Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-01-2021
Exécuté par coeur (administrateur) sur MISTER7O (Hewlett-Packard HP ProDesk 400 G2 MT) (21-01-2021 18:36:32)
Exécuté depuis C:\Users\coeur\Desktop
Profils chargés: coeur
Platform: Windows 10 Pro Version 20H2 19042.746 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

() [Fichier non signé] C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Andrea Electronics -> Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(Canon INC.) [Fichier non signé] C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe
(CANON INC.) [Fichier non signé] C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files (x86)\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files (x86)\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\coeur\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2012.16655.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9240512 2017-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1492928 2017-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1156824 2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498720 2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2020-11-30] (Adobe Inc. -> )
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [285544 2020-12-07] (IDSA Production signing key -> Intel)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3337223791-4126161863-2399500967-1001\...\Run: [qBittorrent] => C:\Program Files\qBittorrent\qbittorrent.exe [26116096 2021-01-19] () [Fichier non signé]
HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [55432 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\WINDOWS\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series XPS: C:\WINDOWS\system32\CNMXLMCS.DLL [409088 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.96\Installer\chrmstp.exe [2021-01-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\87.1.7550.89\Installer\chrmstp.exe [2021-01-07] (Avast Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2018-01-25]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe () [Fichier non signé]
Startup: C:\Users\coeur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2018-07-22]
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.) [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0206E3EB-89B2-49CB-A859-16B995CA72A1} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
Task: {029818C8-FFC3-4689-9139-C2A1C4FC7AAA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-08] (Adobe Inc. -> Adobe)
Task: {0E179E1E-EA43-45E4-BC12-2BA534465245} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-25] (Google Inc -> Google Inc.)
Task: {17EFF912-8144-47F1-980F-5435970EF85B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [348504 2020-11-06] (HP Inc. -> HP Inc.)
Task: {1C1399B9-6E6E-4DA1-9C3D-A5450B1FAF7E} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => cmd /c start hpdiags://BHM2
Task: {1D985F77-7F54-4FD6-B3CD-89C7CAF8F36C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => cmd /c start hpdiags://LaunchUI
Task: {26F5B506-D9B6-4C36-9044-31C1173F8CFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {28154C3D-B9FE-4927-8D0E-F68FF27F981E} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => cmd /c start hpdiags://BatteryStatusTest
Task: {28DFB596-5D03-44F6-AB3A-039685A901CF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {29375106-5C5D-404D-8096-FACBF961D3A9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {297A4009-56CF-4545-AAD8-EF0FF078407E} - \AvastUpdateTaskMachineCore -> Pas de fichier <==== ATTENTION
Task: {2EC2BB7F-B3AE-4F95-9DEF-A48DD52D34E6} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => cmd /c start hpdiags://SmartCheckError
Task: {316D7E01-0E9F-4603-9D47-44EE0DA57B36} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {31C3D59B-314E-4AB4-BAF5-35AEBE9AC18C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {3D6463F8-58FB-4900-923F-44508544FA60} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {515DA454-309B-43B8-93F5-36217F3EEC39} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2021-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {60C04A8C-ED15-4BF1-87FD-FAF50BFF5307} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => cmd /c start hpdiags://BCF
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Adobe Flash Player NPAPI Notifier" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\Adobe Flash Player Updater" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\AdobeGCInvoker-1.0" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\CreateExplorerShellUnelevatedTask" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore1d6ad538cbf7124" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-3337223791-4126161863-2399500967-1001" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(14): schtasks.exe -> /Change /TN "\USER_ESRV_SVC_QUEENCREEK" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(15): schtasks.exe -> /Change /TN "\User_Feed_Synchronization-{CE6DA9A8-7769-44A2-8FFD-AB856D81BF2F}" /ENABLE
Task: {622FAA57-D3B0-45E5-AD19-DDA0EEFE7AB2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(16): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {62B2CD8A-B0E0-4ACD-97D9-B7A79E0951FE} - \Avast TUNEUP Update -> Pas de fichier <==== ATTENTION
Task: {66F7C451-AD89-4C32-A3FC-B35E83A77B29} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6E11563A-4001-4EB8-A9FA-E3A344846B6C} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {6E43ED67-D6FF-471C-B764-B5CB34EBE7A5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5333424 2021-01-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B3C1503-62F6-4A61-BFA5-BD89D43E8972} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5333424 2021-01-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {7F1357B7-54D0-4054-B07B-9F340E8F9E31} - \Avast Secure Browser Heartbeat Task (Logon) -> Pas de fichier <==== ATTENTION
Task: {80C943CF-965E-4E95-81DD-6E250E86C294} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Weekly scan => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {8411F19C-1F4D-4CBA-B430-AC3ACBAFD9AA} - \Avast Secure Browser Heartbeat Task (Hourly) -> Pas de fichier <==== ATTENTION
Task: {8D936A03-BE1D-4D39-A7FA-59083B23C2E3} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => cmd /c start hpdiags://BHM1
Task: {A0B0871B-0F4F-4EA1-AB5F-392B513D2178} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {A1C4D8AC-3861-435E-9D51-D0F79E646167} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A2701C6F-8438-4A7F-BCF9-CFA575371D94} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {ACFFC383-8DBD-4957-BB58-7C83ED0AA488} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {B3026305-DC9C-4478-B4E8-3EF9C739A2D8} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => cmd /c start hpdiags:
Task: {B34C13B2-1E8F-42E6-B74F-1456D821C5B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B745637B-52B1-4C43-BCDD-85DDFAFC62A3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BBAD1748-5EB1-43B4-AAF2-891ABF2DF89F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23061896 2021-01-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {BEE09DFE-A593-4CB5-A612-464CD1EC8230} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe [553304 2020-10-28] (HP Inc. -> HP Inc.)
Task: {C02D0AAA-33DF-4300-85A4-40CE5FF78F5F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {C4A22F02-B247-45C2-A914-83DB549A0926} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3098928 2020-08-02] (Intel(R) Software Development Products -> Intel Corporation)
Task: {C516C2E0-0BEE-4FCB-A18E-26CA0DE1912B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckTest => cmd /c start hpdiags://SmartCheckTest
Task: {D1C80B06-227B-4401-90F7-2CFA15037A3A} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => cmd /c start hpdiags://ABO
Task: {D244892E-CAC7-4276-8132-E3DBEFF42134} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-25] (Google Inc -> Google Inc.)
Task: {D2AA5327-9D5E-4A63-827F-391F26309313} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3098928 2020-08-02] (Intel(R) Software Development Products -> Intel Corporation)
Task: {DBAC173F-32AB-4A14-A5AC-D081B4225C9E} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => cmd /c start hpdiags://BatteryStatusError
Task: {E1F30A30-673C-4806-8B3C-BAB4B48B693E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2021-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {E5F944E3-5BD0-4A39-BC55-15D09626295E} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693456 2020-12-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {E895DD6B-DEFB-422D-A4D4-73DDF61E85A3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23061896 2021-01-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE61638F-0379-4E03-B961-D9ADD928DD39} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [135000 2020-06-22] (HP Inc. -> HP Inc.)
Task: {F2A755B8-922A-476D-B3A9-DC4BB3D85D67} - \AvastUpdateTaskMachineUA -> Pas de fichier <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{35008f9d-b9a3-4a13-bff5-9fc29c92c096}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{652e811c-0fbe-43b5-b9d3-27cc36615d45}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{716f6f09-524b-42e9-bfe1-e6a856d734c7}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{fd206648-1a8e-42c5-9ef8-518f113c6217}: [DhcpNameServer] 192.168.1.254

Edge:
=======
DownloadDir: C:\Users\coeur\Downloads
Edge Profile: C:\Users\coeur\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-21]
Edge Extension: (Save to Facebook) - C:\Users\coeur\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2020-07-17]
Edge Extension: (uBlock Origin) - C:\Users\coeur\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2021-01-21]

FireFox:
========
FF DefaultProfile: ez6wmfu6.default-1604335476673
FF ProfilePath: C:\Users\coeur\AppData\Roaming\Mozilla\Firefox\Profiles\ez6wmfu6.default-1604335476673 [2021-01-11]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2018-01-24] []
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [Fichier non signé]
FF Plugin-x32: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2021-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2021-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-01-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-09-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default [2021-01-21]
CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://eu1.badoo.com; hxxps://musculaction.os.tc; hxxps://us1.badoo.com; hxxps://www.conforama.fr; hxxps://www.facebook.com; hxxps://www.instagram.com; hxxps://www.youtube.com
CHR Session Restore: Default -> est activé.
CHR Extension: (Slides) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-25]
CHR Extension: (Safe Torrent Scanner) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-01-21]
CHR Extension: (Docs) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-25]
CHR Extension: (Google Drive) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-28]
CHR Extension: (YouTube) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-25]
CHR Extension: (uBlock Origin) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-01-10]
CHR Extension: (Adobe Acrobat) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-12-19]
CHR Extension: (Sheets) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-25]
CHR Extension: (Google Docs hors connexion) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-15]
CHR Extension: (Avast Online Security) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-08-10]
CHR Extension: (Save to Facebook) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2020-05-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-14]
CHR Extension: (Gmail) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-28]
CHR Extension: (Chrome Media Router) - C:\Users\coeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-01-21]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2016-10-01]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128 2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
R2 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [106944 2017-06-29] (Andrea Electronics -> Andrea Electronics Corporation)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3739728 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3511376 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\87.1.7550.89\elevation_service.exe [1408840 2021-01-05] (Avast Software s.r.o. -> AVAST Software)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144464 2015-02-19] (Canon Inc. -> CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8960904 2021-01-03] (Microsoft Corporation -> Microsoft Corporation)
S3 Eaphost; C:\WINDOWS\System32\eapsvc.dll [112640 2019-12-07] (Microsoft Windows -> Microsoft Corporation) [Fichier non signé]
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> )
R2 MBAMService; C:\Program Files (x86)\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5198064 2021-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2021-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [X]

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [68592 2020-04-06] (FinalWire Kft. -> )
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2021-01-21] (Malwarebytes Corporation -> Malwarebytes)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S3 shspusb; C:\WINDOWS\System32\drivers\HSPUSB.sys [24064 2016-07-22] (Microsoft Windows Hardware Compatibility Publisher -> MobileTop)
S3 sscdserd; C:\WINDOWS\System32\drivers\sscdserd.sys [158024 2016-07-22] (MCCI Corporation -> MCCI Corporation)
S3 ssceserd; C:\WINDOWS\System32\drivers\ssceserd.sys [158024 2016-07-22] (MCCI Corporation -> MCCI Corporation)
S3 ssdudfu; C:\WINDOWS\System32\drivers\ssdudfu.sys [101960 2016-07-22] (MCCI Corporation -> MCCI)
S3 ssm_bus; C:\WINDOWS\System32\drivers\ssm_bus.sys [136192 2016-07-22] (MCCI Corporation -> MCCI Corporation)
S3 ssm_mdm; C:\WINDOWS\System32\drivers\ssm_mdm.sys [172032 2016-07-22] (MCCI Corporation -> MCCI Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_bserd; C:\WINDOWS\System32\drivers\ss_bserd.sys [128000 2016-07-22] (MCCI Corporation -> MCCI Corporation)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-01-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2021-01-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2021-01-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-01-21 18:36 - 2021-01-21 18:37 - 000037343 _____ C:\Users\coeur\Desktop\FRST.txt
2021-01-21 18:36 - 2021-01-21 18:36 - 000000000 ____D C:\FRST
2021-01-21 18:35 - 2021-01-21 18:35 - 002295808 _____ (Farbar) C:\Users\coeur\Desktop\FRST64.exe
2021-01-21 17:56 - 2021-01-21 17:56 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-01-21 17:32 - 2021-01-21 17:32 - 000000462 _____ C:\Users\coeur\Desktop\options-caches-alimentation-Windows.zip
2021-01-20 21:38 - 2021-01-20 21:38 - 000137785 _____ C:\Users\coeur\Desktop\CertificatAdhesionComplementParents.pdf
2021-01-20 21:37 - 2021-01-20 21:37 - 000224847 _____ C:\Users\coeur\Desktop\AttestationScolaire.pdf
2021-01-20 21:07 - 2021-01-20 21:07 - 000089422 _____ C:\Users\coeur\Desktop\FGDR_0099774854_20210118.pdf
2021-01-20 20:05 - 2021-01-20 20:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2021-01-20 20:05 - 2021-01-20 20:05 - 000000000 ____D C:\Program Files\qBittorrent
2021-01-20 20:04 - 2021-01-20 20:04 - 026571028 _____ (The qBittorrent project) C:\Users\coeur\Desktop\qbittorrent_4.3.3_x64_setup.exe
2021-01-13 00:05 - 2021-01-13 00:05 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-13 00:05 - 2021-01-13 00:05 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-13 00:05 - 2021-01-13 00:05 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-13 00:05 - 2021-01-13 00:05 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-13 00:05 - 2021-01-13 00:05 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-13 00:05 - 2021-01-13 00:05 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-13 00:05 - 2021-01-13 00:05 - 000467968 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-13 00:05 - 2021-01-13 00:05 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-13 00:05 - 2021-01-13 00:05 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-13 00:05 - 2021-01-13 00:05 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000138056 _____ C:\WINDOWS\system32\HvsiManagementApi.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-13 00:05 - 2021-01-13 00:05 - 000101704 _____ C:\WINDOWS\SysWOW64\HvsiManagementApi.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-13 00:05 - 2021-01-13 00:05 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-13 00:05 - 2021-01-13 00:05 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-13 00:05 - 2021-01-13 00:05 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-13 00:05 - 2021-01-13 00:05 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-13 00:05 - 2021-01-13 00:05 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-01-13 00:04 - 2021-01-13 00:04 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-13 00:04 - 2021-01-13 00:04 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-13 00:04 - 2021-01-13 00:04 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-13 00:04 - 2021-01-13 00:04 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-13 00:04 - 2021-01-13 00:04 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-13 00:04 - 2021-01-13 00:04 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-13 00:04 - 2021-01-13 00:04 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-13 00:04 - 2021-01-13 00:04 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-13 00:04 - 2021-01-13 00:04 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-01-13 00:04 - 2021-01-13 00:04 - 000010894 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-01-13 00:03 - 2021-01-13 00:03 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-13 00:03 - 2021-01-13 00:03 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-13 00:03 - 2021-01-13 00:03 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-13 00:03 - 2021-01-13 00:03 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-12 00:48 - 2021-01-12 00:48 - 000007635 _____ C:\Users\coeur\AppData\Local\Resmon.ResmonCfg
2021-01-11 11:33 - 2021-01-11 11:33 - 001409275 _____ C:\Users\coeur\Desktop\Soprofen.pdf
2021-01-11 11:32 - 2021-01-11 11:33 - 000000000 ___HD C:\ProgramData\CanonIJScan
2021-01-11 11:31 - 2015-01-29 11:22 - 000353792 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNC_CSL.dll
2021-01-11 11:31 - 2014-12-02 16:01 - 000096256 _____ C:\WINDOWS\SysWOW64\CNC178ED.TBL
2021-01-11 11:31 - 2008-08-25 18:02 - 000015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll
2021-01-10 14:49 - 2021-01-10 14:49 - 000001305 _____ C:\Users\coeur\AppData\Local\recently-used.xbel
2021-01-10 13:51 - 2021-01-10 13:51 - 000000000 ____D C:\WINDOWS\Panther
2021-01-08 18:45 - 2021-01-21 17:58 - 000000000 ____D C:\Users\coeur\AppData\Roaming\qBittorrent
2021-01-08 18:45 - 2021-01-08 18:45 - 000000000 ____D C:\Users\coeur\AppData\Local\qBittorrent
2021-01-08 18:42 - 2021-01-08 18:42 - 000000000 ____D C:\Users\coeur\Desktop\BT_backup
2021-01-07 19:30 - 2021-01-07 19:30 - 000000000 ____D C:\Users\coeur\AppData\Local\mbam
2021-01-07 19:29 - 2021-01-07 19:29 - 000000000 ____D C:\Users\coeur\AppData\Local\mbamtray
2021-01-07 19:28 - 2021-01-07 19:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-01-07 19:28 - 2021-01-07 19:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\etc\BACKUP
2021-01-07 19:28 - 2021-01-07 19:28 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-01-07 19:28 - 2021-01-07 19:28 - 000000000 ____D C:\Program Files (x86)\Malwarebytes
2021-01-07 19:28 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-01-07 18:52 - 2021-01-07 18:52 - 000000000 ____D C:\WINDOWS\pss
2021-01-04 21:05 - 2021-01-04 21:05 - 000000000 ____D C:\Users\coeur\AppData\Local\Western_Digital
2020-12-30 15:36 - 2020-11-11 03:54 - 000167280 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2020-12-30 15:36 - 2020-11-11 03:54 - 000159600 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2020-12-30 15:36 - 2020-11-11 03:54 - 000043376 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ss_conn_usb_driver2.sys
2020-12-30 10:54 - 2020-12-30 10:54 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-12-30 10:54 - 2020-12-30 10:54 - 000000000 ____D C:\ProgramData\Documents\Wondershare
2020-12-30 10:36 - 2020-12-30 10:36 - 000000000 ____D C:\Users\coeur\Documents\SideSync
2020-12-30 10:34 - 2020-12-30 10:34 - 000000000 ____D C:\Program Files\Samsung
2020-12-30 10:34 - 2020-06-26 03:15 - 000136048 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus.sys
2020-12-30 10:32 - 2020-12-30 10:32 - 000000000 ____D C:\WINDOWS\system32\Samsung
2020-12-29 21:31 - 2017-12-21 00:55 - 001435104 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2020-12-29 21:31 - 2017-12-21 00:55 - 000467120 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2020-12-29 21:31 - 2017-12-21 00:55 - 000381376 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2020-12-29 21:31 - 2017-12-21 00:55 - 000341112 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2020-12-29 21:31 - 2017-12-21 00:55 - 000341112 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000231880 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000190512 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFProc64.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000096024 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFComm64.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000093456 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFSAPO64.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000092440 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFHAPO64.dll
2020-12-29 21:31 - 2017-12-21 00:50 - 000092440 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFDAPO64.dll
2020-12-29 21:31 - 2017-12-21 00:49 - 000343672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2020-12-29 21:31 - 2017-12-21 00:49 - 000090880 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2020-12-29 21:31 - 2017-12-21 00:49 - 000088280 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2020-12-29 21:31 - 2017-12-21 00:49 - 000083592 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 001353288 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000691640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000392832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000327240 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000220352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000116504 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2020-12-29 21:31 - 2017-12-21 00:44 - 000093864 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2020-12-29 21:31 - 2017-12-21 00:43 - 000327240 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2020-12-29 21:31 - 2017-12-21 00:40 - 003677120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2020-12-29 21:31 - 2017-12-21 00:40 - 003205568 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2020-12-29 21:31 - 2017-12-21 00:39 - 072520680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2020-12-29 21:31 - 2017-12-21 00:39 - 002922944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2020-12-29 21:31 - 2017-12-21 00:38 - 000122280 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2020-12-29 21:31 - 2017-12-21 00:01 - 015335659 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-12-28 16:25 - 2021-01-14 09:44 - 000000000 ____D C:\Users\coeur\Desktop\Tableau Surendettement
2020-12-27 21:23 - 2020-12-29 21:39 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-27 21:23 - 2020-12-27 21:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-01-21 18:33 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-01-21 18:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-01-21 18:00 - 2020-10-28 18:55 - 001681434 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-01-21 18:00 - 2019-12-07 15:50 - 000755174 _____ C:\WINDOWS\system32\perfh00C.dat
2021-01-21 18:00 - 2019-12-07 15:50 - 000141980 _____ C:\WINDOWS\system32\perfc00C.dat
2021-01-21 18:00 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-01-21 17:57 - 2018-01-24 21:27 - 000000000 ____D C:\Users\coeur\AppData\Local\PlaceholderTileLogoFolder
2021-01-21 17:57 - 2017-02-10 14:59 - 000000000 ___RD C:\Users\coeur\OneDrive
2021-01-21 17:56 - 2020-10-28 18:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-01-21 17:56 - 2020-10-28 18:51 - 000008192 ___SH C:\DumpStack.log.tmp
2021-01-21 17:56 - 2020-06-12 15:02 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-01-21 17:56 - 2020-06-12 15:02 - 000000000 __SHD C:\Users\coeur\IntelGraphicsProfiles
2021-01-21 17:56 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-01-21 17:51 - 2020-10-28 18:39 - 000000000 ____D C:\Users\coeur
2021-01-21 17:50 - 2018-07-08 18:38 - 000000000 ____D C:\Users\coeur\AppData\Local\CrashDumps
2021-01-21 16:52 - 2020-10-28 18:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-01-21 16:45 - 2020-10-28 18:57 - 000004164 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{CE6DA9A8-7769-44A2-8FFD-AB856D81BF2F}
2021-01-21 06:14 - 2020-06-16 19:43 - 000000000 ____D C:\Program Files\Microsoft Office
2021-01-20 05:06 - 2020-05-14 20:26 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-01-20 05:06 - 2020-05-14 20:26 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-01-19 21:34 - 2020-10-28 19:51 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6ad538cbf7124
2021-01-19 21:34 - 2020-10-28 18:57 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-01-14 06:02 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-01-13 00:50 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-01-13 00:49 - 2020-10-28 18:51 - 000444760 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-01-13 00:48 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-13 00:48 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-01-13 00:48 - 2019-12-07 15:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-01-13 00:48 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-13 00:03 - 2020-10-28 18:51 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-12 23:56 - 2018-01-25 17:17 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-12 23:54 - 2018-01-25 17:17 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-01-12 10:45 - 2020-11-26 15:34 - 000000000 ____D C:\Users\coeur\Documents\Torrent Down
2021-01-12 00:49 - 2020-09-24 21:31 - 000000000 ____D C:\Users\coeur\AppData\Local\BitTorrentHelper
2021-01-12 00:23 - 2018-02-10 13:56 - 000000000 ___HD C:\ProgramData\CanonIJMIG
2021-01-12 00:23 - 2018-01-24 21:35 - 000000000 ____D C:\Users\coeur\AppData\Roaming\Canon
2021-01-11 23:10 - 2020-10-18 20:07 - 000000000 ____D C:\Users\coeur\Desktop\Nouveau dossier
2021-01-11 22:16 - 2018-05-02 20:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-01-11 22:06 - 2018-01-28 19:49 - 000000000 ____D C:\ProgramData\Avast Software
2021-01-11 22:03 - 2018-01-25 17:19 - 000795000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-01-11 22:02 - 2020-10-28 18:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2021-01-11 11:31 - 2019-12-07 10:14 - 000000000 __RSD C:\WINDOWS\Media
2021-01-11 11:31 - 2018-01-24 21:22 - 000000000 ____D C:\Program Files (x86)\Canon
2021-01-11 11:31 - 2017-03-05 16:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2021-01-11 11:27 - 2018-02-10 12:51 - 000000000 ____D C:\ProgramData\CanonIJPLM
2021-01-11 11:11 - 2020-09-06 12:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2021-01-11 11:05 - 2018-07-16 11:37 - 000000000 ____D C:\Users\coeur\AppData\Local\D3DSCache
2021-01-09 09:36 - 2020-07-27 23:54 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-01-08 18:52 - 2017-05-03 15:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2021-01-07 21:52 - 2020-08-17 09:47 - 000002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2021-01-07 19:28 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-01-07 19:28 - 2017-11-18 14:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2021-01-07 19:20 - 2018-07-11 21:07 - 000000000 ____D C:\Users\coeur\AppData\Local\AVAST Software
2021-01-07 19:20 - 2018-01-24 22:45 - 000000000 ____D C:\Program Files (x86)\Java
2021-01-07 19:20 - 2017-11-18 13:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2021-01-07 19:19 - 2018-01-24 22:46 - 000165032 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2021-01-06 21:03 - 2018-01-25 23:21 - 000000000 ____D C:\Users\coeur\AppData\Roaming\vlc
2021-01-06 20:50 - 2020-10-29 19:40 - 000002590 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2021-01-06 20:50 - 2020-10-28 18:57 - 000003924 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2021-01-06 20:50 - 2020-10-28 18:57 - 000003618 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2021-01-06 20:50 - 2020-10-28 18:57 - 000003516 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-01-06 20:50 - 2020-10-28 18:57 - 000003338 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-01-06 20:50 - 2020-10-28 18:57 - 000003292 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-01-06 20:50 - 2020-10-28 18:57 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2021-01-06 20:50 - 2020-10-28 18:57 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2021-01-06 20:50 - 2020-10-28 18:57 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3337223791-4126161863-2399500967-1001
2021-01-06 20:50 - 2020-10-28 18:57 - 000002678 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2021-01-06 20:50 - 2020-10-28 18:57 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-01-06 20:50 - 2020-10-28 18:57 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2021-01-05 21:19 - 2020-06-13 11:27 - 000000000 ____D C:\Program Files (x86)\Realtek
2021-01-05 21:19 - 2018-03-13 19:12 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-01-05 21:19 - 2017-02-10 15:54 - 000000000 ____D C:\Users\coeur\AppData\LocalLow\Mozilla
2021-01-04 13:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-01-04 13:54 - 2018-03-04 15:38 - 000000000 ____D C:\Users\coeur\AppData\Local\ElevatedDiagnostics
2020-12-30 12:07 - 2020-11-30 14:12 - 000000000 ____D C:\Program Files\Adobe
2020-12-30 12:07 - 2020-11-30 14:10 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-12-30 12:07 - 2018-01-24 21:50 - 000000000 ____D C:\ProgramData\Adobe
2020-12-30 12:07 - 2018-01-24 21:09 - 000000000 ____D C:\Users\coeur\AppData\Roaming\Adobe
2020-12-30 11:56 - 2018-01-24 21:09 - 000000000 ____D C:\Users\coeur\AppData\Local\Packages
2020-12-30 11:54 - 2020-06-17 14:53 - 000000000 ____D C:\Users\coeur\.config
2020-12-30 11:53 - 2020-06-12 15:19 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-30 11:53 - 2018-03-13 19:12 - 000000000 ____D C:\Users\coeur\AppData\Roaming\Samsung
2020-12-30 11:53 - 2018-03-13 19:12 - 000000000 ____D C:\Program Files (x86)\Samsung
2020-12-30 10:55 - 2018-05-23 20:31 - 000000000 ____D C:\Users\coeur\.android
2020-12-30 10:36 - 2018-03-13 19:12 - 000000000 ____D C:\ProgramData\Samsung
2020-12-30 10:36 - 2018-01-24 21:09 - 000000000 ____D C:\Users\coeur\AppData\Local\Publishers
2020-12-30 10:36 - 2017-03-09 15:52 - 000000000 ____D C:\Users\Public\Documents\NativeFus_Log
2020-12-30 10:36 - 2017-03-09 15:52 - 000000000 ____D C:\ProgramData\Documents\NativeFus_Log
2020-12-29 21:41 - 2020-05-14 20:04 - 000000000 ____D C:\ProgramData\Mozilla
2020-12-29 21:39 - 2018-01-25 02:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-29 21:32 - 2020-10-28 18:52 - 000002058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2020-12-29 21:32 - 2018-01-24 20:41 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-12-27 21:23 - 2018-01-25 02:29 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

==================== Fichiers à la racine de certains dossiers ========

2020-05-16 10:50 - 2020-05-16 10:50 - 000000000 _____ () C:\Users\coeur\AppData\Local\oobelibMkey.log
2021-01-10 14:49 - 2021-01-10 14:49 - 000001305 _____ () C:\Users\coeur\AppData\Local\recently-used.xbel
2021-01-12 00:48 - 2021-01-12 00:48 - 000007635 _____ () C:\Users\coeur\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================