Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 10-10-2021
Exécuté par nicolas baldi (administrateur) sur NICOLAS (Acer Nitro AN517-51) (11-10-2021 09:43:27)
Exécuté depuis C:\Users\U\Desktop
Profils chargés: nicolas baldi
Platform: Microsoft Windows 10 Famille Version 21H1 19043.1237 (X64) Langue: Allemand (Allemagne) -> Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QASvc.exe
(Acer Incorporated) C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3030.0_x64__48frkmn4z8aw4\DesktopApp\AcerRegistrationBackGroundTask.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) [Fichier non signé] C:\Program Files (x86)\Common Files\Adobe Acrobat DC\Update\acroupd.exe
(F.lux Software LLC -> f.lux Software LLC) C:\Users\U\AppData\Local\FluxSoftware\Flux\flux.exe
(Google LLC -> ) C:\Program Files\Google\Drive File Stream\51.0.14.0\crashpad_handler.exe <3>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <30>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\51.0.14.0\GoogleDriveFS.exe <8>
(GoTrustID Inc. -> GOTrustID Inc.) C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe
(GoTrustID Inc. -> GOTrustID Inc.) C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\igfxext.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7d6ad0397c5dc3fd\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7d6ad0397c5dc3fd\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_6ca78a08b838e305\RstMwService.exe
(Lifesize, Inc -> Lifesize) C:\Users\U\AppData\Local\lifesize_app\app-2.216.2893\Lifesize App Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Netsoft Holdings, LLC -> Netsoft Holdings, LLC.) C:\Program Files\Hubstaff\HubstaffClient.exe
(Netsoft Holdings, LLC -> Netsoft Holdings, LLC.) C:\Program Files\Hubstaff\HubstaffHelper.exe
(nordvpn s.a. -> ) C:\Users\U\AppData\Local\Programs\nordpass\resources\nordpass-background-app.exe
(nordvpn s.a. -> NordPass Team) C:\Users\U\AppData\Local\Programs\nordpass\NordPass.exe <5>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_c4249bf0af3f8396\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo77ac.inf_amd64_d5839c9d7c0bda64\WavesSvc64.exe
(Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo77ac.inf_amd64_d5839c9d7c0bda64\WavesSysSvc64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-19] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo77ac.inf_amd64_d5839c9d7c0bda64\WavesSvc64.exe [1464728 2019-01-31] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ctfmon] => C:\Windows\System32\ctfmon.exe [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-07-14] (Adobe Inc. -> Adobe Systems, Incorporated)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\51.0.14.0\GoogleDriveFS.exe [54124376 2021-09-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\51.0.14.0\GoogleDriveFS.exe [54124376 2021-09-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4110568 2021-07-21] (Valve -> Valve Corporation)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [f.lux] => C:\Users\U\AppData\Local\FluxSoftware\Flux\flux.exe [1515848 2021-06-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [Gaijin.Net Updater] => C:\Users\U\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2374376 2020-12-03] (Gaijin Network LTD -> Gaijin)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\51.0.14.0\GoogleDriveFS.exe [54124376 2021-09-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [Lifesize App Service] => C:\Users\U\AppData\Local\lifesize_app\Lifesize.exe [579720 2021-09-09] (Lifesize, Inc -> Lifesize)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [electron.app.NordPass] => C:\Users\U\AppData\Local\Programs\nordpass\NordPass.exe [136202208 2021-10-01] (nordvpn s.a. -> NordPass Team)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\Run: [Upwork] => C:\Users\U\AppData\Local\Programs\upwork\Upwork.exe [126572208 2021-09-13] (Upwork Global Inc. -> Upwork, Inc.)
HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\...\RunOnce: [Application Restart #2] => C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe [383488 2021-01-17] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\51.0.14.0\GoogleDriveFS.exe [54124376 2021-09-08] (Google LLC -> Google, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\94.0.4606.71\Installer\chrmstp.exe [2021-10-05] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\94.1.30.87\Installer\chrmstp.exe [2021-10-04] (Brave Software, Inc. -> Brave Software, Inc.)
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {048F9E88-B07F-434F-8ADC-E5D57C149AEA} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2770984 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {1B51567D-4C57-4858-8DAA-46F29DFB8898} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [447528 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {244B1B54-B30A-4343-98CD-597B4ACD905A} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162384 2021-02-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {25F51E5A-99ED-4614-BD89-FD67B810B9CE} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2C2E8A2E-A355-47C9-AC11-DF87F3D87010} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {32570F47-1602-4231-B9F5-9613D176A4F9} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {35AABA69-D8C2-4F5A-A053-EFF80E244C85} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37C97EE8-0B4F-41F2-A6D6-EA6F60E8535D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {38AF548B-1D67-44ED-8DA2-EA43541223BF} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268096 2019-01-09] (Acer Incorporated -> Acer Incorporated)
Task: {3AD774F4-F907-4DDE-84F9-C94917E36645} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [42024 2020-07-27] (Acer Incorporated -> )
Task: {3D90A679-4BC7-43AF-A8E3-C2D9711AA045} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E0D4023-FFA5-4D45-A9E3-49978406C1A9} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4829224 2020-07-27] (Acer Incorporated -> )
Task: {3FCFAB53-02FD-4D3F-966C-6DBADE6D586E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [110440 2021-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {401D182C-E1D5-4772-B34B-D170F073D31B} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4168D1A2-6EDD-44D5-811E-755F2A0104C9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {483150DD-9D81-4AA5-BE60-051944DC3194} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4255680 2021-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {488CFD3F-99CD-4E66-88B1-5A769B5503BE} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2962984 2020-07-27] (Acer Incorporated -> )
Task: {4C64CE0A-45E0-4CF7-B370-F44017070511} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4255680 2021-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {50F7109A-ED67-4DDA-B826-C68C0283FF12} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-24] (Google LLC -> Google LLC)
Task: {54D917E1-5992-4574-8C02-3EA27E9926EE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {55D6130A-D517-4FE7-9580-B0D6E31F4A8D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {590459FD-22D8-4AB6-92B5-E0041E981899} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473880 2020-07-16] (Acer Incorporated -> Acer Incorporated)
Task: {5A46F37B-3425-4B9C-B581-B38A0B10FBC3} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {66AAF3BF-5F1E-40AE-BB2A-6A984D922735} - System32\Tasks\Adobe Acrobat DC Auto Update Scheduler => C:\Program Files (x86)\Common Files\Adobe Acrobat DC\Update\acroupd.exe [99192 2020-03-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated) [Fichier non signé]
Task: {6D634EC8-F135-4E4E-A2AC-4F14CB678095} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3292088849-3346179200-1007464640-500 => C:\Users\U\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {8CFF3673-08AF-49FD-A38B-818BE1AF1D2F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [110440 2021-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {901F1272-C31D-4CAD-9CEA-AFE68228AE8D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9B6B4DB3-BD1F-4E9F-B570-4080560948BA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {B989F5D3-0408-4EEF-B0D6-7D8B851F0B65} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-08-24] (Google LLC -> Google LLC)
Task: {C3184840-95BF-4A11-902D-AFB622C71CD1} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C8528008-ACA2-43C9-B321-DD402959D587} - System32\Tasks\NitroSense => C:\Program Files\Acer\NitroSense Service\PSLauncher.exe [601904 2019-07-19] (Acer Incorporated -> Acer Incorporated)
Task: {CD19F673-6D54-44F2-BF93-8056B2182457} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-07-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {D90F3EE4-119F-4671-AA3D-0E1FDE6B674F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {DA823FE4-E028-4679-87F3-C3FB33485963} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DBD48761-1515-4F40-A17A-CA411F0773E6} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211136 2019-01-09] (Acer Incorporated -> Acer Incorporated)
Task: {F1F749B5-E600-4EA0-B933-8D1D16EC0322} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {FC7ED6CB-52AD-43BF-94C6-4DFA1BB5F19B} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162384 2021-02-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {FFA8B970-ADCA-4A2F-B66C-56447592A1B1} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
AutoConfigURL: [HKLM] => hxxp://127.0.0.1:86/
AutoConfigURL: [HKLM-x32] => hxxp://127.0.0.1:86/
AutoConfigURL: [{C2A955ED-37DB-46B6-A0BB-04B53AD38463}] => hxxp://127.0.0.1:86/
AutoConfigURL: [{CC561B27-9B6E-4904-9AEE-E6744784ABAB}] => hxxp://127.0.0.1:86/
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0c1600f6-7e82-4d52-ac22-4aa639511b3a}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{12485a62-ee95-4e59-8ad2-5e232360513c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5f892a23-35ba-4525-b41d-ada088fed827}: [DhcpNameServer] 192.168.247.64
Tcpip\..\Interfaces\{71dbb1c5-1dac-41cc-863f-f4971e140f08}: [DhcpNameServer] 10.61.12.1
Tcpip\..\Interfaces\{8dc0974e-c036-4965-89f0-af53252fe59c}: [DhcpNameServer] 192.168.1.254
ManualProxies: 0hxxp://127.0.0.1:86/
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
Edge Profile: C:\Users\U\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-26]
FireFox:
========
FF DefaultProfile: ig06a86c.default
FF ProfilePath: C:\Users\U\AppData\Roaming\Mozilla\Firefox\Profiles\ig06a86c.default [2021-10-07]
FF ProfilePath: C:\Users\U\AppData\Roaming\Mozilla\Firefox\Profiles\ew5gumib.default-release [2021-10-07]
FF Extension: (Amazon Assistant for Firefox) - C:\Users\U\AppData\Roaming\Mozilla\Firefox\Profiles\ew5gumib.default-release\Extensions\abb-acer@amazon.com.xpi [2020-08-24] [UpdateUrl:hxxps://s3-us-west-2.amazonaws.com/ubp-ubpextension-us-prod/vendor-update/firefox/acer1/updates.json]
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\U\AppData\Roaming\Mozilla\Firefox\Profiles\ew5gumib.default-release\Extensions\langpack-de@firefox.mozilla.org.xpi [2020-08-24]
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\U\AppData\Local\Google\Chrome\User Data\Default [2021-10-11]
CHR Notifications: Default -> hxxps://app.asana.com; hxxps://app.slack.com; hxxps://calendar.google.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://messages.google.com
CHR HomePage: Default -> hxxps://google.com/
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPBC8D0713-F241-4A5D-8250-A8168C3F734A&SSPV=","hxxp://www.google.com"
CHR Extension: (Google Traduction) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-10-07]
CHR Extension: (ColorZilla) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2021-10-07]
CHR Extension: (SEO META in 1 CLICK) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjogjfinolnhfhkbipphpdlldadpnmhc [2021-10-07]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-10-07]
CHR Extension: (NordPass® Password Manager & Digital Vault) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\fooolghllnmhmmndgjiamiiodkpenpbb [2021-10-07]
CHR Extension: (MerciApp — Correcteur orthographique Chrome) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\gccahjgcckaemgpliioopngfgdaceffo [2021-10-07]
CHR Extension: (Wappalyzer) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2021-10-07]
CHR Extension: (WhatFont) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2021-10-07]
CHR Extension: (Loom for Chrome) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2021-10-07]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-10-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\U\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-07]
CHR Profile: C:\Users\U\AppData\Local\Google\Chrome\User Data\System Profile [2021-10-07]
CHR HKU\S-1-5-21-3292088849-3346179200-1007464640-1006\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
Brave:
=======
BRA Profile: C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2021-10-07]
BRA Notifications: Default -> hxxps://app.asana.com; hxxps://calendar.google.com; hxxps://mail.google.com; hxxps://mail.yahoo.com; hxxps://meet.google.com
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Google Traduction) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-10-04]
BRA Extension: (ColorZilla) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2021-02-19]
BRA Extension: (SEO META in 1 CLICK) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bjogjfinolnhfhkbipphpdlldadpnmhc [2021-02-19]
BRA Extension: (MerciApp — Correcteur orthographique Chrome) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gccahjgcckaemgpliioopngfgdaceffo [2021-08-16]
BRA Extension: (Wappalyzer) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2021-10-04]
BRA Extension: (WhatFont) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2021-02-19]
BRA Extension: (Loom for Chrome) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2021-10-04]
BRA Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-02-19]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2021-10-04]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2021-10-04]
BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2021-10-04]
BRA Extension: (Brave Ads Resources) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\hbejpnagkgeeohiojniljejpdpojmfdp [2021-05-18]
BRA Extension: (Brave Ads Resources) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\ijgkfgmfiinppefbonemjidmkhgbonei [2021-10-04]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2021-10-04]
BRA Extension: (Brave NTP sponsored images) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2021-10-04]
BRA Extension: (Crypto Wallets) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\odbfpeeihdkbihmopkbjmoonfanlbfcl [2021-04-20]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\U\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2021-10-04]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [300584 2020-07-27] (Acer Incorporated -> Acer Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3779840 2021-07-14] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3547904 2021-07-14] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162384 2021-02-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162384 2021-02-19] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803952 2019-08-02] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 GoTrust ID Plugin; C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe [17408 2019-08-02] (GoTrustID Inc. -> GOTrustID Inc.)
R2 GoTrustID Service; C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe [246272 2019-08-02] (GoTrustID Inc. -> GOTrustID Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [299680 2021-08-23] (HP Inc. -> HP Inc.)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2616424 2019-06-18] (Rivet Networks LLC -> Rivet Networks)
R3 PSSvc; C:\Program Files\Acer\NitroSense Service\PSSvc.exe [820016 2019-07-19] (Acer Incorporated -> Acer Incorporated)
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [465960 2020-09-10] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [526888 2020-09-10] (Acer Incorporated -> Acer Incorporated)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [305984 2019-01-10] (Acer Incorporated -> Acer Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [72808 2019-06-18] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [72816 2019-06-18] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_c4249bf0af3f8396\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_c4249bf0af3f8396\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcerAirplaneModeController; C:\WINDOWS\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159864 2021-06-29] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 googledrivefs3525; C:\WINDOWS\System32\DRIVERS\googledrivefs3525.sys [389640 2021-07-30] (Google LLC -> Google, Inc.)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [162432 2019-06-18] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 NANMp50; C:\WINDOWS\System32\Drivers\NANMp50.sys [46776 2010-03-25] (PRINTING COMMUNICATIONS ASSOCIATES, INC -> Printing Communications Assoc., Inc. (PCAUSA))
S3 NANSp50; C:\WINDOWS\System32\Drivers\NANSp50.sys [45752 2010-03-25] (PRINTING COMMUNICATIONS ASSOCIATES, INC -> Printing Communications Assoc., Inc. (PCAUSA))
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-11 09:05 - 2021-10-11 09:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hubstaff
2021-10-11 08:47 - 2021-10-11 08:47 - 000000000 ____D C:\Users\U\Desktop\FRST-OlderVersion
2021-10-08 17:39 - 2021-10-08 17:39 - 000000000 ____D C:\Users\U\AppData\Local\Microsoft_Corporation
2021-10-07 17:54 - 2021-10-07 17:54 - 000001371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Frog SEO Spider.lnk
2021-10-07 17:54 - 2021-10-07 17:54 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Screaming Frog SEO Spider.lnk
2021-10-07 17:01 - 2021-10-07 17:01 - 000000534 _____ C:\Users\U\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Muzak.lnk
2021-10-07 16:19 - 2021-10-07 16:19 - 000000008 __RSH C:\ProgramData\ntuser.pol
2021-10-07 16:04 - 2021-10-07 16:15 - 000005904 _____ C:\Users\U\Desktop\Fixlog.txt
2021-10-07 15:01 - 2021-10-07 15:02 - 000039205 _____ C:\Users\U\Desktop\Addition.txt
2021-10-07 14:59 - 2021-10-11 09:44 - 000035237 _____ C:\Users\U\Desktop\FRST.txt
2021-10-07 14:39 - 2021-10-11 08:47 - 002310144 _____ (Farbar) C:\Users\U\Desktop\FRST64.exe
2021-10-05 10:54 - 2021-10-05 10:54 - 002880468 _____ C:\WINDOWS\Minidump\100521-24328-01.dmp
2021-10-05 09:51 - 2021-10-11 09:05 - 000000000 ____D C:\Users\U\AppData\Roaming\Hubstaff
2021-10-05 09:50 - 2021-10-11 09:05 - 000000000 ____D C:\Program Files\Hubstaff
2021-10-05 09:31 - 2021-10-11 08:44 - 000000000 ____D C:\Users\U\AppData\Roaming\NordPass
2021-10-05 09:31 - 2021-10-05 09:31 - 000000000 ____D C:\Users\U\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NordSec
2021-10-05 09:31 - 2021-10-05 09:31 - 000000000 ____D C:\Users\U\AppData\Local\nordpass-updater
2021-09-29 18:18 - 2021-09-29 18:18 - 000252119 _____ C:\Users\U\Desktop\fiche garant- serge baldi.pdf
2021-09-29 17:56 - 2021-09-29 17:56 - 000412016 _____ C:\Users\U\Desktop\fiche locataire- nicolas-baldi.pdf
2021-09-28 11:21 - 2021-09-28 11:21 - 000041171 _____ C:\Users\U\Downloads\MTB.txt
2021-09-28 11:20 - 2021-09-28 11:20 - 000892416 _____ (Farbar) C:\Users\U\Downloads\MiniToolBox.exe
2021-09-23 17:55 - 2021-09-23 17:55 - 000089308 _____ C:\Users\U\Downloads\BALDI TVA.pdf
2021-09-22 15:40 - 2021-09-23 12:14 - 000000000 ____D C:\Users\U\Downloads\homedale-1-98
2021-09-22 15:23 - 2021-09-22 15:24 - 000000000 ____D C:\Program Files (x86)\NetSurveyor
2021-09-22 15:23 - 2021-09-22 15:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NutsAboutNets
2021-09-22 15:23 - 2010-03-25 11:05 - 000046776 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\WINDOWS\system32\Drivers\NANMp50.sys
2021-09-22 15:23 - 2010-03-25 11:05 - 000045752 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\WINDOWS\system32\Drivers\NANSp50.sys
2021-09-22 14:48 - 2021-09-22 14:48 - 000000000 ____D C:\WINDOWS\Firmware
2021-09-22 10:34 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.bak
2021-09-22 10:28 - 2021-09-22 12:26 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2021-09-22 10:25 - 2021-09-16 05:28 - 001858672 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-09-22 10:25 - 2021-09-16 05:28 - 001858672 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-09-22 10:25 - 2021-09-16 05:28 - 001474688 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-09-22 10:25 - 2021-09-16 05:28 - 001438832 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-09-22 10:25 - 2021-09-16 05:28 - 001438832 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-09-22 10:25 - 2021-09-16 05:28 - 001212544 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-09-22 10:25 - 2021-09-16 05:28 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-09-22 10:25 - 2021-09-16 05:28 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-09-22 10:25 - 2021-09-16 05:28 - 000951920 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-09-22 10:25 - 2021-09-16 05:28 - 000951920 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 001171064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 000716920 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 000676472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 000645240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 000577144 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-09-22 10:25 - 2021-09-16 05:25 - 000564344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 008854144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 002112120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 001595512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 000919160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 000750200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2021-09-22 10:25 - 2021-09-16 05:24 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-09-22 10:25 - 2021-09-16 05:24 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-09-22 10:25 - 2021-09-16 05:23 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-09-22 10:25 - 2021-09-16 05:23 - 005681280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-09-22 10:25 - 2021-09-16 05:23 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-09-22 10:25 - 2021-09-16 05:23 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-09-22 10:25 - 2021-09-16 05:23 - 000849016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-09-22 10:25 - 2021-09-16 05:21 - 006216336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-09-22 10:25 - 2021-09-14 05:39 - 000083133 _____ C:\WINDOWS\system32\nvinfo.pb
2021-09-22 09:32 - 2021-09-22 09:32 - 000002206 _____ C:\Users\U\AppData\Roaming\Microsoft\Windows\Start Menu\Complete Internet Repair.lnk
2021-09-22 09:32 - 2021-09-22 09:32 - 000000000 ____D C:\Users\U\AppData\Roaming\Rizonesoft
2021-09-22 09:32 - 2021-09-22 09:32 - 000000000 ____D C:\Program Files\Rizonesoft
2021-09-21 10:11 - 2021-10-07 16:18 - 110886912 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-09-20 18:52 - 2021-09-21 10:11 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2021-09-20 17:49 - 2021-09-20 17:49 - 000000796 _____ C:\Users\U\Downloads\publi Cristalh Yashin.txt
2021-09-20 15:32 - 2021-09-20 15:32 - 003173444 _____ C:\WINDOWS\Minidump\092021-23187-01.dmp
2021-09-20 10:59 - 2021-09-20 10:59 - 000000000 ____D C:\Users\U\Documents\Zoom
2021-09-20 10:00 - 2021-06-29 05:43 - 000159864 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2021-09-17 22:28 - 2021-09-17 22:28 - 001328376 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll
2021-09-17 22:28 - 2021-09-17 22:28 - 001324032 _____ C:\WINDOWS\system32\FaceProcessor.dll
2021-09-17 22:28 - 2021-09-17 22:28 - 000512864 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2021-09-17 22:28 - 2021-09-17 22:28 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-09-17 22:27 - 2021-09-17 22:27 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-17 22:27 - 2021-09-17 22:27 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-17 22:27 - 2021-09-17 22:27 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-17 22:27 - 2021-09-17 22:27 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-17 22:27 - 2021-09-17 22:27 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-17 22:27 - 2021-09-17 22:27 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-17 22:27 - 2021-09-17 22:27 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-17 22:27 - 2021-09-17 22:27 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-17 22:27 - 2021-09-17 22:27 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-17 22:27 - 2021-09-17 22:27 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-09-17 22:27 - 2021-09-17 22:27 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-17 22:27 - 2021-09-17 22:27 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-17 22:27 - 2021-09-17 22:27 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-17 22:27 - 2021-09-17 22:27 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-17 22:27 - 2021-09-17 22:27 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-17 22:27 - 2021-09-17 22:27 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-17 22:27 - 2021-09-17 22:27 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-17 22:27 - 2021-09-17 22:27 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-09-17 22:27 - 2021-09-17 22:27 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-17 22:21 - 2021-09-17 22:21 - 000000000 ___HD C:\$WinREAgent
2021-09-16 14:25 - 2021-09-16 14:25 - 000000561 _____ C:\Users\U\Downloads\htaccess_Backup_for_nicolasbaldi.com.txt
2021-09-14 13:21 - 2021-09-14 14:00 - 000000000 ____D C:\Users\U\Downloads\Mr. Robot
2021-09-13 18:26 - 2021-09-13 18:26 - 000000123 _____ C:\Users\U\Downloads\lien cache appart .txt
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-11 09:43 - 2021-07-02 13:30 - 000000000 ____D C:\FRST
2021-10-11 09:39 - 2020-08-24 19:21 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-11 09:32 - 2020-08-27 10:32 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-10-11 08:45 - 2021-02-24 17:36 - 000004178 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{FC3A193D-A195-41EC-B43A-4B31D20E3DD8}
2021-10-11 08:45 - 2020-08-24 18:47 - 002654916 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-11 08:45 - 2020-08-24 18:26 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2021-10-11 08:45 - 2020-08-24 18:26 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2021-10-11 08:45 - 2019-12-07 16:50 - 000732488 _____ C:\WINDOWS\system32\perfh007.dat
2021-10-11 08:45 - 2019-12-07 16:50 - 000149888 _____ C:\WINDOWS\system32\perfc007.dat
2021-10-11 08:45 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-11 08:41 - 2020-08-24 23:36 - 000000000 ___RD C:\Users\U\Google Drive
2021-10-11 08:41 - 2020-07-30 13:42 - 000000000 ____D C:\ProgramData\NVIDIA
2021-10-10 22:09 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-10 22:05 - 2020-09-02 09:48 - 000000000 ____D C:\Users\U\AppData\Roaming\vlc
2021-10-10 22:05 - 2020-08-24 18:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-10 20:59 - 2021-01-25 22:07 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-10 20:57 - 2020-08-27 17:08 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-10 20:57 - 2020-08-27 17:08 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-09 11:41 - 2020-08-25 15:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-10-08 16:31 - 2020-08-24 11:20 - 000000000 ____D C:\Users\U\AppData\Local\Packages
2021-10-08 09:52 - 2021-04-19 19:21 - 000179077 _____ C:\Users\U\Downloads\Codes Nico.xlsx
2021-10-08 09:36 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-08 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-07 17:54 - 2020-09-21 15:56 - 000000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2021-10-07 16:19 - 2020-08-24 18:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-07 16:19 - 2020-08-24 18:41 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-07 16:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-07 16:18 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2021-10-07 15:54 - 2020-08-24 23:27 - 000000000 ____D C:\Users\U\AppData\LocalLow\Temp
2021-10-07 15:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-10-07 15:45 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2021-10-07 15:43 - 2021-07-06 20:37 - 000000000 ____D C:\Program Files\Black Tree Gaming Ltd
2021-10-07 14:27 - 2020-09-29 09:00 - 000000000 ____D C:\Users\U\.ScreamingFrogSEOSpider
2021-10-07 13:47 - 2021-03-02 14:35 - 000000000 ____D C:\Users\U\AppData\Roaming\FileZilla
2021-10-06 18:14 - 2020-09-28 09:53 - 000000000 ____D C:\Users\U\AppData\Local\WarThunder
2021-10-06 09:53 - 2020-07-30 13:03 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-05 17:20 - 2020-08-24 18:35 - 000000000 ____D C:\Users\U
2021-10-05 15:16 - 2020-08-24 16:47 - 000000000 ____D C:\Users\U\AppData\Local\CrashDumps
2021-10-05 10:54 - 2020-10-13 10:28 - 1954260579 _____ C:\WINDOWS\MEMORY.DMP
2021-10-05 10:54 - 2020-10-13 10:28 - 000000000 ____D C:\WINDOWS\Minidump
2021-10-05 08:53 - 2020-08-24 19:22 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-04 13:34 - 2020-09-02 10:59 - 000001456 _____ C:\Users\U\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2021-10-04 08:37 - 2021-02-19 13:29 - 000002366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2021-10-03 16:40 - 2020-08-27 17:08 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-09-30 20:45 - 2020-08-24 19:21 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-09-30 20:45 - 2020-08-24 19:21 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-09-28 11:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-09-22 15:00 - 2020-07-30 13:09 - 000000000 ____D C:\ProgramData\Package Cache
2021-09-22 15:00 - 2020-07-30 13:09 - 000000000 ____D C:\Program Files\Intel
2021-09-22 10:28 - 2020-08-28 15:46 - 000000000 ____D C:\Users\U\AppData\Local\NVIDIA
2021-09-22 09:17 - 2021-03-02 14:35 - 000000000 ____D C:\Users\U\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2021-09-22 09:17 - 2021-03-02 14:35 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2021-09-21 21:26 - 2021-01-28 17:04 - 000002068 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2021-09-20 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-09-18 10:20 - 2020-08-24 18:41 - 000486680 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-18 10:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-18 10:19 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-09-17 22:30 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-09-16 21:13 - 2020-08-24 16:20 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-16 21:11 - 2020-08-24 16:20 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-09-16 05:22 - 2019-12-05 05:03 - 007280840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
==================== Fichiers à la racine de certains dossiers ========
2020-09-02 10:59 - 2021-10-04 13:34 - 000001456 _____ () C:\Users\U\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2020-08-28 09:11 - 2020-08-28 09:11 - 000000000 _____ () C:\Users\U\AppData\Local\oobelibMkey.log
2020-11-01 19:20 - 2020-11-01 19:20 - 000007601 _____ () C:\Users\U\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================