Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-08-2021
Exécuté par PHEPHER (administrateur) sur DESKTOP-E4H5NSL (ASUSTeK COMPUTER INC. X756UQK) (21-08-2021 07:17:50)
Exécuté depuis C:\Users\PHEPHER\Downloads
Profils chargés: PHEPHER
Platform: Windows 10 Home Version 21H1 19043.1165 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Conexant Systems LLC -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <19>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe
(Greatis Software LLC -> Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe
(ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHeciSvc.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe <2>
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [604496 2017-11-24] (Conexant Systems LLC -> Conexant Systems, Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [Fichier non signé]
HKU\S-1-5-21-226898909-1936610168-3599806186-1001\...\Run: [76A2FD341AF3061B341D3AEE49DB46657F044944._service_run] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service /prefetch:8
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-16] (Google LLC -> Google LLC)
BootExecute: autocheck autochk * Partizan
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {018BAE23-3CD4-42AE-AE89-C7D1A67E88CE} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [Fichier non signé]
Task: {03A7FF9E-F119-41A8-8E11-FC249645B594} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1546112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {04535B88-40DF-4E9A-BD00-12A4F60E62D8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0E0BED33-0066-4730-B89D-97C3C9FAED6A} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {0F6724DA-83E3-4AA5-9C49-41152119524F} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> Pas de fichier <==== ATTENTION
Task: {10E5B95C-D208-4238-B0BD-9AB286F1057D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [855352 2016-02-19] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {15FF2F7D-0C7A-4621-8471-F777D2FE5025} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {19222844-F750-415A-92AE-3902C1F46962} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {2C508260-280F-44C5-A6B3-5A1FDCA7BC53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C8E83F2-44A4-4127-9395-2A8F22D2FA2D} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [4876640 2021-08-04] (Greatis Software LLC -> Greatis Software)
Task: {2F6D8F29-BD56-4EC9-B33B-AFC232AF4F7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.)
Task: {2FBB0F24-8FE8-4307-9AA4-39268856A9ED} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {31770768-48F5-4485-9973-E27D46B0749C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19786024 2016-02-23] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
Task: {47F7C279-A84B-4C2A-9D57-1B1E2643D234} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B2F862D-AD5F-487B-A99E-C5866BA827D4} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> Pas de fichier <==== ATTENTION
Task: {4B9B1E3E-EFE4-4339-A88B-0012F1FCB68F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.)
Task: {4FA50D8D-3738-45BA-8C4F-71129238A242} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {507686E0-0259-49F0-9564-D827CE566842} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {52A3A4C5-5E56-42FC-A0B5-C105805F5CC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5E32186C-2482-4FD1-9E5C-564C246266C7} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {5F95701C-B027-4C2C-9CE1-4A18D20113AB} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5F98BDF9-A63D-40EB-BD12-2AEFECE65BDA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> Pas de fichier <==== ATTENTION
Task: {6258EB10-CF83-4987-8C44-B51D6EF7E41B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {634CD8D0-31C9-468D-91F0-BBE4CA3336B9} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {65C55535-1151-45CD-92C7-9C5DD85538B5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {76BC38FD-C8AA-4FB1-9958-1523347D66C0} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7F479F5A-9663-46B2-8BD9-0C4F0F1765F9} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {831AD955-8F4F-4681-BA8D-BB566F3AF8C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> Pas de fichier <==== ATTENTION
Task: {92FDA719-CD80-489C-B745-BA875EA7568D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BB41B311-F955-4B58-AEBE-A5EB9015D3C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> Pas de fichier <==== ATTENTION
Task: {C2E2189A-7B92-4C7F-A7CB-9CE64E0ACBBD} - System32\Tasks\ViGEmBusUpdater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
Task: {CC5604C4-F34A-4786-A921-7454014FBDA9} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Pas de fichier <==== ATTENTION
Task: {CE1C1AF7-A135-47D2-BD62-3FD3D259F22B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E3789123-8E65-469D-9B64-B5E7642B3BE0} - System32\Tasks\AdwCleaner_onReboot => C:\Users\PHEPHER\Downloads\adwcleaner_8.0.6.exe
Task: {E8EBDE1D-05ED-4F57-A9DB-D9D8FD81F831} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {EEDB3F56-2E5D-4184-86BE-29EBA989DD8D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F7957C70-3970-4491-8C98-E4680C13A491} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{4d5f34d2-3eea-4ee1-a79e-2351414d7160}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{92ae2b3c-81d4-4f28-b81a-99255f648a1e}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{a80d89a6-da4c-4a9e-b416-988d8d3ee3c9}: [DhcpNameServer] 192.168.0.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge Profile: C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-21]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-02-21]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default [2021-08-21]
CHR Notifications: Default -> hxxps://psprices.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://encrypted.google.com"
CHR DefaultSearchKeyword: Default -> google.com_
CHR Extension: (Google Traduction) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-14]
CHR Extension: (Slides) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-19]
CHR Extension: (Docs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-19]
CHR Extension: (Google Drive) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (WOT pour la sécurité des sites Web et une navigation sûre) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2021-08-05]
CHR Extension: (YouTube) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-19]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-07-28]
CHR Extension: (Adblock pour Youtube™) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2021-05-19]
CHR Extension: (Search by Image (by Google)) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2019-06-02]
CHR Extension: (Tampermonkey) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-05-31]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2017-12-19]
CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2021-07-17]
CHR Extension: (Sheets) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-19]
CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2020-03-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-25]
CHR Extension: (Vysor) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2020-09-05]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-08-12]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-08-12]
CHR Extension: (iGVault) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodndogomnfgmbapagempdcobhmjfbho [2020-10-04]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-22]
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-05-06]
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\System Profile [2020-05-06]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9142128 2021-08-05] (Microsoft Corporation -> Microsoft Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7477704 2021-07-17] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2523448 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3478336 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1705088 2020-06-07] (Rockstar Games, Inc. -> Rockstar Games)
S3 ViGEmBusUpdater; C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe [2727416 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe [136656 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [22656 2016-02-23] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AsusSGDrv; C:\WINDOWS\System32\drivers\AsusSGDrv.sys [140032 2019-08-19] (ASUSTek Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] (FarStone Technology -> ) [Fichier non signé]
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-23] (Malwarebytes Inc -> Malwarebytes)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-08-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-08-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [78072 2021-08-04] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl22274447; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3BC6154A-13D3-4EB8-8906-C9BE04AC0D6B}\MpKslDrv.sys [X]
U0 Partizan; system32\drivers\Partizan.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-21 07:17 - 2021-08-21 07:20 - 000027769 _____ C:\Users\PHEPHER\Downloads\FRST.txt
2021-08-21 07:16 - 2021-08-21 07:20 - 000000000 ____D C:\FRST
2021-08-21 07:15 - 2021-08-21 07:15 - 002300416 _____ (Farbar) C:\Users\PHEPHER\Downloads\FRST64.exe
2021-08-21 06:40 - 2021-08-21 06:40 - 002592317 _____ C:\Users\PHEPHER\Downloads\Autoruns.zip
2021-08-21 06:32 - 2021-08-21 06:32 - 000002146 _____ C:\Users\PHEPHER\Desktop\VirusTotal Uploader 2.2.lnk
2021-08-21 06:32 - 2021-08-21 06:32 - 000000000 ____D C:\Program Files (x86)\VirusTotalUploader2
2021-08-21 06:31 - 2021-08-21 06:31 - 000142744 _____ C:\Users\PHEPHER\Downloads\vtuploader2.2.exe
2021-08-21 06:02 - 2021-08-21 06:02 - 000000714 _____ C:\WINDOWS\SysWOW64\PARTIZAN.TXT
2021-08-20 20:10 - 2021-08-21 06:28 - 000000000 ____D C:\Users\PHEPHER\Documents\RegRun2
2021-08-20 20:10 - 2021-08-21 06:27 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo
2021-08-20 20:10 - 2021-08-21 06:17 - 000003424 _____ C:\WINDOWS\system32\Tasks\UnHackMe Task Scheduler
2021-08-20 20:10 - 2021-08-21 06:16 - 000001078 _____ C:\Users\PHEPHER\Desktop\UnHackMe.lnk
2021-08-20 20:09 - 2021-08-21 06:23 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2021-08-20 20:09 - 2021-08-21 06:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2021-08-20 20:09 - 2020-11-11 14:39 - 000016184 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys
2021-08-20 20:09 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe
2021-08-20 20:06 - 2021-08-20 20:07 - 027576614 _____ C:\Users\PHEPHER\Downloads\unhackme-12.zip
2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-11 02:25 - 2021-08-11 02:25 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-08-11 02:24 - 2021-08-11 02:24 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-08-11 02:23 - 2021-08-11 02:23 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-08-11 02:23 - 2021-08-11 02:23 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-08-11 02:22 - 2021-08-11 02:22 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-08-11 01:13 - 2021-08-11 01:13 - 000000000 ___HD C:\$WinREAgent
2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001474672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001212536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000716928 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000645248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000577152 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 002112144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001595536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001171088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-08-10 22:56 - 2021-08-06 10:41 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 008854136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 005680768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-08-10 22:56 - 2021-08-06 10:39 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-08-10 22:56 - 2021-08-06 10:38 - 006215808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-08-10 22:56 - 2021-08-05 23:12 - 000083062 _____ C:\WINDOWS\system32\nvinfo.pb
2021-08-10 00:07 - 2021-08-11 00:28 - 000000000 ____D C:\Users\PHEPHER\Downloads\The Sims 4 [FitGirl Repack]
2021-08-07 12:15 - 2021-08-13 14:15 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX10.1
2021-08-06 21:50 - 2021-08-06 21:50 - 000121586 _____ C:\Users\PHEPHER\Documents\Cerballiance_Res_20210806_C10806CC0111.pdf
2021-07-31 09:19 - 2021-07-31 09:19 - 000000000 ____D C:\Program Files\VideoLAN
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-21 07:13 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-08-21 06:27 - 2017-12-19 00:05 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-21 06:08 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA
2021-08-21 06:04 - 2017-12-18 23:44 - 000000000 __SHD C:\Users\PHEPHER\IntelGraphicsProfiles
2021-08-21 06:02 - 2021-03-10 00:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-08-21 06:02 - 2021-03-10 00:16 - 000008192 ___SH C:\DumpStack.log.tmp
2021-08-21 06:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-08-21 06:02 - 2016-10-31 19:29 - 000000000 ___HD C:\Intel
2021-08-21 06:01 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-08-21 05:41 - 2017-12-19 04:54 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\vlc
2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\zaap
2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Ankama Launcher
2021-08-21 05:33 - 2021-03-10 00:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-08-21 01:14 - 2020-06-19 15:21 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-08-20 17:08 - 2017-12-19 01:01 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2
2021-08-20 17:01 - 2017-12-19 00:57 - 000000117 _____ C:\Users\PHEPHER\AppData\Roaming\D2Info0
2021-08-20 14:16 - 2017-12-19 00:57 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1
2021-08-20 14:14 - 2017-12-19 00:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus
2021-08-20 08:57 - 2021-05-06 10:51 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX9
2021-08-20 08:56 - 2020-07-23 04:47 - 000000000 ____D C:\Users\PHEPHER\Desktop\JEUX
2021-08-20 04:01 - 2018-06-03 14:34 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\D3DSCache
2021-08-19 20:34 - 2017-12-19 01:04 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3
2021-08-19 15:08 - 2021-07-02 02:30 - 000000000 ____D C:\Users\PHEPHER\AppData\LocalLow\IGDump
2021-08-18 22:07 - 2021-04-26 15:29 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d715353069e8e7
2021-08-18 22:07 - 2021-03-10 00:59 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-08-15 20:16 - 2019-11-29 00:46 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus Retro
2021-08-15 16:18 - 2016-10-31 20:09 - 000000000 ____D C:\Program Files\Microsoft Office
2021-08-14 15:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-08-14 09:28 - 2020-04-14 23:28 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\BitTorrent
2021-08-14 09:28 - 2019-04-20 20:07 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\BitTorrentHelper
2021-08-12 03:53 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-08-11 19:33 - 2021-03-10 00:42 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-08-11 19:33 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2021-08-11 19:33 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2021-08-11 09:10 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\NVIDIA
2021-08-11 03:12 - 2021-03-10 00:17 - 000431664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-08-11 03:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-08-11 02:39 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-08-11 01:08 - 2017-12-19 01:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-08-11 01:01 - 2017-12-19 01:31 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-08-09 23:02 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\Packages
2021-08-06 10:38 - 2021-03-05 19:07 - 007280848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2021-08-04 22:22 - 2021-03-10 00:59 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-04 22:22 - 2021-03-10 00:59 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-08-04 21:50 - 2020-10-01 00:28 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-08-04 13:13 - 2018-02-25 09:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-07-31 09:21 - 2020-05-03 00:14 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2021-07-30 22:43 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-26 12:20 - 2017-12-18 23:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\CrashDumps
2021-07-22 23:25 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
==================== Fichiers à la racine de certains dossiers ========
2017-12-19 00:57 - 2021-08-20 17:01 - 000000117 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info0
2018-04-03 11:25 - 2021-07-21 00:22 - 000000121 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info1
2017-12-19 00:57 - 2021-08-20 14:16 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1
2018-04-04 22:35 - 2018-04-24 22:23 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_10
2018-04-24 21:02 - 2018-04-24 21:06 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_11
2017-12-19 01:01 - 2021-08-20 17:08 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2
2017-12-19 01:04 - 2021-08-19 20:34 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3
2017-12-19 02:07 - 2021-06-20 20:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_4
2017-12-19 02:08 - 2021-06-11 20:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_5
2017-12-19 03:57 - 2021-03-12 15:36 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_6
2018-01-17 01:59 - 2021-02-21 18:47 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_7
2018-04-04 21:18 - 2021-02-21 19:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_8
2018-04-04 21:22 - 2018-04-24 22:24 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_9
2018-04-03 11:25 - 2021-07-21 00:25 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_1
2018-04-03 15:36 - 2021-06-11 02:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_2
2018-04-08 01:09 - 2021-04-22 12:31 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_3
2018-09-21 23:24 - 2018-12-04 12:41 - 000000011 _____ () C:\Users\PHEPHER\AppData\Roaming\RegPorts-0
2017-12-18 23:54 - 2020-01-09 15:55 - 000000200 _____ () C:\Users\PHEPHER\AppData\Roaming\sp_data.sys
2021-02-21 15:35 - 2021-02-21 15:35 - 000000017 _____ () C:\Users\PHEPHER\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par PHEPHER (administrateur) sur DESKTOP-E4H5NSL (ASUSTeK COMPUTER INC. X756UQK) (21-08-2021 07:17:50)
Exécuté depuis C:\Users\PHEPHER\Downloads
Profils chargés: PHEPHER
Platform: Windows 10 Home Version 21H1 19043.1165 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Conexant Systems LLC -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <19>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe
(Greatis Software LLC -> Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe
(ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHeciSvc.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe <2>
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [604496 2017-11-24] (Conexant Systems LLC -> Conexant Systems, Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [Fichier non signé]
HKU\S-1-5-21-226898909-1936610168-3599806186-1001\...\Run: [76A2FD341AF3061B341D3AEE49DB46657F044944._service_run] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service /prefetch:8
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-16] (Google LLC -> Google LLC)
BootExecute: autocheck autochk * Partizan
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {018BAE23-3CD4-42AE-AE89-C7D1A67E88CE} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [Fichier non signé]
Task: {03A7FF9E-F119-41A8-8E11-FC249645B594} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1546112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {04535B88-40DF-4E9A-BD00-12A4F60E62D8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0E0BED33-0066-4730-B89D-97C3C9FAED6A} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {0F6724DA-83E3-4AA5-9C49-41152119524F} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> Pas de fichier <==== ATTENTION
Task: {10E5B95C-D208-4238-B0BD-9AB286F1057D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [855352 2016-02-19] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {15FF2F7D-0C7A-4621-8471-F777D2FE5025} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {19222844-F750-415A-92AE-3902C1F46962} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {2C508260-280F-44C5-A6B3-5A1FDCA7BC53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C8E83F2-44A4-4127-9395-2A8F22D2FA2D} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [4876640 2021-08-04] (Greatis Software LLC -> Greatis Software)
Task: {2F6D8F29-BD56-4EC9-B33B-AFC232AF4F7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.)
Task: {2FBB0F24-8FE8-4307-9AA4-39268856A9ED} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {31770768-48F5-4485-9973-E27D46B0749C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19786024 2016-02-23] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
Task: {47F7C279-A84B-4C2A-9D57-1B1E2643D234} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B2F862D-AD5F-487B-A99E-C5866BA827D4} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> Pas de fichier <==== ATTENTION
Task: {4B9B1E3E-EFE4-4339-A88B-0012F1FCB68F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-19] (Google Inc -> Google Inc.)
Task: {4FA50D8D-3738-45BA-8C4F-71129238A242} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {507686E0-0259-49F0-9564-D827CE566842} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {52A3A4C5-5E56-42FC-A0B5-C105805F5CC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5E32186C-2482-4FD1-9E5C-564C246266C7} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {5F95701C-B027-4C2C-9CE1-4A18D20113AB} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5F98BDF9-A63D-40EB-BD12-2AEFECE65BDA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> Pas de fichier <==== ATTENTION
Task: {6258EB10-CF83-4987-8C44-B51D6EF7E41B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139112 2021-08-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {634CD8D0-31C9-468D-91F0-BBE4CA3336B9} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {65C55535-1151-45CD-92C7-9C5DD85538B5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23253888 2021-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {76BC38FD-C8AA-4FB1-9958-1523347D66C0} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7F479F5A-9663-46B2-8BD9-0C4F0F1765F9} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {831AD955-8F4F-4681-BA8D-BB566F3AF8C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> Pas de fichier <==== ATTENTION
Task: {92FDA719-CD80-489C-B745-BA875EA7568D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BB41B311-F955-4B58-AEBE-A5EB9015D3C3} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> Pas de fichier <==== ATTENTION
Task: {C2E2189A-7B92-4C7F-A7CB-9CE64E0ACBBD} - System32\Tasks\ViGEmBusUpdater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
Task: {CC5604C4-F34A-4786-A921-7454014FBDA9} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Pas de fichier <==== ATTENTION
Task: {CE1C1AF7-A135-47D2-BD62-3FD3D259F22B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MpCmdRun.exe [673816 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E3789123-8E65-469D-9B64-B5E7642B3BE0} - System32\Tasks\AdwCleaner_onReboot => C:\Users\PHEPHER\Downloads\adwcleaner_8.0.6.exe
Task: {E8EBDE1D-05ED-4F57-A9DB-D9D8FD81F831} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {EEDB3F56-2E5D-4184-86BE-29EBA989DD8D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F7957C70-3970-4491-8C98-E4680C13A491} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{4d5f34d2-3eea-4ee1-a79e-2351414d7160}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{92ae2b3c-81d4-4f28-b81a-99255f648a1e}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{a80d89a6-da4c-4a9e-b416-988d8d3ee3c9}: [DhcpNameServer] 192.168.0.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge Profile: C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-21]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-02-21]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-23] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default [2021-08-21]
CHR Notifications: Default -> hxxps://psprices.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://encrypted.google.com"
CHR DefaultSearchKeyword: Default -> google.com_
CHR Extension: (Google Traduction) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-14]
CHR Extension: (Slides) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-19]
CHR Extension: (Docs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-19]
CHR Extension: (Google Drive) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (WOT pour la sécurité des sites Web et une navigation sûre) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2021-08-05]
CHR Extension: (YouTube) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-19]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-07-28]
CHR Extension: (Adblock pour Youtube™) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2021-05-19]
CHR Extension: (Search by Image (by Google)) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2019-06-02]
CHR Extension: (Tampermonkey) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-05-31]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2017-12-19]
CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2021-07-17]
CHR Extension: (Sheets) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-19]
CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2020-03-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-25]
CHR Extension: (Vysor) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2020-09-05]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-08-12]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-08-12]
CHR Extension: (iGVault) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodndogomnfgmbapagempdcobhmjfbho [2020-10-04]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-22]
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-05-06]
CHR Profile: C:\Users\PHEPHER\AppData\Local\Google\Chrome\User Data\System Profile [2020-05-06]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9142128 2021-08-05] (Microsoft Corporation -> Microsoft Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Fichier non signé]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7477704 2021-07-17] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2523448 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3478336 2020-12-02] (Electronic Arts, Inc. -> Electronic Arts)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1705088 2020-06-07] (Rockstar Games, Inc. -> Rockstar Games)
S3 ViGEmBusUpdater; C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe [2727416 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe [136656 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [22656 2016-02-23] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-04-26] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AsusSGDrv; C:\WINDOWS\System32\drivers\AsusSGDrv.sys [140032 2019-08-19] (ASUSTek Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-01-18] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2018-06-14] (Disc Soft Ltd -> Disc Soft Ltd)
S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] (FarStone Technology -> ) [Fichier non signé]
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-23] (Malwarebytes Inc -> Malwarebytes)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-08-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-08-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [78072 2021-08-04] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl22274447; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3BC6154A-13D3-4EB8-8906-C9BE04AC0D6B}\MpKslDrv.sys [X]
U0 Partizan; system32\drivers\Partizan.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-21 07:17 - 2021-08-21 07:20 - 000027769 _____ C:\Users\PHEPHER\Downloads\FRST.txt
2021-08-21 07:16 - 2021-08-21 07:20 - 000000000 ____D C:\FRST
2021-08-21 07:15 - 2021-08-21 07:15 - 002300416 _____ (Farbar) C:\Users\PHEPHER\Downloads\FRST64.exe
2021-08-21 06:40 - 2021-08-21 06:40 - 002592317 _____ C:\Users\PHEPHER\Downloads\Autoruns.zip
2021-08-21 06:32 - 2021-08-21 06:32 - 000002146 _____ C:\Users\PHEPHER\Desktop\VirusTotal Uploader 2.2.lnk
2021-08-21 06:32 - 2021-08-21 06:32 - 000000000 ____D C:\Program Files (x86)\VirusTotalUploader2
2021-08-21 06:31 - 2021-08-21 06:31 - 000142744 _____ C:\Users\PHEPHER\Downloads\vtuploader2.2.exe
2021-08-21 06:02 - 2021-08-21 06:02 - 000000714 _____ C:\WINDOWS\SysWOW64\PARTIZAN.TXT
2021-08-20 20:10 - 2021-08-21 06:28 - 000000000 ____D C:\Users\PHEPHER\Documents\RegRun2
2021-08-20 20:10 - 2021-08-21 06:27 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo
2021-08-20 20:10 - 2021-08-21 06:17 - 000003424 _____ C:\WINDOWS\system32\Tasks\UnHackMe Task Scheduler
2021-08-20 20:10 - 2021-08-21 06:16 - 000001078 _____ C:\Users\PHEPHER\Desktop\UnHackMe.lnk
2021-08-20 20:09 - 2021-08-21 06:23 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2021-08-20 20:09 - 2021-08-21 06:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2021-08-20 20:09 - 2020-11-11 14:39 - 000016184 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys
2021-08-20 20:09 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe
2021-08-20 20:06 - 2021-08-20 20:07 - 027576614 _____ C:\Users\PHEPHER\Downloads\unhackme-12.zip
2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-11 02:25 - 2021-08-11 02:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-11 02:25 - 2021-08-11 02:25 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-08-11 02:24 - 2021-08-11 02:24 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-08-11 02:23 - 2021-08-11 02:23 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-08-11 02:23 - 2021-08-11 02:23 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-08-11 02:22 - 2021-08-11 02:22 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-08-11 01:13 - 2021-08-11 01:13 - 000000000 ___HD C:\$WinREAgent
2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001474672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-10 22:56 - 2021-08-06 10:45 - 001212536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-10 22:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000716928 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000645248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-08-10 22:56 - 2021-08-06 10:42 - 000577152 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 002112144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001595536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 001171088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-08-10 22:56 - 2021-08-06 10:41 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-08-10 22:56 - 2021-08-06 10:41 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 008854136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 005680768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-08-10 22:56 - 2021-08-06 10:40 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-08-10 22:56 - 2021-08-06 10:39 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-08-10 22:56 - 2021-08-06 10:38 - 006215808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-08-10 22:56 - 2021-08-05 23:12 - 000083062 _____ C:\WINDOWS\system32\nvinfo.pb
2021-08-10 00:07 - 2021-08-11 00:28 - 000000000 ____D C:\Users\PHEPHER\Downloads\The Sims 4 [FitGirl Repack]
2021-08-07 12:15 - 2021-08-13 14:15 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX10.1
2021-08-06 21:50 - 2021-08-06 21:50 - 000121586 _____ C:\Users\PHEPHER\Documents\Cerballiance_Res_20210806_C10806CC0111.pdf
2021-07-31 09:19 - 2021-07-31 09:19 - 000000000 ____D C:\Program Files\VideoLAN
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-08-21 07:13 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-08-21 06:27 - 2017-12-19 00:05 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-21 06:08 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA
2021-08-21 06:04 - 2017-12-18 23:44 - 000000000 __SHD C:\Users\PHEPHER\IntelGraphicsProfiles
2021-08-21 06:02 - 2021-03-10 00:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-08-21 06:02 - 2021-03-10 00:16 - 000008192 ___SH C:\DumpStack.log.tmp
2021-08-21 06:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-08-21 06:02 - 2016-10-31 19:29 - 000000000 ___HD C:\Intel
2021-08-21 06:01 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-08-21 05:41 - 2017-12-19 04:54 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\vlc
2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\zaap
2021-08-21 05:37 - 2020-01-24 00:01 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Ankama Launcher
2021-08-21 05:33 - 2021-03-10 00:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-08-21 01:14 - 2020-06-19 15:21 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-08-21 01:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-08-20 17:08 - 2017-12-19 01:01 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2
2021-08-20 17:01 - 2017-12-19 00:57 - 000000117 _____ C:\Users\PHEPHER\AppData\Roaming\D2Info0
2021-08-20 14:16 - 2017-12-19 00:57 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1
2021-08-20 14:14 - 2017-12-19 00:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus
2021-08-20 08:57 - 2021-05-06 10:51 - 000000000 ____D C:\Users\PHEPHER\Downloads\[ScrewThisNoise] Koikatsu BetterRepack RX9
2021-08-20 08:56 - 2020-07-23 04:47 - 000000000 ____D C:\Users\PHEPHER\Desktop\JEUX
2021-08-20 04:01 - 2018-06-03 14:34 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\D3DSCache
2021-08-19 20:34 - 2017-12-19 01:04 - 000000008 _____ C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3
2021-08-19 15:08 - 2021-07-02 02:30 - 000000000 ____D C:\Users\PHEPHER\AppData\LocalLow\IGDump
2021-08-18 22:07 - 2021-04-26 15:29 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d715353069e8e7
2021-08-18 22:07 - 2021-03-10 00:59 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-08-15 20:16 - 2019-11-29 00:46 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\Dofus Retro
2021-08-15 16:18 - 2016-10-31 20:09 - 000000000 ____D C:\Program Files\Microsoft Office
2021-08-14 15:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-08-14 09:28 - 2020-04-14 23:28 - 000000000 ____D C:\Users\PHEPHER\AppData\Roaming\BitTorrent
2021-08-14 09:28 - 2019-04-20 20:07 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\BitTorrentHelper
2021-08-12 03:53 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-08-11 19:33 - 2021-03-10 00:42 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-08-11 19:33 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2021-08-11 19:33 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2021-08-11 09:10 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\NVIDIA
2021-08-11 03:12 - 2021-03-10 00:17 - 000431664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-08-11 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-08-11 03:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-08-11 02:39 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-08-11 01:08 - 2017-12-19 01:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-08-11 01:01 - 2017-12-19 01:31 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-08-09 23:02 - 2017-12-18 23:44 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\Packages
2021-08-06 10:38 - 2021-03-05 19:07 - 007280848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2021-08-04 22:22 - 2021-03-10 00:59 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-04 22:22 - 2021-03-10 00:59 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-08-04 21:50 - 2020-10-01 00:28 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-08-04 13:13 - 2018-02-25 09:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-07-31 09:21 - 2020-05-03 00:14 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2021-07-30 22:43 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-26 12:20 - 2017-12-18 23:57 - 000000000 ____D C:\Users\PHEPHER\AppData\Local\CrashDumps
2021-07-22 23:25 - 2016-10-31 19:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
==================== Fichiers à la racine de certains dossiers ========
2017-12-19 00:57 - 2021-08-20 17:01 - 000000117 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info0
2018-04-03 11:25 - 2021-07-21 00:22 - 000000121 _____ () C:\Users\PHEPHER\AppData\Roaming\D2Info1
2017-12-19 00:57 - 2021-08-20 14:16 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_1
2018-04-04 22:35 - 2018-04-24 22:23 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_10
2018-04-24 21:02 - 2018-04-24 21:06 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_11
2017-12-19 01:01 - 2021-08-20 17:08 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_2
2017-12-19 01:04 - 2021-08-19 20:34 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_3
2017-12-19 02:07 - 2021-06-20 20:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_4
2017-12-19 02:08 - 2021-06-11 20:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_5
2017-12-19 03:57 - 2021-03-12 15:36 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_6
2018-01-17 01:59 - 2021-02-21 18:47 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_7
2018-04-04 21:18 - 2021-02-21 19:45 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_8
2018-04-04 21:22 - 2018-04-24 22:24 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId0_9
2018-04-03 11:25 - 2021-07-21 00:25 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_1
2018-04-03 15:36 - 2021-06-11 02:48 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_2
2018-04-08 01:09 - 2021-04-22 12:31 - 000000008 _____ () C:\Users\PHEPHER\AppData\Roaming\DofusAppId1_3
2018-09-21 23:24 - 2018-12-04 12:41 - 000000011 _____ () C:\Users\PHEPHER\AppData\Roaming\RegPorts-0
2017-12-18 23:54 - 2020-01-09 15:55 - 000000200 _____ () C:\Users\PHEPHER\AppData\Roaming\sp_data.sys
2021-02-21 15:35 - 2021-02-21 15:35 - 000000017 _____ () C:\Users\PHEPHER\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================