Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-07-2021
Exécuté par Cendy (administrateur) sur DESKTOP-8789TD9 (ASUSTeK COMPUTER INC. G751JT) (14-07-2021 16:48:11)
Exécuté depuis C:\Users\Cendy\Desktop
Profils chargés: Cendy
Platform: Windows 10 Pro Version 20H2 19042.1110 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ASUS Cloud Corporation -> ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.6.4.692\AsusWSPanel.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Broadcom Corporation.) [Fichier non signé] C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\126.4.4618\QtWebEngineProcess.exe <2>
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\GUBootService.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <30>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Cendy\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12105.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Western Digital Technologies, Inc. -> ) C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe
(Western Digital Technologies, Inc. -> ) C:\Program Files\WD Desktop App\wdsync.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe <4>
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WDDiscoveryMonitor.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files\WD Desktop App\kdd.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Backup\App\WDBackupService.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-07-03] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.6.4.692\ASUSWSLoader.exe [379808 2020-10-16] (ASUS Cloud Corporation -> ASUS Cloud Corporation)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [81373696 2020-06-24] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8107808 2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [981304 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2311840 2020-03-11] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [24720 2020-05-10] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288672 2021-05-21] (IDSA Production signing key 2021 -> Intel)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44344 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [49925280 2021-06-18] (Google LLC -> )
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3586696 2019-10-07] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\MountPoints2: {c0a842bf-010a-11e9-9a46-806e6f6e6963} - "G:\WD Drive Unlock.exe" autoplay=true
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65176 2019-10-23] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-01] (Google LLC -> Google LLC)
InternetURL: C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quser.url -> URL: file:///C:/Users/Cendy/AppData/Roaming/bcdboot/quser.vbs
Startup: C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.vbs [2021-06-21] () [Fichier non signé]
BootExecute: autocheck autochk *
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A57D841-5B32-44B7-B70B-A87EBC06A5C6} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {0AEC0ADC-E009-490B-A410-12F4491DF54F} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18744 2019-04-15] (Intel(R) Software Development Products -> Intel Corporation)
Task: {0CFAF543-FFD2-47BA-8962-C07F1768613B} - System32\Tasks\GMHSkipUAC => C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe [2443064 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
Task: {1F8E4405-E4E6-4C64-9E80-E0E045465F7D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {2BBB87EA-6A7C-4FF1-A0FB-7B7F70B4E492} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3336560 2021-04-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2F6FF853-A633-451A-9BB5-D385E385912F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-29] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {376A6A41-8A5D-4890-80E3-9A6104FF5B28} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37854A4C-4233-4025-B255-675FA064A12A} - System32\Tasks\WD Device Agent Task cendy => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [717824 2020-06-24] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {3AEE38A6-DF28-4DBB-B705-B810F349BBFC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-14] (Google Inc -> Google Inc.)
Task: {3BC49379-6969-4258-BC9C-77ABA30B4A9A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118096 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {47599830-129D-4CB5-87F3-9454D5D739B8} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {563669DB-F689-4277-9F27-EA8E41F80F50} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-14] (Google Inc -> Google Inc.)
Task: {69D2A1FA-483F-457A-9D2D-45A69ED96911} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1404656 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {6E1DD7BE-D2EE-4F9D-978D-5D3BE3FF3719} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {6F7282D7-1471-4B6E-AE03-3EF85BD6DD23} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7D419F54-18E6-429E-A1C2-67DDC9988E00} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18744 2019-04-15] (Intel(R) Software Development Products -> Intel Corporation)
Task: {7E1629B9-F2EB-43FA-8610-F15873228E4B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8520448 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {8023B7A2-A539-409B-8AA2-D29D8F3C17CA} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {8E839288-2758-420C-A387-C08CC9E80451} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-2648586696-196146755-3552448316-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [24064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {917E811C-7824-4D5D-9207-0C73A0B35D43} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3965880 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {91F70ABE-1481-4C7C-A477-A36F24C05FD4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A364FB3-9055-4E2D-908B-4F6CC08F2E93} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3965880 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BB469CC-4D4C-4D70-AE22-403080F270B0} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A6AB6B6E-617F-4593-821F-9E3F302D6A51} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {ACEA46F3-553F-4C0E-84B2-0699DB9EA8F4} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B3806B97-94A3-407F-BC18-ED5E27C01ABC} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-8789TD9-Cendy => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {B3E7C49B-0A59-4AC7-AFEA-815DEB5D6B02} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {B87CAD62-EE57-4080-880F-35C59D94792D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BA40665A-2EDD-4CF1-B4DF-98985340EE94} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAB9BD0B-BE7E-45DB-8B22-2A1BF30A9A57} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BF7ECFA8-C04F-413F-9A03-E590926C4F8F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118096 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C4BEF6F0-584C-40DD-83A8-B3019B99D81B} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C56CA98C-E6D3-495E-8682-3C03F4643C55} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C772243F-CFF3-41EC-9EDA-F035208614F4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {D50AB243-4E8B-4CE3-B52D-A321AA6C5492} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1404656 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {D8109A55-F4FB-471C-A1AF-2A0312A1CE02} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3583264 2020-06-03] (Corel Corporation -> Corel Corporation)
Task: {E387E6F7-9942-42F4-ADF5-EAAE94BC856D} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4251024 2021-06-10] (OOO AMA -> Kerish Products)
Task: {E5C5FDF7-B191-4DD5-B425-75E54146603E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-29] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {F38D4AAC-9E4F-4036-9D0E-7CEB45E84206} - System32\Tasks\WD Discovery Service Task cendy => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [72704 2020-06-24] (Western Digital Technologies, Inc. -> )
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Kerish Doctor.job => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{50e2c93d-5518-4f61-82bb-461be9c91156}: [NameServer] 1.1.1.2,1.1.0.2
Tcpip\..\Interfaces\{50e2c93d-5518-4f61-82bb-461be9c91156}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\Cendy\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default [2021-07-03]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge Extension: (MEGA) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2021-07-03]
Edge Extension: (Qu'est-ce que la police - What the Font) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\diecoelgjheohinbonppbfejpgaipcnf [2020-11-22]
Edge Extension: (Convertio) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\eppjkefeiehhflmgkhdooajgbkkegpcl [2020-06-15]
Edge Extension: (Extension Trusted Shops pour Google Chrome) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\felcpnemckonbbmnoakbjgjkgokkbaeo [2021-03-21]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2021-07-03]
Edge Extension: (Amazon Assistant) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hkmnokmdbkkafgmpfhhiniclfnfpmogj [2021-07-03]
Edge Extension: (Bouton Enregistrer Pinterest) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jfcjijcigimhjjdimpghneggnegiphhh [2020-06-15]
Edge Extension: (SwagButton) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jkdkbjmbppokkkjhedmhpmdjbckelnen [2021-07-03]
Edge Extension: (Bienvenue sur Microsoft Edge) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lcnngaidpcllkbmcbcggbdldghndmbmi [2020-10-12]
Edge Extension: (Video DownloadHelper) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-07-03]
FireFox:
========
FF DefaultProfile: yv6thabp.default-1593530042152
FF ProfilePath: C:\Users\Cendy\AppData\Roaming\Mozilla\Firefox\Profiles\yv6thabp.default-1593530042152 [2021-02-26]
FF Extension: (Video DownloadHelper) - C:\Users\Cendy\AppData\Roaming\Mozilla\Firefox\Profiles\yv6thabp.default-1593530042152\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-06-30]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-10-23]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-10-22] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-10-23] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-10-22] (Adobe Inc. -> Adobe Systems)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-08-29]
Chrome:
=======
CHR Profile: C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default [2021-07-14]
CHR Notifications: Default -> hxxps://consoavenue.fr; hxxps://dblx.verentinjec.info; hxxps://drive.google.com; hxxps://echantillonsclub.os.tc; hxxps://errorkit.com; hxxps://fdj-by.accengage.net; hxxps://mail.google.com; hxxps://mp3pro.xyz; hxxps://my.pcloud.com; hxxps://redoute-by.accengage.net; hxxps://sarenza.by.wonderpush.com; hxxps://showroomprive-by.accengage.net; hxxps://toutgagner.pushcrew.com; hxxps://wp.aliexpress.com; hxxps://www.beaute-test.com; hxxps://www.lecoindestesteurs.fr; hxxps://www.minuteconso.com; hxxps://www.pinterest.fr; hxxps://www.santediscount.com; hxxps://www.selency.fr; hxxps://www.tiendeo.fr; hxxps://www.welovebeauty.fr; hxxps://www.widilo.fr; hxxps://www.wish.com
CHR Extension: (Slides) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-14]
CHR Extension: (Docs) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-14]
CHR Extension: (Google Drive) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-23]
CHR Extension: (MEGA) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2021-07-08]
CHR Extension: (YouTube) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-14]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-05-21]
CHR Extension: (Qu'est-ce que la police - What the Font) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\diecoelgjheohinbonppbfejpgaipcnf [2020-09-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-01]
CHR Extension: (Convertio) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppjkefeiehhflmgkhdooajgbkkegpcl [2019-10-30]
CHR Extension: (Sheets) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-14]
CHR Extension: (Alerte Bons Plans eBuyClub) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjjddemkcndmbbeeibicagaobbijjgmm [2021-05-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-27]
CHR Extension: (SwagButton) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngocbkfmikdgphklgmmehbjjlfgdemm [2021-06-22]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2021-07-03]
CHR Extension: (Widilo Cashback) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlcaefilcommembbekhjjkibeieffchd [2020-10-16]
CHR Extension: (IGRAAL - Cashback & codes promo) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhkepipobnjllejbafajoemahjejdcm [2021-07-08]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-26]
CHR Extension: (Coupert - Codes Promo Automatiques & Cashback) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2021-07-12]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Assistant Amazon pour Chrome) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2021-04-25]
CHR Extension: (Gmail) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-04]
CHR HKU\S-1-5-21-2648586696-196146755-3552448316-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Brave:
=======
BRA Profile: C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2020-01-24]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Adobe Acrobat) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-08]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2020-01-24]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2020-01-24]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2020-01-24]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2019-09-08]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-10-22] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 btwdins; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [396288 2006-01-17] (Broadcom Corporation.) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056656 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-03] (ESET, spol. s r.o. -> ESET)
S3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-03] (ESET, spol. s r.o. -> ESET)
R2 GUBootService; C:\Program Files (x86)\Glarysoft\Malware Hunter\GUBootService.exe [696632 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5395384 2021-07-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S3 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19256 2020-10-06] (Microsoft Windows -> Microsoft Corporation)
S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19256 2020-10-06] (Microsoft Windows -> Microsoft Corporation)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [367232 2019-06-26] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [105064 2018-08-10] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (EldoS Corporation -> /n software, Inc.)
R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [476904 2019-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
R0 DeepFrz; C:\Windows\System32\Drivers\DeepFrz.sys [242920 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R0 DfDiskLo; C:\Windows\System32\Drivers\DfDiskLo.sys [56936 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R1 DFFilter; C:\Windows\System32\Drivers\DFFilter.sys [61544 2019-03-15] (Faronics Corporation -> Faronics Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 DriversCloud_amd64; C:\Program Files\DriversCloud.com\Drivers\DriversCloud_amd64.sys [24768 2016-09-04] (Cybelsoft -> CybelSoft)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-15] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-15] (Disc Soft Ltd -> Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169368 2021-06-21] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123424 2021-06-21] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-29] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194728 2021-06-21] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43832 2021-06-21] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70184 2021-06-21] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107408 2021-06-21] (ESET, spol. s r.o. -> ESET)
R0 FarDisk; C:\Windows\System32\Drivers\FarDisk.sys [51304 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R0 FarSpace; C:\Windows\System32\Drivers\FarSpace.sys [150504 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [30720 2021-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [42976 2021-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R1 GUSBootStartup; C:\WINDOWS\System32\drivers\GUSBootStartup.sys [30696 2021-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-09-15] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45024 2018-09-20] (ExprsVPN LLC -> The OpenVPN Project)
S3 vmulti; C:\WINDOWS\System32\drivers\vmulti.sys [10752 2018-12-11] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (EldoS Corporation -> /n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429288 2020-11-18] (Microsoft Windows -> Microsoft Corporation)
R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-18] (Microsoft Windows -> Microsoft Corporation)
R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Logo Template Mega Bundle - 200 in 1 2932201 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Logo Mock-up Pack Vol 6 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Escher Ribbon FX - Module complémentaire Photoshop "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\CRENZO - FREE FONT "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\captvty-2.8.9 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\15 FREE GOLD & SILVER WATERCOLOR TEXTURES "
2021-07-14 16:41 - 2021-07-14 16:42 - 000078296 _____ C:\Users\Cendy\Desktop\Addition.txt
2021-07-14 16:40 - 2021-07-14 16:48 - 000039601 _____ C:\Users\Cendy\Desktop\FRST.txt
2021-07-14 16:38 - 2021-07-14 16:36 - 002301440 _____ (Farbar) C:\Users\Cendy\Desktop\FRST64.exe
2021-07-14 16:28 - 2021-07-14 16:37 - 000000000 ____D C:\Users\Cendy\Desktop\erreur 80070002
2021-07-14 16:11 - 2021-07-14 16:11 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-14 16:11 - 2021-07-14 16:11 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-14 16:11 - 2021-07-14 16:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-07-14 13:19 - 2021-07-14 13:19 - 004287887 _____ C:\Users\Cendy\Downloads\Diagnostics_Logs-OLK-UTC.2021.7.14.11.19.35.342.zip
2021-07-09 22:40 - 2021-07-09 22:41 - 000000000 ____D C:\Users\Cendy\Desktop\cave a vin
2021-07-08 15:58 - 2021-07-08 15:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-07-07 07:15 - 2021-07-14 16:24 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-07 06:07 - 2021-07-07 06:07 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-07 06:07 - 2021-07-07 06:07 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-07 06:07 - 2021-07-07 06:07 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-07 06:07 - 2021-07-07 06:07 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-07 06:07 - 2021-07-07 06:07 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-07 06:07 - 2021-07-07 06:07 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-07-03 10:36 - 2021-07-03 10:36 - 000406792 _____ C:\Users\Cendy\Downloads\Non confirmé 241336.crdownload
2021-07-03 10:34 - 2021-07-03 10:36 - 014138959 _____ C:\Users\Cendy\Downloads\Non confirmé 776891.crdownload
2021-07-03 02:25 - 2021-07-07 07:16 - 001369077 ____N C:\WINDOWS\Minidump\070721-18890-01.dmp
2021-07-03 02:25 - 2021-07-03 02:26 - 002284356 _____ C:\WINDOWS\Minidump\070321-1363312-01.dmp
2021-07-02 20:23 - 2021-07-02 20:23 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2648586696-196146755-3552448316-1001
2021-07-02 20:23 - 2021-07-02 20:23 - 000002417 _____ C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-06-28 21:20 - 2021-06-28 21:20 - 000001014 _____ C:\Users\Cendy\Desktop\captvty-3.0.0.65300 - Raccourci.lnk
2021-06-25 04:57 - 2021-07-03 02:25 - 1659930632 _____ C:\WINDOWS\MEMORY.DMP
2021-06-25 04:57 - 2021-06-25 04:57 - 002139644 _____ C:\WINDOWS\Minidump\062521-18343-01.dmp
2021-06-21 19:34 - 2021-06-21 19:34 - 000001002 _____ C:\Users\Cendy\Downloads\office2016.zip
2021-06-21 19:33 - 2021-06-21 19:33 - 000000163 _____ C:\Users\Cendy\Downloads\Activation Office 2016 via clé KMS.url
2021-06-21 19:28 - 2021-06-21 19:28 - 000000069 _____ C:\Users\Cendy\Downloads\Installer et activer la suite logicielle Microsoft Office 2016 livrée en version digitale - YouTube.url
2021-06-21 19:27 - 2021-06-21 19:27 - 000000198 _____ C:\Users\Cendy\Downloads\activateur microsoft office pro plus 2016 - Recherche Google.url
2021-06-21 19:27 - 2021-06-21 19:27 - 000000069 _____ C:\Users\Cendy\Downloads\comment installer office 2016+activation gratuitement - YouTube.url
2021-06-21 19:20 - 2021-06-21 19:20 - 000007253 _____ C:\Users\Cendy\Downloads\Activation.rar
2021-06-21 19:20 - 2021-06-21 19:20 - 000000000 ____D C:\Users\Cendy\Downloads\Activation
2021-06-21 19:09 - 2021-06-21 19:36 - 488009704 _____ C:\Users\Cendy\Downloads\MSProject_Pro_2016_64Bit_French-_avec_activateur-ZT.lol.rar
2021-06-21 18:59 - 2021-06-21 19:00 - 000000000 ____D C:\Users\Cendy\Downloads\Activateur durée illimitée pour Office 2010
2021-06-21 18:59 - 2021-06-21 18:59 - 000132718 _____ C:\Users\Cendy\Downloads\activateur-dur-ARCHIVE-MULTI-5ab2abb85b1fc-POUR-Tirexo.me.rar
2021-06-21 18:59 - 2021-06-21 18:59 - 000000000 ____D C:\Users\Cendy\Downloads\activateur-dur-ARCHIVE-MULTI-5ab2abb85b1fc-POUR-Tirexo.me
2021-06-21 18:54 - 2021-06-21 18:56 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\Steam
2021-06-21 18:53 - 2021-06-21 18:56 - 000000000 ____D C:\Users\Cendy\Downloads\KMSAuto Net 2016 1.5.4
2021-06-21 18:53 - 2021-06-21 18:53 - 003959528 _____ C:\Users\Cendy\Downloads\KMSAuto Net 2016 1.5.4.rar
2021-06-21 18:50 - 2021-06-21 18:50 - 000194728 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000169368 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000107408 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000070184 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000043832 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2021-06-20 18:37 - 2021-06-20 18:42 - 105044012 _____ C:\Users\Cendy\Downloads\Clara Luciani - Cœur.rar
2021-06-16 20:06 - 2021-06-16 20:06 - 000554628 _____ C:\Users\Cendy\Downloads\6b7d0de3c7a5.pdf
2021-06-16 16:44 - 2021-06-16 16:44 - 000032445 _____ C:\Users\Cendy\Downloads\FA2021-12917830.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-14 16:48 - 2019-03-14 17:41 - 000000000 ____D C:\FRST
2021-07-14 16:42 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-14 16:31 - 2020-08-29 12:22 - 001786538 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-14 16:31 - 2019-12-07 16:50 - 000798588 _____ C:\WINDOWS\system32\perfh00C.dat
2021-07-14 16:31 - 2019-12-07 16:50 - 000152186 _____ C:\WINDOWS\system32\perfc00C.dat
2021-07-14 16:26 - 2018-01-14 23:33 - 000000000 ____D C:\ProgramData\NVIDIA
2021-07-14 16:24 - 2020-08-29 12:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-14 16:24 - 2020-08-29 12:12 - 003411496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-14 16:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-14 16:24 - 2018-01-20 11:37 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\WD Discovery
2021-07-14 16:24 - 2018-01-20 11:37 - 000000000 ____D C:\Users\Cendy\.wdc
2021-07-14 16:24 - 2018-01-14 23:22 - 000000000 ___RD C:\Users\Cendy\OneDrive
2021-07-14 16:23 - 2020-08-29 12:13 - 000000000 ____D C:\Users\Cendy
2021-07-14 16:23 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-14 16:23 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-07-14 16:21 - 2020-08-29 12:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-14 16:13 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-14 16:06 - 2018-01-15 00:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-07-14 16:03 - 2018-01-15 00:52 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-07-13 21:36 - 2020-10-22 22:20 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-07-13 11:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-13 11:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-12 22:47 - 2018-08-14 18:21 - 000000000 ___RD C:\Users\Cendy\Creative Cloud Files
2021-07-11 15:28 - 2018-01-14 23:20 - 000000000 ____D C:\Users\Cendy\AppData\Local\Packages
2021-07-10 11:45 - 2020-06-15 15:55 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-07-09 05:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-07-08 15:58 - 2018-12-14 20:06 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-07-07 07:16 - 2020-09-09 06:34 - 000000000 ____D C:\WINDOWS\Minidump
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-06 16:12 - 2018-01-14 23:38 - 000000000 ____D C:\Users\Cendy\Documents\Adobe
2021-07-06 16:06 - 2019-02-09 10:45 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\vlc
2021-07-04 13:48 - 2020-09-13 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2021-07-03 18:38 - 2018-01-14 23:20 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\Adobe
2021-07-03 02:31 - 2020-12-10 07:28 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\ASUS WebStorage
2021-07-03 02:25 - 2018-01-15 00:47 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-07-01 07:02 - 2020-11-23 22:21 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-06-28 21:17 - 2021-05-13 22:01 - 000000000 ____D C:\Users\Cendy\Downloads\captvty-2.9.3.2
2021-06-26 19:57 - 2021-03-23 21:03 - 000000000 ____D C:\Users\Cendy\Downloads\captvty-2.9.2.1
2021-06-26 10:09 - 2020-08-29 12:21 - 000003398 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-06-26 05:05 - 2020-08-29 12:21 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-06-25 04:57 - 2018-12-14 20:06 - 000001216 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-06-25 04:57 - 2018-12-14 20:06 - 000001212 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2021-06-23 21:25 - 2020-08-29 12:21 - 000004276 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-06-23 21:25 - 2020-08-29 12:21 - 000004046 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2021-06-21 18:50 - 2020-07-06 10:34 - 000123424 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2021-06-19 08:53 - 2018-01-14 23:38 - 000000000 ____D C:\Users\Cendy\AppData\Local\PlaceholderTileLogoFolder
2021-06-18 05:19 - 2021-02-20 16:38 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-17 19:45 - 2021-04-28 17:05 - 000000000 ____D C:\Users\Cendy\Desktop\IMAGES NINNIE
==================== Fichiers à la racine de certains dossiers ========
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\asv2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\cld2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\dys2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000020 ____H () C:\Program Files (x86)\Common Files\inq1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ins1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\mir1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\pcs4-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\rst1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\spl1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ssd1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\sty1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\txt1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\vfa2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\vs3-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ws2-astg
2019-07-07 12:13 - 2019-07-07 12:13 - 000000033 _____ () C:\Users\Cendy\AppData\Roaming\AdobeWLCMCache.dat
2018-08-23 20:56 - 2018-08-23 20:56 - 000000112 _____ () C:\Users\Cendy\AppData\Roaming\Préfs JP2K CS6
2018-09-28 19:24 - 2018-09-28 19:24 - 000000000 _____ () C:\Users\Cendy\AppData\Local\oobelibMkey.log
2020-08-28 23:23 - 2020-08-28 23:26 - 000007608 _____ () C:\Users\Cendy\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Cendy (administrateur) sur DESKTOP-8789TD9 (ASUSTeK COMPUTER INC. G751JT) (14-07-2021 16:48:11)
Exécuté depuis C:\Users\Cendy\Desktop
Profils chargés: Cendy
Platform: Windows 10 Pro Version 20H2 19042.1110 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ASUS Cloud Corporation -> ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.6.4.692\AsusWSPanel.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Broadcom Corporation.) [Fichier non signé] C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\126.4.4618\QtWebEngineProcess.exe <2>
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\GUBootService.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <30>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key 2021 -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Cendy\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12105.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Western Digital Technologies, Inc. -> ) C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe
(Western Digital Technologies, Inc. -> ) C:\Program Files\WD Desktop App\wdsync.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe <4>
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WDDiscoveryMonitor.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files\WD Desktop App\kdd.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Backup\App\WDBackupService.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-07-03] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.6.4.692\ASUSWSLoader.exe [379808 2020-10-16] (ASUS Cloud Corporation -> ASUS Cloud Corporation)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [81373696 2020-06-24] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8107808 2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [981304 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2311840 2020-03-11] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [24720 2020-05-10] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288672 2021-05-21] (IDSA Production signing key 2021 -> Intel)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44344 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [49925280 2021-06-18] (Google LLC -> )
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3586696 2019-10-07] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-2648586696-196146755-3552448316-1001\...\MountPoints2: {c0a842bf-010a-11e9-9a46-806e6f6e6963} - "G:\WD Drive Unlock.exe" autoplay=true
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65176 2019-10-23] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-01] (Google LLC -> Google LLC)
InternetURL: C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quser.url -> URL: file:///C:/Users/Cendy/AppData/Roaming/bcdboot/quser.vbs
Startup: C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.vbs [2021-06-21] () [Fichier non signé]
BootExecute: autocheck autochk *
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A57D841-5B32-44B7-B70B-A87EBC06A5C6} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {0AEC0ADC-E009-490B-A410-12F4491DF54F} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18744 2019-04-15] (Intel(R) Software Development Products -> Intel Corporation)
Task: {0CFAF543-FFD2-47BA-8962-C07F1768613B} - System32\Tasks\GMHSkipUAC => C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe [2443064 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
Task: {1F8E4405-E4E6-4C64-9E80-E0E045465F7D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {2BBB87EA-6A7C-4FF1-A0FB-7B7F70B4E492} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3336560 2021-04-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2F6FF853-A633-451A-9BB5-D385E385912F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-29] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {376A6A41-8A5D-4890-80E3-9A6104FF5B28} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37854A4C-4233-4025-B255-675FA064A12A} - System32\Tasks\WD Device Agent Task cendy => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [717824 2020-06-24] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {3AEE38A6-DF28-4DBB-B705-B810F349BBFC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-14] (Google Inc -> Google Inc.)
Task: {3BC49379-6969-4258-BC9C-77ABA30B4A9A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118096 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {47599830-129D-4CB5-87F3-9454D5D739B8} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {563669DB-F689-4277-9F27-EA8E41F80F50} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-14] (Google Inc -> Google Inc.)
Task: {69D2A1FA-483F-457A-9D2D-45A69ED96911} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1404656 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {6E1DD7BE-D2EE-4F9D-978D-5D3BE3FF3719} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {6F7282D7-1471-4B6E-AE03-3EF85BD6DD23} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7D419F54-18E6-429E-A1C2-67DDC9988E00} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18744 2019-04-15] (Intel(R) Software Development Products -> Intel Corporation)
Task: {7E1629B9-F2EB-43FA-8610-F15873228E4B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8520448 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {8023B7A2-A539-409B-8AA2-D29D8F3C17CA} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {8E839288-2758-420C-A387-C08CC9E80451} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-2648586696-196146755-3552448316-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [24064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {917E811C-7824-4D5D-9207-0C73A0B35D43} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3965880 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {91F70ABE-1481-4C7C-A477-A36F24C05FD4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A364FB3-9055-4E2D-908B-4F6CC08F2E93} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3965880 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BB469CC-4D4C-4D70-AE22-403080F270B0} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A6AB6B6E-617F-4593-821F-9E3F302D6A51} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {ACEA46F3-553F-4C0E-84B2-0699DB9EA8F4} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B3806B97-94A3-407F-BC18-ED5E27C01ABC} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-8789TD9-Cendy => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {B3E7C49B-0A59-4AC7-AFEA-815DEB5D6B02} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {B87CAD62-EE57-4080-880F-35C59D94792D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BA40665A-2EDD-4CF1-B4DF-98985340EE94} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAB9BD0B-BE7E-45DB-8B22-2A1BF30A9A57} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905584 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BF7ECFA8-C04F-413F-9A03-E590926C4F8F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [118096 2021-07-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C4BEF6F0-584C-40DD-83A8-B3019B99D81B} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1260400 2021-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C56CA98C-E6D3-495E-8682-3C03F4643C55} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C772243F-CFF3-41EC-9EDA-F035208614F4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23180168 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {D50AB243-4E8B-4CE3-B52D-A321AA6C5492} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1404656 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {D8109A55-F4FB-471C-A1AF-2A0312A1CE02} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3583264 2020-06-03] (Corel Corporation -> Corel Corporation)
Task: {E387E6F7-9942-42F4-ADF5-EAAE94BC856D} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4251024 2021-06-10] (OOO AMA -> Kerish Products)
Task: {E5C5FDF7-B191-4DD5-B425-75E54146603E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-29] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {F38D4AAC-9E4F-4036-9D0E-7CEB45E84206} - System32\Tasks\WD Discovery Service Task cendy => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [72704 2020-06-24] (Western Digital Technologies, Inc. -> )
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Kerish Doctor.job => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{50e2c93d-5518-4f61-82bb-461be9c91156}: [NameServer] 1.1.1.2,1.1.0.2
Tcpip\..\Interfaces\{50e2c93d-5518-4f61-82bb-461be9c91156}: [DhcpNameServer] 192.168.1.1
Edge:
=======
DownloadDir: C:\Users\Cendy\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default [2021-07-03]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge Extension: (MEGA) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2021-07-03]
Edge Extension: (Qu'est-ce que la police - What the Font) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\diecoelgjheohinbonppbfejpgaipcnf [2020-11-22]
Edge Extension: (Convertio) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\eppjkefeiehhflmgkhdooajgbkkegpcl [2020-06-15]
Edge Extension: (Extension Trusted Shops pour Google Chrome) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\felcpnemckonbbmnoakbjgjkgokkbaeo [2021-03-21]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2021-07-03]
Edge Extension: (Amazon Assistant) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hkmnokmdbkkafgmpfhhiniclfnfpmogj [2021-07-03]
Edge Extension: (Bouton Enregistrer Pinterest) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jfcjijcigimhjjdimpghneggnegiphhh [2020-06-15]
Edge Extension: (SwagButton) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jkdkbjmbppokkkjhedmhpmdjbckelnen [2021-07-03]
Edge Extension: (Bienvenue sur Microsoft Edge) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lcnngaidpcllkbmcbcggbdldghndmbmi [2020-10-12]
Edge Extension: (Video DownloadHelper) - C:\Users\Cendy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-07-03]
FireFox:
========
FF DefaultProfile: yv6thabp.default-1593530042152
FF ProfilePath: C:\Users\Cendy\AppData\Roaming\Mozilla\Firefox\Profiles\yv6thabp.default-1593530042152 [2021-02-26]
FF Extension: (Video DownloadHelper) - C:\Users\Cendy\AppData\Roaming\Mozilla\Firefox\Profiles\yv6thabp.default-1593530042152\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-06-30]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-10-23]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-10-22] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-10-23] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-10-22] (Adobe Inc. -> Adobe Systems)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-08-29]
Chrome:
=======
CHR Profile: C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default [2021-07-14]
CHR Notifications: Default -> hxxps://consoavenue.fr; hxxps://dblx.verentinjec.info; hxxps://drive.google.com; hxxps://echantillonsclub.os.tc; hxxps://errorkit.com; hxxps://fdj-by.accengage.net; hxxps://mail.google.com; hxxps://mp3pro.xyz; hxxps://my.pcloud.com; hxxps://redoute-by.accengage.net; hxxps://sarenza.by.wonderpush.com; hxxps://showroomprive-by.accengage.net; hxxps://toutgagner.pushcrew.com; hxxps://wp.aliexpress.com; hxxps://www.beaute-test.com; hxxps://www.lecoindestesteurs.fr; hxxps://www.minuteconso.com; hxxps://www.pinterest.fr; hxxps://www.santediscount.com; hxxps://www.selency.fr; hxxps://www.tiendeo.fr; hxxps://www.welovebeauty.fr; hxxps://www.widilo.fr; hxxps://www.wish.com
CHR Extension: (Slides) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-14]
CHR Extension: (Docs) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-14]
CHR Extension: (Google Drive) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-23]
CHR Extension: (MEGA) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2021-07-08]
CHR Extension: (YouTube) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-14]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-05-21]
CHR Extension: (Qu'est-ce que la police - What the Font) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\diecoelgjheohinbonppbfejpgaipcnf [2020-09-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-01]
CHR Extension: (Convertio) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppjkefeiehhflmgkhdooajgbkkegpcl [2019-10-30]
CHR Extension: (Sheets) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-14]
CHR Extension: (Alerte Bons Plans eBuyClub) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjjddemkcndmbbeeibicagaobbijjgmm [2021-05-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-27]
CHR Extension: (SwagButton) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngocbkfmikdgphklgmmehbjjlfgdemm [2021-06-22]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2021-07-03]
CHR Extension: (Widilo Cashback) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlcaefilcommembbekhjjkibeieffchd [2020-10-16]
CHR Extension: (IGRAAL - Cashback & codes promo) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhkepipobnjllejbafajoemahjejdcm [2021-07-08]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-26]
CHR Extension: (Coupert - Codes Promo Automatiques & Cashback) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2021-07-12]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Assistant Amazon pour Chrome) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2021-04-25]
CHR Extension: (Gmail) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Cendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-04]
CHR HKU\S-1-5-21-2648586696-196146755-3552448316-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Brave:
=======
BRA Profile: C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2020-01-24]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Adobe Acrobat) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-08]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2020-01-24]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2020-01-24]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2020-01-24]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Cendy\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2019-09-08]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-10-22] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 btwdins; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [396288 2006-01-17] (Broadcom Corporation.) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056656 2021-06-28] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-12-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-03] (ESET, spol. s r.o. -> ESET)
S3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-03] (ESET, spol. s r.o. -> ESET)
R2 GUBootService; C:\Program Files (x86)\Glarysoft\Malware Hunter\GUBootService.exe [696632 2021-02-07] (Glarysoft LTD -> Glarysoft Ltd)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5395384 2021-07-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S3 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S3 WD Backup Drive Helper; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B} [19256 2020-10-06] (Microsoft Windows -> Microsoft Corporation)
S3 WD Backup Snapshot; C:\WINDOWS\SysWOW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD} [19256 2020-10-06] (Microsoft Windows -> Microsoft Corporation)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [367232 2019-06-26] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [105064 2018-08-10] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-09] (EldoS Corporation -> /n software, Inc.)
R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [476904 2019-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
R0 DeepFrz; C:\Windows\System32\Drivers\DeepFrz.sys [242920 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R0 DfDiskLo; C:\Windows\System32\Drivers\DfDiskLo.sys [56936 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R1 DFFilter; C:\Windows\System32\Drivers\DFFilter.sys [61544 2019-03-15] (Faronics Corporation -> Faronics Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 DriversCloud_amd64; C:\Program Files\DriversCloud.com\Drivers\DriversCloud_amd64.sys [24768 2016-09-04] (Cybelsoft -> CybelSoft)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-15] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-15] (Disc Soft Ltd -> Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169368 2021-06-21] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123424 2021-06-21] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-29] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194728 2021-06-21] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43832 2021-06-21] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70184 2021-06-21] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107408 2021-06-21] (ESET, spol. s r.o. -> ESET)
R0 FarDisk; C:\Windows\System32\Drivers\FarDisk.sys [51304 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R0 FarSpace; C:\Windows\System32\Drivers\FarSpace.sys [150504 2019-03-15] (Faronics Corporation -> Faronics Corporation)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [30720 2021-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [42976 2021-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R1 GUSBootStartup; C:\WINDOWS\System32\drivers\GUSBootStartup.sys [30696 2021-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-09-15] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45024 2018-09-20] (ExprsVPN LLC -> The OpenVPN Project)
S3 vmulti; C:\WINDOWS\System32\drivers\vmulti.sys [10752 2018-12-11] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-09] (EldoS Corporation -> /n software, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429288 2020-11-18] (Microsoft Windows -> Microsoft Corporation)
R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-18] (Microsoft Windows -> Microsoft Corporation)
R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Logo Template Mega Bundle - 200 in 1 2932201 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Logo Mock-up Pack Vol 6 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\Escher Ribbon FX - Module complémentaire Photoshop "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\CRENZO - FREE FONT "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\captvty-2.8.9 "
Erreur lors de la lecture du fichier: "C:\Users\Cendy\Downloads\15 FREE GOLD & SILVER WATERCOLOR TEXTURES "
2021-07-14 16:41 - 2021-07-14 16:42 - 000078296 _____ C:\Users\Cendy\Desktop\Addition.txt
2021-07-14 16:40 - 2021-07-14 16:48 - 000039601 _____ C:\Users\Cendy\Desktop\FRST.txt
2021-07-14 16:38 - 2021-07-14 16:36 - 002301440 _____ (Farbar) C:\Users\Cendy\Desktop\FRST64.exe
2021-07-14 16:28 - 2021-07-14 16:37 - 000000000 ____D C:\Users\Cendy\Desktop\erreur 80070002
2021-07-14 16:11 - 2021-07-14 16:11 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-14 16:11 - 2021-07-14 16:11 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-14 16:11 - 2021-07-14 16:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-07-14 16:11 - 2021-07-14 16:11 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-07-14 13:19 - 2021-07-14 13:19 - 004287887 _____ C:\Users\Cendy\Downloads\Diagnostics_Logs-OLK-UTC.2021.7.14.11.19.35.342.zip
2021-07-09 22:40 - 2021-07-09 22:41 - 000000000 ____D C:\Users\Cendy\Desktop\cave a vin
2021-07-08 15:58 - 2021-07-08 15:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-07-07 07:15 - 2021-07-14 16:24 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-07 06:07 - 2021-07-07 06:07 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-07 06:07 - 2021-07-07 06:07 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-07 06:07 - 2021-07-07 06:07 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-07 06:07 - 2021-07-07 06:07 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-07 06:07 - 2021-07-07 06:07 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-07 06:07 - 2021-07-07 06:07 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-07 06:07 - 2021-07-07 06:07 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-07-03 12:58 - 2021-07-03 12:58 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-07-03 10:36 - 2021-07-03 10:36 - 000406792 _____ C:\Users\Cendy\Downloads\Non confirmé 241336.crdownload
2021-07-03 10:34 - 2021-07-03 10:36 - 014138959 _____ C:\Users\Cendy\Downloads\Non confirmé 776891.crdownload
2021-07-03 02:25 - 2021-07-07 07:16 - 001369077 ____N C:\WINDOWS\Minidump\070721-18890-01.dmp
2021-07-03 02:25 - 2021-07-03 02:26 - 002284356 _____ C:\WINDOWS\Minidump\070321-1363312-01.dmp
2021-07-02 20:23 - 2021-07-02 20:23 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2648586696-196146755-3552448316-1001
2021-07-02 20:23 - 2021-07-02 20:23 - 000002417 _____ C:\Users\Cendy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-06-28 21:20 - 2021-06-28 21:20 - 000001014 _____ C:\Users\Cendy\Desktop\captvty-3.0.0.65300 - Raccourci.lnk
2021-06-25 04:57 - 2021-07-03 02:25 - 1659930632 _____ C:\WINDOWS\MEMORY.DMP
2021-06-25 04:57 - 2021-06-25 04:57 - 002139644 _____ C:\WINDOWS\Minidump\062521-18343-01.dmp
2021-06-21 19:34 - 2021-06-21 19:34 - 000001002 _____ C:\Users\Cendy\Downloads\office2016.zip
2021-06-21 19:33 - 2021-06-21 19:33 - 000000163 _____ C:\Users\Cendy\Downloads\Activation Office 2016 via clé KMS.url
2021-06-21 19:28 - 2021-06-21 19:28 - 000000069 _____ C:\Users\Cendy\Downloads\Installer et activer la suite logicielle Microsoft Office 2016 livrée en version digitale - YouTube.url
2021-06-21 19:27 - 2021-06-21 19:27 - 000000198 _____ C:\Users\Cendy\Downloads\activateur microsoft office pro plus 2016 - Recherche Google.url
2021-06-21 19:27 - 2021-06-21 19:27 - 000000069 _____ C:\Users\Cendy\Downloads\comment installer office 2016+activation gratuitement - YouTube.url
2021-06-21 19:20 - 2021-06-21 19:20 - 000007253 _____ C:\Users\Cendy\Downloads\Activation.rar
2021-06-21 19:20 - 2021-06-21 19:20 - 000000000 ____D C:\Users\Cendy\Downloads\Activation
2021-06-21 19:09 - 2021-06-21 19:36 - 488009704 _____ C:\Users\Cendy\Downloads\MSProject_Pro_2016_64Bit_French-_avec_activateur-ZT.lol.rar
2021-06-21 18:59 - 2021-06-21 19:00 - 000000000 ____D C:\Users\Cendy\Downloads\Activateur durée illimitée pour Office 2010
2021-06-21 18:59 - 2021-06-21 18:59 - 000132718 _____ C:\Users\Cendy\Downloads\activateur-dur-ARCHIVE-MULTI-5ab2abb85b1fc-POUR-Tirexo.me.rar
2021-06-21 18:59 - 2021-06-21 18:59 - 000000000 ____D C:\Users\Cendy\Downloads\activateur-dur-ARCHIVE-MULTI-5ab2abb85b1fc-POUR-Tirexo.me
2021-06-21 18:54 - 2021-06-21 18:56 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\Steam
2021-06-21 18:53 - 2021-06-21 18:56 - 000000000 ____D C:\Users\Cendy\Downloads\KMSAuto Net 2016 1.5.4
2021-06-21 18:53 - 2021-06-21 18:53 - 003959528 _____ C:\Users\Cendy\Downloads\KMSAuto Net 2016 1.5.4.rar
2021-06-21 18:50 - 2021-06-21 18:50 - 000194728 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000169368 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000107408 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000070184 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2021-06-21 18:50 - 2021-06-21 18:50 - 000043832 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2021-06-20 18:37 - 2021-06-20 18:42 - 105044012 _____ C:\Users\Cendy\Downloads\Clara Luciani - Cœur.rar
2021-06-16 20:06 - 2021-06-16 20:06 - 000554628 _____ C:\Users\Cendy\Downloads\6b7d0de3c7a5.pdf
2021-06-16 16:44 - 2021-06-16 16:44 - 000032445 _____ C:\Users\Cendy\Downloads\FA2021-12917830.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-07-14 16:48 - 2019-03-14 17:41 - 000000000 ____D C:\FRST
2021-07-14 16:42 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-14 16:31 - 2020-08-29 12:22 - 001786538 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-14 16:31 - 2019-12-07 16:50 - 000798588 _____ C:\WINDOWS\system32\perfh00C.dat
2021-07-14 16:31 - 2019-12-07 16:50 - 000152186 _____ C:\WINDOWS\system32\perfc00C.dat
2021-07-14 16:26 - 2018-01-14 23:33 - 000000000 ____D C:\ProgramData\NVIDIA
2021-07-14 16:24 - 2020-08-29 12:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-14 16:24 - 2020-08-29 12:12 - 003411496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-14 16:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-14 16:24 - 2018-01-20 11:37 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\WD Discovery
2021-07-14 16:24 - 2018-01-20 11:37 - 000000000 ____D C:\Users\Cendy\.wdc
2021-07-14 16:24 - 2018-01-14 23:22 - 000000000 ___RD C:\Users\Cendy\OneDrive
2021-07-14 16:23 - 2020-08-29 12:13 - 000000000 ____D C:\Users\Cendy
2021-07-14 16:23 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-14 16:23 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-14 16:23 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-07-14 16:21 - 2020-08-29 12:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-14 16:13 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-14 16:06 - 2018-01-15 00:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-07-14 16:03 - 2018-01-15 00:52 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-07-13 21:36 - 2020-10-22 22:20 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-07-13 11:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-13 11:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-12 22:47 - 2018-08-14 18:21 - 000000000 ___RD C:\Users\Cendy\Creative Cloud Files
2021-07-11 15:28 - 2018-01-14 23:20 - 000000000 ____D C:\Users\Cendy\AppData\Local\Packages
2021-07-10 11:45 - 2020-06-15 15:55 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-07-09 05:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-07-08 15:58 - 2018-12-14 20:06 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-07-07 07:16 - 2020-09-09 06:34 - 000000000 ____D C:\WINDOWS\Minidump
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-07 07:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-06 16:12 - 2018-01-14 23:38 - 000000000 ____D C:\Users\Cendy\Documents\Adobe
2021-07-06 16:06 - 2019-02-09 10:45 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\vlc
2021-07-04 13:48 - 2020-09-13 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2021-07-03 18:38 - 2018-01-14 23:20 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\Adobe
2021-07-03 02:31 - 2020-12-10 07:28 - 000000000 ____D C:\Users\Cendy\AppData\Roaming\ASUS WebStorage
2021-07-03 02:25 - 2018-01-15 00:47 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-07-01 07:02 - 2020-11-23 22:21 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-06-28 21:17 - 2021-05-13 22:01 - 000000000 ____D C:\Users\Cendy\Downloads\captvty-2.9.3.2
2021-06-26 19:57 - 2021-03-23 21:03 - 000000000 ____D C:\Users\Cendy\Downloads\captvty-2.9.2.1
2021-06-26 10:09 - 2020-08-29 12:21 - 000003398 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-06-26 05:05 - 2020-08-29 12:21 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-06-25 04:57 - 2018-12-14 20:06 - 000001216 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-06-25 04:57 - 2018-12-14 20:06 - 000001212 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2021-06-23 21:25 - 2020-08-29 12:21 - 000004276 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-06-23 21:25 - 2020-08-29 12:21 - 000004046 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2021-06-21 18:50 - 2020-07-06 10:34 - 000123424 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2021-06-19 08:53 - 2018-01-14 23:38 - 000000000 ____D C:\Users\Cendy\AppData\Local\PlaceholderTileLogoFolder
2021-06-18 05:19 - 2021-02-20 16:38 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-17 19:45 - 2021-04-28 17:05 - 000000000 ____D C:\Users\Cendy\Desktop\IMAGES NINNIE
==================== Fichiers à la racine de certains dossiers ========
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\asv2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\cld2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\dys2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000020 ____H () C:\Program Files (x86)\Common Files\inq1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ins1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\mir1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\pcs4-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\rst1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\spl1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ssd1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\sty1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\txt1-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\vfa2-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\vs3-astg
2018-11-16 18:52 - 2018-11-16 18:52 - 000000016 ____H () C:\Program Files (x86)\Common Files\ws2-astg
2019-07-07 12:13 - 2019-07-07 12:13 - 000000033 _____ () C:\Users\Cendy\AppData\Roaming\AdobeWLCMCache.dat
2018-08-23 20:56 - 2018-08-23 20:56 - 000000112 _____ () C:\Users\Cendy\AppData\Roaming\Préfs JP2K CS6
2018-09-28 19:24 - 2018-09-28 19:24 - 000000000 _____ () C:\Users\Cendy\AppData\Local\oobelibMkey.log
2020-08-28 23:23 - 2020-08-28 23:26 - 000007608 _____ () C:\Users\Cendy\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================