27 - 2020-06-26 16:13 - 000000000 ____D C:\ProgramData\BSD
2020-11-01 21:43 - 2020-02-16 19:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\Google
2020-11-01 21:29 - 2020-06-03 22:39 - 000000000 ____D C:\Users\Yacine\AppData\Local\ZHP
2020-11-01 17:47 - 2020-02-07 14:11 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-11-01 17:11 - 2020-10-01 19:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab
2020-11-01 17:11 - 2020-09-01 23:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2020-11-01 17:11 - 2020-06-24 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-11-01 17:11 - 2020-06-03 13:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN Connect
2020-11-01 17:11 - 2020-05-03 03:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2020-11-01 17:11 - 2020-04-14 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clover
2020-11-01 17:11 - 2020-04-13 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Djezzy Connect 4G
2020-11-01 17:11 - 2020-02-11 11:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSD Codec by Ardfry Imaging
2020-11-01 17:11 - 2020-02-09 21:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TapinRadio
2020-11-01 17:11 - 2020-02-09 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2020-11-01 17:11 - 2020-02-08 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2020-11-01 17:11 - 2020-02-08 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2020-11-01 17:11 - 2020-02-08 22:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVtoolnix
2020-11-01 17:11 - 2020-02-07 22:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-11-01 17:11 - 2020-02-07 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2020-11-01 17:11 - 2020-02-07 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-11-01 17:11 - 2020-02-07 14:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-11-01 17:11 - 2020-02-06 16:05 - 000000000 ____D C:\ProgramData\Packages
2020-11-01 17:11 - 2019-12-10 22:13 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-11-01 17:10 - 2020-06-07 20:04 - 000000000 ____D C:\Windows\SysWOW64\nlnme
2020-11-01 17:10 - 2020-04-13 14:42 - 000000000 ____D C:\Windows\SysWOW64\SupportAppPBDjezzy Connect 4G
2020-11-01 17:10 - 2020-03-11 11:48 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2020-11-01 17:10 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2020-11-01 17:10 - 2020-02-09 21:03 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vector Magic
2020-11-01 17:10 - 2020-02-08 22:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2020-11-01 17:10 - 2020-02-07 22:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-11-01 17:10 - 2020-02-07 20:54 - 000000000 ____D C:\Windows\SysWOW64\Adobe
2020-11-01 17:10 - 2019-03-19 07:20 - 000000000 ____D C:\Windows\SysWOW64\WCN
2020-11-01 17:10 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-01 17:10 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-11-01 15:45 - 2020-02-07 00:21 - 000008192 __RSH C:\BOOTSECT.BAK
2020-11-01 15:44 - 2020-02-07 00:21 - 000000001 ___SH C:\BOOTNXT
2020-11-01 15:29 - 2020-02-07 00:21 - 000000000 ____D C:\Windows\Panther
2020-11-01 15:00 - 2020-02-06 15:22 - 006387248 _____ C:\Windows\system32\FNTCACHE.DAT
2020-11-01 14:51 - 2020-02-08 15:04 - 000000000 ____D C:\Users\Yacine\AppData\Local\NeroLauncher
2020-11-01 14:49 - 2020-02-07 20:53 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-11-01 14:47 - 2020-02-07 20:53 - 000000000 ____D C:\ProgramData\Adobe
2020-11-01 14:46 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-11-01 14:35 - 2020-02-11 10:56 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-11-01 14:35 - 2020-02-06 15:47 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Adobe
2020-11-01 13:08 - 2020-09-01 23:31 - 000000000 ____D C:\ProgramData\ProductData
2020-11-01 13:05 - 2020-08-26 00:20 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2020-10-31 20:52 - 2020-02-06 16:15 - 000000000 ____D C:\Users\Yacine\AppData\Local\D3DSCache
2020-10-31 17:44 - 2020-02-10 22:35 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-10-31 17:44 - 2020-02-10 22:35 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-10-31 16:02 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ServiceState
2020-10-31 14:42 - 2019-03-19 05:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-10-31 14:30 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\oobe
2020-10-30 23:50 - 2019-03-19 05:49 - 000000230 _____ C:\Windows\win.ini
2020-10-30 23:37 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\IDM
2020-10-30 15:30 - 2020-02-10 23:05 - 000000000 ____D C:\Users\Yacine\AppData\Local\IIIQ
2020-10-30 11:47 - 2020-02-06 21:57 - 000795000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-10-29 20:24 - 2020-02-07 11:42 - 000000000 ____D C:\ProgramData\TEMP
2020-10-29 18:49 - 2020-09-15 23:46 - 000004422 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1592304556
2020-10-29 16:56 - 2020-04-13 01:11 - 000000000 ____D C:\Users\Yacine\Desktop\Business
2020-10-29 12:22 - 2020-02-09 21:22 - 000000000 ____D C:\Users\Yacine\TapinRadio
2020-10-26 18:18 - 2020-04-13 01:12 - 000003073 _____ C:\Users\Yacine\Desktop\Réseau.lnk
2020-10-25 12:13 - 2020-02-07 00:56 - 000000331 _____ C:\Users\Yacine\AppData\Local\Lockdir6
2020-10-25 12:13 - 2020-02-07 00:56 - 000000029 _____ C:\Users\Public\Lockdir6.lg
2020-10-18 19:50 - 2020-02-27 17:22 - 000000000 ____D C:\ProgramData\boost_interprocess
2020-10-16 16:08 - 2020-02-06 15:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\VirtualStore
2020-10-15 13:14 - 2019-11-19 22:53 - 000001926 _____ C:\Users\Yacine\Desktop\Geant OTT 500.lnk
2020-10-15 12:22 - 2019-12-02 21:40 - 000000293 _____ C:\Users\Yacine\Desktop\Amir DZ.URL
2020-10-15 12:20 - 2020-05-08 04:00 - 000000309 _____ C:\Users\Yacine\Desktop\Abdou Semmar.URL
2020-10-14 22:27 - 2019-12-16 21:37 - 000000293 _____ C:\Users\Yacine\Desktop\Hichem Aboud.URL
2020-10-14 16:54 - 2020-05-03 03:42 - 000000000 ____D C:\ProgramData\Hotspot Shield
2020-10-14 02:17 - 2020-05-15 18:17 - 000004716 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-10-14 02:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-10-14 02:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Macromed
2020-10-14 01:17 - 2020-05-13 03:21 - 000004704 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-10-12 11:53 - 2020-02-06 15:41 - 001853186 _____ C:\Windows\system32\PerfStringBackup.INI
2020-10-12 11:53 - 2019-05-22 11:53 - 000825698 _____ C:\Windows\system32\perfh00C.dat
2020-10-12 11:53 - 2019-05-22 11:53 - 000160350 _____ C:\Windows\system32\perfc00C.dat
2020-10-08 21:23 - 2020-09-25 23:46 - 000000000 ____D C:\Users\Yacine\Documents\FormatFactory
2020-10-07 12:11 - 2020-02-06 15:23 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-10-06 01:13 - 2019-03-19 05:56 - 000835472 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-10-06 01:13 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Fichiers à la racine de certains dossiers ========
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ () C:\ProgramData\fontcacheev1.dat
2018-02-27 20:06 - 2018-03-01 16:49 - 000055462 _____ () C:\Users\Yacine\AppData\Local\dlls.js
2020-05-09 21:22 - 2020-05-10 00:25 - 000002447 _____ () C:\Users\Yacine\AppData\Local\krita-sysinfo.log
2020-05-09 21:22 - 2020-05-10 00:29 - 000011674 _____ () C:\Users\Yacine\AppData\Local\krita.log
2020-05-10 00:29 - 2020-05-10 00:29 - 000000039 _____ () C:\Users\Yacine\AppData\Local\kritadisplayrc
2020-05-09 21:22 - 2020-05-10 00:29 - 000016927 _____ () C:\Users\Yacine\AppData\Local\kritarc
2020-02-07 00:56 - 2020-10-25 12:13 - 000000331 _____ () C:\Users\Yacine\AppData\Local\Lockdir6
2020-02-10 21:33 - 2020-02-10 21:33 - 000000410 _____ () C:\Users\Yacine\AppData\Local\oobelibMkey.log
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\Windows\SysWOW64\version_IObitDel.dll [2020-09-01] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
ATTENTION: ==> Impossible d'accéder au BCD. -> 0
==================== Fin de FRST.txt ========================
Exécuté par Yacine (administrateur) sur MERABET (Acer Aspire XC600) (02-11-2020 14:50:29)
Exécuté depuis C:\Users\Yacine\Desktop
Profils chargés: Yacine
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adguard Software Ltd) [Fichier non signé] D:\Système\Portables\Portables Internet\Portable Adguard 7.3.3048.0 Premium\App\Adguard\AdguardSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2009.4.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\NisSrv.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Shanghai Oriental Webcasting Co. Ltd. -> www.ejie.me) C:\Program Files (x86)\Clover\Clover.exe
(Stéphane Mitermite) [Fichier non signé] D:\Système\Portables\Portables Système\Portable FreeMi UPnP Media Server 2.0.10\FreeMi UPnP Media Server.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Run: [FreeMi UPnP Media Server] => D:\Système\Portables\Portables Système\Portable FreeMi UPnP Media Server 2.0.10\FreeMi UPnP Media Server.exe [279552 2016-05-24] (Stéphane Mitermite) [Fichier non signé]
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideSCANetwork] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\Policies\Explorer: [HideSCAVolume] 0
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {15e48cc3-7d7a-11ea-9e4a-00158307c70f} - "G:\AutoRun.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {32c4a597-5ef4-11ea-9e36-00158307c70f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {32c4a675-5ef4-11ea-9e36-00158307c70f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {544771e8-0ae7-11eb-9fbb-bde046ad9bee} - "E:\AutoRun.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {a79bed6a-5f95-11ea-9e3d-00158307c70f} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\MountPoints2: {ba76ccc8-49a5-11ea-9dbb-97905dffdb64} - "F:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {03E179AC-FC9A-4B71-968B-66F6D12DE1BE} - System32\Tasks\Opera scheduled assistant Autoupdate 1592304556 => C:\Users\Yacine\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Yacine\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {0D6FA71A-E7A4-45F7-9CDD-AA41083E1423} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_Plugin.exe [1502264 2020-10-14] (Adobe Inc. -> Adobe)
Task: {26B07B15-FCBA-4BAF-A13D-32C2321EF297} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2A2EB3AC-1B44-4A69-B1EE-DA31C7AE07DE} - System32\Tasks\Opera scheduled Autoupdate 1591314721 => C:\Users\Yacine\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software)
Task: {2CFFD82E-CFB4-483C-82C3-ABD865D97FB9} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_pepper.exe [1497656 2020-10-14] (Adobe Inc. -> Adobe)
Task: {37960E2C-C79C-4178-9DDC-B9EA99892B59} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5FA39AA2-DAD3-48B6-A5B7-586B99F5B0B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {70048156-32ED-46B4-BF32-6A12C16A62E7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {77000387-50D8-4C91-B76D-320C07AFE666} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {7C6CCC3E-BA0A-49AC-8B0F-47EC74256238} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D39D279-A495-447D-A588-B612AB637D59} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MpCmdRun.exe [533312 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {930CC600-1CC6-4F02-9667-88A6BF6FAB73} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3576917301-747911037-3154256680-1001 => C:\Windows\System32\AgentActivationRuntimeStarter.exe [13312 2019-03-19] (Microsoft Windows -> )
Task: {ABB88D91-53BC-4241-8792-B3B9092043D9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {BD776CFE-BA32-4FF1-8206-5A6885208B83} - System32\Tasks\Uninstaller_SkipUac_Yacine => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5991184 2020-03-23] (IObit Information Technology -> IObit)
Task: {CACA64F7-A095-4CD5-B0DB-5EC3BA52AA68} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{19010f3d-84ec-47cc-896f-eef79440bdd9}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{19010f3d-84ec-47cc-896f-eef79440bdd9}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{20ca23d6-e78d-42c7-ba3e-ff0d4bf3d923}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{684b012f-65a2-43e4-86a6-8eb0ba5947c2}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{684b012f-65a2-43e4-86a6-8eb0ba5947c2}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{8fdb528f-cbe4-4715-9a21-cc08b616d6ff}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{97a39ee0-12b6-4624-a42c-b58b046b3176}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{97a39ee0-12b6-4624-a42c-b58b046b3176}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{b0e38772-12cc-4668-bcdd-a4cc9bba40ef}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{b0e38772-12cc-4668-bcdd-a4cc9bba40ef}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{ca7882bc-ba37-41e0-9a6c-b3381e853115}: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{ce3033b2-d173-4d2a-82f2-2d82a77a1f7c}: [DhcpNameServer] 1.1.1.1 1.0.0.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
======
Edge DefaultProfile: Profile 1
Edge HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2020-10-30]
Edge HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
FireFox:
========
FF HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Yacine\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Yacine\AppData\Roaming\IDM\idmmzcc5 [2020-02-09] [] [non signé]
FF HKU\S-1-5-21-3576917301-747911037-3154256680-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1235205.dll [2019-03-15] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
CHR HKU\S-1-5-21-3576917301-747911037-3154256680-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-10-30]
Opera:
=======
OPR DownloadDir: C:\Users\Yacine\Desktop
OPR Notifications: hxxps://bvideo.pro; hxxps://dzchaabi.listen2myshow.com; hxxps://findmedia.biz; hxxps://nevertherekay.club; hxxps://s4.mtr.ru.net; hxxps://watch-video.net; hxxps://web.facebook.com; hxxps://www.doctissimo.fr; hxxps://www27a.tabathaherman.pro
OPR Extension: (Rich Hints Agent) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-10-23]
OPR Extension: (Save As MHT) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\hfmodljjaibbdndlikgagimhhodmobkc [2020-06-05]
OPR Extension: (World weather online®) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk [2020-06-05]
OPR Extension: (View Image) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\jpcmhcelnjdmblfmjabdeclccemkghjk [2020-06-05]
OPR Extension: (Install Chrome Extensions) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-06-05]
OPR Extension: (Google Translate) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2020-08-27]
OPR Extension: (IDM Integration Module) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-10-17]
OPR Extension: (Save for later) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkphlkgkhmdaecflflapohlkkchmcacc [2020-06-05]
OPR Extension: (Adblock Plus - free ad blocker) - C:\Users\Yacine\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2020-09-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Adguard Service; D:\Système\Portables\Portables Internet\Portable Adguard 7.3.3048.0 Premium\App\Adguard\AdguardSvc.exe [163840 2019-12-26] (Adguard Software Ltd) [Fichier non signé]
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169032 2020-05-08] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
S3 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1584645087568.exe [532480 2020-03-19] () [Fichier non signé]
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 HCloverService; C:\Program Files (x86)\Clover\CloverSvc.dll [717424 2020-04-14] (Shanghai Oriental Webcasting Co. Ltd. -> )
S3 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [197504 2019-12-24] (AnchorFree Inc -> Pango Inc.)
S3 ImDskSvc; C:\Windows\system32\imdsksvc.exe [31544 2019-01-19] (Lagerkvist Teknisk Rådgivning i Borås HB -> Olof Lagerkvist)
S3 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-01-31] (IObit Information Technology -> IObit)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\NisSrv.exe [2372048 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MsMpEng.exe [128376 2020-10-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 HuaweiHiSuiteService64.exe; "C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe" -/service [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 adgnetworktdidrv; C:\Windows\System32\drivers\adgnetworktdidrv.sys [67800 2019-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 AWEAlloc; C:\Windows\system32\DRIVERS\awealloc.sys [21048 2019-01-19] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
R3 cmuda3; C:\Windows\system32\drivers\cmudax3.sys [3848192 2014-07-03] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
S3 ew_usbccgpfilter; C:\Windows\System32\drivers\ew_usbccgpfilter.sys [18944 2019-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 ImDisk; C:\Windows\system32\DRIVERS\imdisk.sys [48704 2019-01-19] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2019-11-18] (IObit Information Technology -> IObit)
S3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
S3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-11-18] (IObit Information Technology -> IObit)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R3 MpKsl20b8bb4e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D56A4E6B-EAC2-4D54-91C4-3FCE2E727D01}\MpKslDrv.sys [47336 2020-11-02] (Microsoft Windows -> Microsoft Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tap_ovpnconnect; C:\Windows\System32\drivers\tap_ovpnconnect.sys [39408 2020-03-18] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
U5 UnlockerDriver5; D:\Système\Portables\Portables Système\Portable Unlocker 1.9.2\App\Unlocker\64-bit\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2020-10-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [428264 2020-10-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [69864 2020-10-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-02 14:50 - 2020-11-02 14:52 - 000020084 _____ C:\Users\Yacine\Desktop\FRST.txt
2020-11-02 11:31 - 2020-11-02 14:51 - 000000000 ____D C:\FRST
2020-11-02 11:30 - 2020-11-02 11:30 - 002298368 _____ (Farbar) C:\Users\Yacine\Desktop\Farbar Recovery Scan Tool 2020 x64.exe
2020-11-02 02:37 - 2020-11-02 14:52 - 000000000 ____D C:\ProgramData\Adguard
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\Windows\SysWOW64\Drivers\vwifikerneldrv.sys
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\Windows\SysWOW64\d3dx9_11.dll.tmp
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ C:\ProgramData\fontcacheev1.dat
2020-11-02 02:37 - 2020-11-02 02:37 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Adguard Software Ltd
2020-11-02 02:37 - 2020-11-02 02:37 - 000000000 ____D C:\Users\Yacine\AppData\Local\Adguard_Software_Ltd
2020-11-02 02:31 - 2019-09-18 13:24 - 000067800 _____ () C:\Windows\system32\Drivers\adgnetworktdidrv.sys_BAK
2020-11-02 02:31 - 2019-09-18 13:24 - 000067800 _____ () C:\Windows\system32\Drivers\adgnetworktdidrv.sys
2020-11-02 01:42 - 2020-11-02 01:54 - 000000000 ____D C:\ProgramData\Martau
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\qtuemdke.aob
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\qmtcubwg.nqd
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\oiptnvyg.xmk
2020-11-02 01:42 - 2020-11-02 01:42 - 000000012 _____ C:\ProgramData\ipqbdleq.kee
2020-11-02 01:42 - 2020-11-02 01:42 - 000000008 _____ C:\ProgramData\yiwyxjlh.gfr
2020-11-02 01:42 - 2020-11-02 01:42 - 000000008 _____ C:\ProgramData\lygmafen.sxc
2020-11-02 00:44 - 2020-11-02 00:44 - 000000000 ____D C:\ProgramData\SystemAcCrux
2020-11-01 22:25 - 2020-11-01 22:27 - 000000000 ____D C:\AdwCleaner
2020-11-01 19:12 - 2020-11-01 19:12 - 000000172 _____ C:\Users\Yacine\Desktop\L'installation de Windows 10 Pro 20H2 a échoué.url
2020-11-01 15:04 - 2020-11-01 17:40 - 000000000 ___HD C:\$WINDOWS.~BT
2020-11-01 14:05 - 2020-11-01 14:05 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2020-11-01 13:25 - 2020-11-01 22:45 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\ZHP
2020-11-01 12:48 - 2020-11-01 12:48 - 000000000 _____ C:\Users\Yacine\Desktop\cleanmgr.txt
2020-11-01 02:27 - 2020-11-01 02:27 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\CEZEO software
2020-10-31 20:48 - 2020-11-01 15:04 - 000001186 _____ C:\Users\Yacine\Desktop\setup - Raccourci.lnk
2020-10-31 20:12 - 2020-10-31 20:12 - 000000080 _____ C:\Users\Yacine\Desktop\Résoudre les erreurs de mise à jour Windows 10 - malekal's site.url
2020-10-31 20:04 - 2020-10-31 20:04 - 000000126 _____ C:\Users\Yacine\Desktop\Blocage pendant installation MAJ.url
2020-10-31 19:40 - 2020-11-01 13:24 - 000000251 _____ C:\Users\Yacine\Desktop\SECOND_BOOT MIGRATE_DATA.url
2020-10-31 14:50 - 2020-10-31 14:50 - 000008192 _____ C:\Windows\system32\config\userdiff
2020-10-31 14:18 - 2020-11-01 15:04 - 000001890 _____ C:\Windows\diagwrn.xml
2020-10-31 14:18 - 2020-11-01 15:04 - 000001890 _____ C:\Windows\diagerr.xml
2020-10-30 23:36 - 2020-10-30 23:36 - 000002946 _____ C:\Windows\system32\Tasks\Uninstaller_SkipUac_Yacine
2020-10-30 22:28 - 2020-10-30 22:28 - 000000000 ____D C:\Program Files\Yamicsoft
2020-10-30 22:03 - 2020-10-30 22:03 - 000001362 _____ C:\Users\Yacine\Desktop\Adobe Acrobat DC 20.012.20048 - Raccourci.lnk
2020-10-30 21:29 - 2018-12-20 12:05 - 000229296 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2020-10-30 16:17 - 2020-10-30 17:14 - 000001129 _____ C:\Users\Yacine\Desktop\Adobe CC 20121 Préactivé - Raccourci.lnk
2020-10-30 15:47 - 2020-10-30 15:47 - 000000000 ____D C:\ProgramData\LopeSoft
2020-10-29 14:47 - 2020-10-30 14:32 - 000000000 ____D C:\Program Files\Easy Context Menu
2020-10-28 15:27 - 2020-10-28 15:29 - 000000000 ____D C:\Users\Yacine\Desktop\Al-Kaicer IPTV
2020-10-28 01:39 - 2020-10-28 01:45 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Direct Folders
2020-10-27 20:31 - 2020-10-27 20:31 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à jour de Windows 10.lnk
2020-10-27 20:04 - 2020-10-27 20:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mmm
2020-10-27 16:40 - 2018-04-22 10:39 - 000000047 _____ C:\Users\Yacine\Desktop\1337x-aliaatika-2300ghoulio10.url
2020-10-26 23:12 - 2020-10-26 23:12 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\NeatDM
2020-10-26 01:48 - 2020-10-26 01:48 - 000000000 ____D C:\Users\Yacine\AppData\Local\IPTV_Tools__-__Zaman_NOW
2020-10-26 01:47 - 2020-10-26 01:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\SkinSoft
2020-10-26 01:35 - 2020-10-26 01:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\lddownloader
2020-10-26 01:35 - 2020-10-26 01:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\ChangZhi2
2020-10-26 01:31 - 2020-10-26 01:31 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\InfoServ
2020-10-24 22:25 - 2020-10-31 17:49 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\vlc
2020-10-24 22:01 - 2020-10-24 22:01 - 000000000 ____D C:\Program Files\VideoLAN
2020-10-24 01:28 - 2020-10-24 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-10-24 00:29 - 2020-10-24 01:03 - 000000000 ____D C:\ProgramData\Betternet
2020-10-22 22:10 - 2016-08-11 09:25 - 000111260 _____ (Un4seen Developments) C:\Windows\SysWOW64\bass.dll
2020-10-22 22:06 - 2016-08-11 09:25 - 000111260 _____ (Un4seen Developments) C:\Windows\system32\bass.dll
2020-10-22 22:02 - 2020-10-22 23:13 - 000000000 ____D C:\ProgramData\PopCap Games
2020-10-22 21:56 - 2020-10-22 21:56 - 000001186 _____ C:\Users\Yacine\Desktop\Apprendre le Français.lnk
2020-10-21 20:32 - 2020-10-21 20:32 - 000000000 ____D C:\ProgramData\FreeGrabApp
2020-10-21 15:25 - 2020-10-21 15:29 - 000000000 ____D C:\Users\Yacine\AppData\Local\FreeGrabApp
2020-10-21 15:24 - 2020-10-22 23:26 - 000002472 _____ C:\Users\Yacine\Desktop\Netflix Download.lnk
2020-10-21 01:18 - 2020-10-21 01:18 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\DefaultCompany
2020-10-18 14:56 - 2020-10-29 16:57 - 000000000 ____D C:\Users\Yacine\Desktop\Champions League
2020-10-17 22:05 - 2020-10-26 18:52 - 000001317 _____ C:\Users\Yacine\Desktop\Playlists.lnk
2020-10-17 00:11 - 2020-10-17 00:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\MeuhMeuhTV
2020-10-16 23:22 - 2020-10-16 23:22 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Mozilla
2020-10-16 23:21 - 2020-10-16 23:21 - 000000000 ____D C:\Users\Yacine\AppData\Local\Smart PC Soft
2020-10-16 23:18 - 2020-10-16 23:20 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Pluto TV
2020-10-16 22:59 - 2020-10-16 23:02 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\PerfectPlayer
2020-10-16 22:59 - 2020-10-16 22:59 - 000000243 _____ C:\Users\Yacine\dsj.xml
2020-10-16 21:21 - 2020-10-16 21:21 - 000000000 ____D C:\Users\Yacine\AppData\Local\TVU Networks
2020-10-16 21:21 - 2020-10-16 21:21 - 000000000 ____D C:\ProgramData\TVU Networks
2020-10-16 21:20 - 2020-10-16 21:20 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\TVU Networks
2020-10-16 21:18 - 2020-10-16 21:18 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\WindowsIPTVPlayer
2020-10-16 16:31 - 2020-10-16 16:31 - 000000000 ____D C:\Users\Yacine\AppData\Local\IsolatedStorage
2020-10-16 15:17 - 2020-10-16 15:17 - 000000000 ____D C:\Users\Yacine\AppData\Local\CherryPlayer
2020-10-16 14:45 - 2020-10-16 14:45 - 000000000 ____D C:\Users\Yacine\.config
2020-10-16 14:30 - 2020-11-01 17:10 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\V7 Soft
2020-10-16 14:29 - 2020-10-16 14:32 - 000000000 ____D C:\Users\Yacine\AppData\Local\Deployment
2020-10-16 14:29 - 2020-10-16 14:29 - 000000000 ____D C:\Users\Yacine\AppData\Local\Apps\2.0
2020-10-16 14:28 - 2020-10-16 14:28 - 000001017 _____ C:\Windows\SysWOW64\pcp.bmp
2020-10-16 14:12 - 2020-10-30 17:16 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Media Player Classic
2020-10-15 00:33 - 2020-09-10 05:14 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-10-15 00:33 - 2020-09-10 05:12 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-10-14 19:14 - 2020-10-14 19:14 - 000000022 _____ C:\Windows\cmm.dat
2020-10-12 00:03 - 2020-10-12 00:04 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Umeng
2020-10-12 00:03 - 2020-10-12 00:03 - 000000000 ____D C:\Users\Yacine\Downloads\SHAREit
2020-10-12 00:03 - 2020-10-12 00:03 - 000000000 ____D C:\Users\Yacine\AppData\Local\SHAREit Technologies
2020-10-11 18:39 - 2020-10-11 18:39 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Dat
2020-10-11 18:38 - 2020-10-11 18:39 - 000000000 ____D C:\Users\Yacine\.ffbinaries-cache
2020-10-11 18:38 - 2020-10-11 18:38 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\TeaTV
2020-10-10 12:26 - 2020-10-10 12:26 - 000008033 _____ C:\Users\Yacine\Desktop\Consommer data Y et essayer تخزين.xlsx
2020-10-09 12:02 - 2020-10-31 20:44 - 000003642 _____ C:\Windows\system32\Tasks\CreateExplorerShellUnelevatedTask
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2020-11-02 14:45 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-02 14:44 - 2020-03-11 14:01 - 000000000 ____D C:\Users\Yacine\AppData\LocalLow\Clover
2020-11-02 14:34 - 2020-02-06 15:22 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-11-02 11:48 - 2020-06-22 11:32 - 000004192 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1591314721
2020-11-02 11:48 - 2020-06-05 00:52 - 000001445 _____ C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2020-11-02 11:29 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-11-02 11:09 - 2020-02-06 15:45 - 000000000 ____D C:\Users\Yacine
2020-11-02 11:07 - 2020-02-06 15:23 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-02 11:00 - 2020-02-09 21:06 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2020-11-02 02:39 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-11-02 01:46 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\DMCache
2020-11-02 01:43 - 2020-03-01 10:52 - 000000000 ____D C:\Users\Yacine\AppData\Local\CrashDumps
2020-11-02 01:13 - 2020-02-09 21:59 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\uTorrent
2020-11-02 00:54 - 2020-02-09 22:03 - 000000000 ____D C:\Users\Yacine\AppData\Local\BitTorrentHelper
2020-11-02 00:17 - 2020-05-02 22:51 - 000000000 ____D C:\Users\Yacine\Desktop\Down
2020-11-01 23:04 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-11-01 22:42 - 2020-02-07 21:01 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2020-11-01 22:27 - 2020-06-26 16:13 - 000000000 ____D C:\ProgramData\BSD
2020-11-01 21:43 - 2020-02-16 19:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\Google
2020-11-01 21:29 - 2020-06-03 22:39 - 000000000 ____D C:\Users\Yacine\AppData\Local\ZHP
2020-11-01 17:47 - 2020-02-07 14:11 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-11-01 17:11 - 2020-10-01 19:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab
2020-11-01 17:11 - 2020-09-01 23:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2020-11-01 17:11 - 2020-06-24 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-11-01 17:11 - 2020-06-03 13:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN Connect
2020-11-01 17:11 - 2020-05-03 03:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2020-11-01 17:11 - 2020-04-14 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clover
2020-11-01 17:11 - 2020-04-13 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Djezzy Connect 4G
2020-11-01 17:11 - 2020-02-11 11:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSD Codec by Ardfry Imaging
2020-11-01 17:11 - 2020-02-09 21:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TapinRadio
2020-11-01 17:11 - 2020-02-09 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2020-11-01 17:11 - 2020-02-08 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2020-11-01 17:11 - 2020-02-08 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2020-11-01 17:11 - 2020-02-08 22:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVtoolnix
2020-11-01 17:11 - 2020-02-07 22:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-11-01 17:11 - 2020-02-07 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2020-11-01 17:11 - 2020-02-07 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-11-01 17:11 - 2020-02-07 14:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-11-01 17:11 - 2020-02-06 16:05 - 000000000 ____D C:\ProgramData\Packages
2020-11-01 17:11 - 2019-12-10 22:13 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-11-01 17:10 - 2020-06-07 20:04 - 000000000 ____D C:\Windows\SysWOW64\nlnme
2020-11-01 17:10 - 2020-04-13 14:42 - 000000000 ____D C:\Windows\SysWOW64\SupportAppPBDjezzy Connect 4G
2020-11-01 17:10 - 2020-03-11 11:48 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2020-11-01 17:10 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2020-11-01 17:10 - 2020-02-09 21:03 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vector Magic
2020-11-01 17:10 - 2020-02-08 22:35 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
2020-11-01 17:10 - 2020-02-07 22:11 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-11-01 17:10 - 2020-02-07 20:54 - 000000000 ____D C:\Windows\SysWOW64\Adobe
2020-11-01 17:10 - 2019-03-19 07:20 - 000000000 ____D C:\Windows\SysWOW64\WCN
2020-11-01 17:10 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-01 17:10 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-11-01 15:45 - 2020-02-07 00:21 - 000008192 __RSH C:\BOOTSECT.BAK
2020-11-01 15:44 - 2020-02-07 00:21 - 000000001 ___SH C:\BOOTNXT
2020-11-01 15:29 - 2020-02-07 00:21 - 000000000 ____D C:\Windows\Panther
2020-11-01 15:00 - 2020-02-06 15:22 - 006387248 _____ C:\Windows\system32\FNTCACHE.DAT
2020-11-01 14:51 - 2020-02-08 15:04 - 000000000 ____D C:\Users\Yacine\AppData\Local\NeroLauncher
2020-11-01 14:49 - 2020-02-07 20:53 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-11-01 14:47 - 2020-02-07 20:53 - 000000000 ____D C:\ProgramData\Adobe
2020-11-01 14:46 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-11-01 14:35 - 2020-02-11 10:56 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-11-01 14:35 - 2020-02-06 15:47 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\Adobe
2020-11-01 13:08 - 2020-09-01 23:31 - 000000000 ____D C:\ProgramData\ProductData
2020-11-01 13:05 - 2020-08-26 00:20 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2020-10-31 20:52 - 2020-02-06 16:15 - 000000000 ____D C:\Users\Yacine\AppData\Local\D3DSCache
2020-10-31 17:44 - 2020-02-10 22:35 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-10-31 17:44 - 2020-02-10 22:35 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-10-31 16:02 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ServiceState
2020-10-31 14:42 - 2019-03-19 05:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-10-31 14:30 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\oobe
2020-10-30 23:50 - 2019-03-19 05:49 - 000000230 _____ C:\Windows\win.ini
2020-10-30 23:37 - 2020-02-09 21:07 - 000000000 ____D C:\Users\Yacine\AppData\Roaming\IDM
2020-10-30 15:30 - 2020-02-10 23:05 - 000000000 ____D C:\Users\Yacine\AppData\Local\IIIQ
2020-10-30 11:47 - 2020-02-06 21:57 - 000795000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-10-29 20:24 - 2020-02-07 11:42 - 000000000 ____D C:\ProgramData\TEMP
2020-10-29 18:49 - 2020-09-15 23:46 - 000004422 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1592304556
2020-10-29 16:56 - 2020-04-13 01:11 - 000000000 ____D C:\Users\Yacine\Desktop\Business
2020-10-29 12:22 - 2020-02-09 21:22 - 000000000 ____D C:\Users\Yacine\TapinRadio
2020-10-26 18:18 - 2020-04-13 01:12 - 000003073 _____ C:\Users\Yacine\Desktop\Réseau.lnk
2020-10-25 12:13 - 2020-02-07 00:56 - 000000331 _____ C:\Users\Yacine\AppData\Local\Lockdir6
2020-10-25 12:13 - 2020-02-07 00:56 - 000000029 _____ C:\Users\Public\Lockdir6.lg
2020-10-18 19:50 - 2020-02-27 17:22 - 000000000 ____D C:\ProgramData\boost_interprocess
2020-10-16 16:08 - 2020-02-06 15:47 - 000000000 ____D C:\Users\Yacine\AppData\Local\VirtualStore
2020-10-15 13:14 - 2019-11-19 22:53 - 000001926 _____ C:\Users\Yacine\Desktop\Geant OTT 500.lnk
2020-10-15 12:22 - 2019-12-02 21:40 - 000000293 _____ C:\Users\Yacine\Desktop\Amir DZ.URL
2020-10-15 12:20 - 2020-05-08 04:00 - 000000309 _____ C:\Users\Yacine\Desktop\Abdou Semmar.URL
2020-10-14 22:27 - 2019-12-16 21:37 - 000000293 _____ C:\Users\Yacine\Desktop\Hichem Aboud.URL
2020-10-14 16:54 - 2020-05-03 03:42 - 000000000 ____D C:\ProgramData\Hotspot Shield
2020-10-14 02:17 - 2020-05-15 18:17 - 000004716 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-10-14 02:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-10-14 02:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Macromed
2020-10-14 01:17 - 2020-05-13 03:21 - 000004704 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-10-12 11:53 - 2020-02-06 15:41 - 001853186 _____ C:\Windows\system32\PerfStringBackup.INI
2020-10-12 11:53 - 2019-05-22 11:53 - 000825698 _____ C:\Windows\system32\perfh00C.dat
2020-10-12 11:53 - 2019-05-22 11:53 - 000160350 _____ C:\Windows\system32\perfc00C.dat
2020-10-08 21:23 - 2020-09-25 23:46 - 000000000 ____D C:\Users\Yacine\Documents\FormatFactory
2020-10-07 12:11 - 2020-02-06 15:23 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-10-06 01:13 - 2019-03-19 05:56 - 000835472 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-10-06 01:13 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Fichiers à la racine de certains dossiers ========
2020-11-02 02:37 - 2020-11-02 02:37 - 000000227 _____ () C:\ProgramData\fontcacheev1.dat
2018-02-27 20:06 - 2018-03-01 16:49 - 000055462 _____ () C:\Users\Yacine\AppData\Local\dlls.js
2020-05-09 21:22 - 2020-05-10 00:25 - 000002447 _____ () C:\Users\Yacine\AppData\Local\krita-sysinfo.log
2020-05-09 21:22 - 2020-05-10 00:29 - 000011674 _____ () C:\Users\Yacine\AppData\Local\krita.log
2020-05-10 00:29 - 2020-05-10 00:29 - 000000039 _____ () C:\Users\Yacine\AppData\Local\kritadisplayrc
2020-05-09 21:22 - 2020-05-10 00:29 - 000016927 _____ () C:\Users\Yacine\AppData\Local\kritarc
2020-02-07 00:56 - 2020-10-25 12:13 - 000000331 _____ () C:\Users\Yacine\AppData\Local\Lockdir6
2020-02-10 21:33 - 2020-02-10 21:33 - 000000410 _____ () C:\Users\Yacine\AppData\Local\oobelibMkey.log
==================== FCheck ================================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
FCheck: C:\Windows\SysWOW64\version_IObitDel.dll [2020-09-01] <==== ATTENTION (zéro octet Fichier/Dossier)
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
ATTENTION: ==> Impossible d'accéder au BCD. -> 0
==================== Fin de FRST.txt ========================