Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022
Exécuté par Claire (administrateur) sur LAPTOP-R1K6VQSS (HP HP Laptop 15-da0xxx) (02-09-2022 13:41:45)
Exécuté depuis C:\Users\Claire\Downloads
Profils chargés: Claire
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1766 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxEM.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Conexant Systems LLC -> Synaptics Incorporated.) C:\Windows\System32\SynAudSrv.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ba273d0ffb93e225\RstMwService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_7c484f80872e1cd8\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtAudioServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe <2>
(services.exe ->) (Realtek Semiconductor Corp.) [Fichier non signé] C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\Win32\mcafee-security-ft.exe
(svchost.exe ->) (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\mcafee-security.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1737_none_7dec0d8c7ca729de\TiWorker.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe [1253232 2021-03-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-424003697-1833591418-233594348-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2629520 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-424003697-1833591418-233594348-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [38274576 2022-08-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\104.0.5112.102\Installer\chrmstp.exe [2022-09-02] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {042D076C-661D-4C5E-8DAF-56FA6B55AD16} - System32\Tasks\GoogleUpdateTaskMachineCore{76E01C18-BA14-4329-BC80-BE62A28D668F} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-03] (Google LLC -> Google LLC)
Task: {0B057316-57DB-4B34-B136-888101EE1B50} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-08-12] (Piriform Software Ltd -> Piriform)
Task: {1215EF1D-B2BF-4AA9-9D59-1A2129369F7A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {137527D5-91AB-48DE-8389-C0A08CE78F6A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1774BB92-19A8-49F2-9EE8-1A982FA71E0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {180EFDFD-83FD-4E5B-BC29-C87614E743F7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-424003697-1833591418-233594348-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {2960836A-81BF-4710-923C-024D894D3572} - System32\Tasks\CCleanerSkipUAC - Claire => C:\Program Files\CCleaner\CCleaner.exe [31990800 2022-08-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2A07BE08-0AAA-4759-A4CC-A396094CD4BF} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe (Pas de fichier)
Task: {3473BD57-0633-48EF-8BFE-70EC16A35295} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {3A57905F-3D7D-4DC8-B2FC-D828874978F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4F9EA65A-9E28-4CA7-A54F-38787DADA7C8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [968264 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {531BBBDA-A43D-4E9A-9B87-A5A58D4A094C} - System32\Tasks\GoogleUpdateTaskMachineUA{19506319-74EF-4D38-8216-485379C2D27E} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-03] (Google LLC -> Google LLC)
Task: {5892EEFB-E92D-4430-88F3-C9048F886C51} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {5BD2CCB9-D39B-4B12-A8F9-A304AD13507C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {5CB0FCA8-620F-4AA8-B56D-04D98ADA220D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1930312 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7AD3284C-5D04-4280-8C26-5DB8745FE0A1} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2748A97-DABB-48E5-B92C-1C82E12EF63F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A45DC4C6-2981-4B22-9762-3DAA60A0D101} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B63AC87D-82FC-433B-96A0-7196BC2AB1A8} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {BAA54632-2C56-4F66-A52D-4457A0C02606} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C2E64EC2-C776-4993-B218-938C565EAE91} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D26C016C-124F-4F2D-AA2C-BE62D17841DE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [524360 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E6AA1EAD-BD07-46C2-BD39-1854DAA1AB99} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e86027eb-d233-4de3-8e87-0ca4be94000f}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ecc6fb4e-9eba-4e96-b9b6-e87599161eb4}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
FireFox:
========
FF DefaultProfile: kr4w9it2.default
FF ProfilePath: C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\kr4w9it2.default [2022-05-19]
FF ProfilePath: C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\6fmftpib.default-release [2022-09-02]
FF Homepage: Mozilla\Firefox\Profiles\6fmftpib.default-release -> www.google.fr
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default [2022-09-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-03]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [305664 2017-11-02] (Realtek Semiconductor Corp.) [Fichier non signé]
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncHelper.exe [3380624 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\OneDriveUpdaterService.exe [3800976 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
R2 RtkBtAudioServ; C:\WINDOWS\RtkBtAudioServ.exe [215992 2018-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1689984 2022-03-29] (WildTangent, Inc. -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [108992 2018-02-26] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 MpKslaa45d248; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BD33BED6-22E0-4C8E-B388-3E159FC40A89}\MpKslDrv.sys [141576 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-07-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-07-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-07-02] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-02 13:41 - 2022-09-02 13:43 - 000018963 _____ C:\Users\Claire\Downloads\FRST.txt
2022-09-02 13:40 - 2022-09-02 13:43 - 000000000 ____D C:\FRST
2022-09-02 13:37 - 2022-09-02 13:37 - 002371072 _____ (Farbar) C:\Users\Claire\Downloads\FRST64.exe
2022-09-02 10:40 - 2022-09-02 10:40 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-09-02 10:40 - 2022-09-02 10:40 - 000002908 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Claire
2022-09-02 10:40 - 2022-09-02 10:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-09-02 10:39 - 2022-09-02 10:41 - 000000000 ____D C:\Program Files\CCleaner
2022-09-02 10:30 - 2022-09-02 10:36 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-02 10:29 - 2022-09-02 10:30 - 050502592 _____ (Piriform Software Ltd) C:\Users\Claire\Downloads\ccsetup603.exe
2022-09-02 10:21 - 2022-09-02 10:21 - 000000000 ____D C:\Users\Claire\Downloads\Autoruns-14.0
2022-09-02 10:09 - 2022-09-02 10:10 - 002592317 _____ C:\Users\Claire\Downloads\Autoruns-14.0.zip
2022-08-11 20:00 - 2022-08-11 20:00 - 000331490 _____ C:\Users\Claire\Downloads\Document_de_Synthese_J00010186575_v3-1.pdf
2022-08-08 19:23 - 2022-08-08 19:23 - 000000000 ___HD C:\$WinREAgent
2022-08-03 18:57 - 2022-08-03 18:57 - 000040960 _____ C:\Users\Claire\Downloads\Modele-facture-excel-auto-entrepeneur.xls
2022-08-03 18:57 - 2022-08-03 18:57 - 000040960 _____ C:\Users\Claire\Downloads\Modele-facture-excel-auto-entrepeneur(1).xls
2022-08-03 18:50 - 2022-08-03 18:50 - 000331490 _____ C:\Users\Claire\Downloads\Document_de_Synthese_J00010186575_v3.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-02 13:32 - 2022-07-03 03:45 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-02 13:31 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-02 13:25 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-02 13:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-02 13:20 - 2022-07-03 09:41 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-02 13:05 - 2022-05-19 08:02 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-09-02 13:04 - 2022-07-03 04:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-09-02 13:04 - 2022-05-19 08:02 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-09-02 13:04 - 2022-05-19 08:02 - 000000000 ____D C:\Users\Claire\AppData\LocalLow\Mozilla
2022-09-02 12:53 - 2022-07-03 09:40 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-02 12:25 - 2022-05-23 19:35 - 000000000 ____D C:\Program Files\Microsoft Office
2022-09-02 12:25 - 2022-05-18 18:09 - 000000000 ____D C:\ProgramData\NVIDIA
2022-09-02 12:25 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-09-02 11:55 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-09-02 11:35 - 2022-05-23 21:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-09-02 11:26 - 2022-07-09 14:13 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-09-02 11:26 - 2022-07-09 13:40 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-09-02 11:22 - 2022-06-26 13:45 - 000000000 ___DC C:\WINDOWS\Panther
2022-09-02 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-09-02 10:46 - 2022-07-03 09:40 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{19506319-74EF-4D38-8216-485379C2D27E}
2022-09-02 10:46 - 2022-07-03 09:40 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{76E01C18-BA14-4329-BC80-BE62A28D668F}
2022-09-02 10:44 - 2022-07-03 08:40 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-09-02 10:44 - 2022-07-03 08:40 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d88e8335ef341e
2022-09-02 10:35 - 2022-05-23 21:04 - 144534560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-09-02 10:25 - 2022-05-19 07:47 - 000000000 ____D C:\Users\Claire\AppData\Local\D3DSCache
2022-09-02 10:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2022-09-02 08:39 - 2022-07-09 13:40 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-02 08:35 - 2022-05-19 00:34 - 000000000 __SHD C:\Users\Claire\IntelGraphicsProfiles
2022-08-16 18:18 - 2022-07-03 03:56 - 000000000 ____D C:\Users\Claire
2022-08-16 18:09 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-08-16 18:08 - 2022-05-19 08:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-08-11 19:55 - 2022-05-19 07:30 - 000000000 ___RD C:\Users\Claire\OneDrive
2022-08-11 19:43 - 2022-07-03 04:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-11 19:43 - 2022-05-18 18:08 - 000000000 ____D C:\Intel
2022-08-11 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-08-11 19:41 - 2022-07-03 03:44 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-08 20:39 - 2022-07-03 04:24 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-424003697-1833591418-233594348-1001
2022-08-08 19:18 - 2022-07-03 04:07 - 001841164 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-08 19:18 - 2019-12-07 16:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-08 19:18 - 2019-12-07 16:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-03 20:02 - 2022-05-19 00:34 - 000000000 ____D C:\Users\Claire\AppData\Local\Packages
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Claire (administrateur) sur LAPTOP-R1K6VQSS (HP HP Laptop 15-da0xxx) (02-09-2022 13:41:45)
Exécuté depuis C:\Users\Claire\Downloads
Profils chargés: Claire
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1766 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxEM.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Conexant Systems LLC -> Synaptics Incorporated.) C:\Windows\System32\SynAudSrv.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ba273d0ffb93e225\RstMwService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_7c484f80872e1cd8\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_31f4e71363bfa9b6\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtAudioServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe <2>
(services.exe ->) (Realtek Semiconductor Corp.) [Fichier non signé] C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\Win32\mcafee-security-ft.exe
(svchost.exe ->) (McAfee LLC.) C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\mcafee-security.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1737_none_7dec0d8c7ca729de\TiWorker.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe [1253232 2021-03-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-424003697-1833591418-233594348-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2629520 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-424003697-1833591418-233594348-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [38274576 2022-08-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\104.0.5112.102\Installer\chrmstp.exe [2022-09-02] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {042D076C-661D-4C5E-8DAF-56FA6B55AD16} - System32\Tasks\GoogleUpdateTaskMachineCore{76E01C18-BA14-4329-BC80-BE62A28D668F} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-03] (Google LLC -> Google LLC)
Task: {0B057316-57DB-4B34-B136-888101EE1B50} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-08-12] (Piriform Software Ltd -> Piriform)
Task: {1215EF1D-B2BF-4AA9-9D59-1A2129369F7A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {137527D5-91AB-48DE-8389-C0A08CE78F6A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1774BB92-19A8-49F2-9EE8-1A982FA71E0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {180EFDFD-83FD-4E5B-BC29-C87614E743F7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-424003697-1833591418-233594348-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {2960836A-81BF-4710-923C-024D894D3572} - System32\Tasks\CCleanerSkipUAC - Claire => C:\Program Files\CCleaner\CCleaner.exe [31990800 2022-08-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2A07BE08-0AAA-4759-A4CC-A396094CD4BF} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe (Pas de fichier)
Task: {3473BD57-0633-48EF-8BFE-70EC16A35295} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {3A57905F-3D7D-4DC8-B2FC-D828874978F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4F9EA65A-9E28-4CA7-A54F-38787DADA7C8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [968264 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {531BBBDA-A43D-4E9A-9B87-A5A58D4A094C} - System32\Tasks\GoogleUpdateTaskMachineUA{19506319-74EF-4D38-8216-485379C2D27E} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-03] (Google LLC -> Google LLC)
Task: {5892EEFB-E92D-4430-88F3-C9048F886C51} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {5BD2CCB9-D39B-4B12-A8F9-A304AD13507C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {5CB0FCA8-620F-4AA8-B56D-04D98ADA220D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1930312 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7AD3284C-5D04-4280-8C26-5DB8745FE0A1} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2748A97-DABB-48E5-B92C-1C82E12EF63F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A45DC4C6-2981-4B22-9762-3DAA60A0D101} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B63AC87D-82FC-433B-96A0-7196BC2AB1A8} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {BAA54632-2C56-4F66-A52D-4457A0C02606} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C2E64EC2-C776-4993-B218-938C565EAE91} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D26C016C-124F-4F2D-AA2C-BE62D17841DE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [524360 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E6AA1EAD-BD07-46C2-BD39-1854DAA1AB99} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e86027eb-d233-4de3-8e87-0ca4be94000f}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ecc6fb4e-9eba-4e96-b9b6-e87599161eb4}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
FireFox:
========
FF DefaultProfile: kr4w9it2.default
FF ProfilePath: C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\kr4w9it2.default [2022-05-19]
FF ProfilePath: C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\6fmftpib.default-release [2022-09-02]
FF Homepage: Mozilla\Firefox\Profiles\6fmftpib.default-release -> www.google.fr
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default [2022-09-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-03]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [305664 2017-11-02] (Realtek Semiconductor Corp.) [Fichier non signé]
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncHelper.exe [3380624 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\OneDriveUpdaterService.exe [3800976 2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
R2 RtkBtAudioServ; C:\WINDOWS\RtkBtAudioServ.exe [215992 2018-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1689984 2022-03-29] (WildTangent, Inc. -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-07-02] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [108992 2018-02-26] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 MpKslaa45d248; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BD33BED6-22E0-4C8E-B388-3E159FC40A89}\MpKslDrv.sys [141576 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-07-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-07-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-07-02] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-02 13:41 - 2022-09-02 13:43 - 000018963 _____ C:\Users\Claire\Downloads\FRST.txt
2022-09-02 13:40 - 2022-09-02 13:43 - 000000000 ____D C:\FRST
2022-09-02 13:37 - 2022-09-02 13:37 - 002371072 _____ (Farbar) C:\Users\Claire\Downloads\FRST64.exe
2022-09-02 10:40 - 2022-09-02 10:40 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-09-02 10:40 - 2022-09-02 10:40 - 000002908 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Claire
2022-09-02 10:40 - 2022-09-02 10:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-09-02 10:39 - 2022-09-02 10:41 - 000000000 ____D C:\Program Files\CCleaner
2022-09-02 10:30 - 2022-09-02 10:36 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-02 10:29 - 2022-09-02 10:30 - 050502592 _____ (Piriform Software Ltd) C:\Users\Claire\Downloads\ccsetup603.exe
2022-09-02 10:21 - 2022-09-02 10:21 - 000000000 ____D C:\Users\Claire\Downloads\Autoruns-14.0
2022-09-02 10:09 - 2022-09-02 10:10 - 002592317 _____ C:\Users\Claire\Downloads\Autoruns-14.0.zip
2022-08-11 20:00 - 2022-08-11 20:00 - 000331490 _____ C:\Users\Claire\Downloads\Document_de_Synthese_J00010186575_v3-1.pdf
2022-08-08 19:23 - 2022-08-08 19:23 - 000000000 ___HD C:\$WinREAgent
2022-08-03 18:57 - 2022-08-03 18:57 - 000040960 _____ C:\Users\Claire\Downloads\Modele-facture-excel-auto-entrepeneur.xls
2022-08-03 18:57 - 2022-08-03 18:57 - 000040960 _____ C:\Users\Claire\Downloads\Modele-facture-excel-auto-entrepeneur(1).xls
2022-08-03 18:50 - 2022-08-03 18:50 - 000331490 _____ C:\Users\Claire\Downloads\Document_de_Synthese_J00010186575_v3.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-02 13:32 - 2022-07-03 03:45 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-02 13:31 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-02 13:25 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-02 13:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-02 13:20 - 2022-07-03 09:41 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-02 13:05 - 2022-05-19 08:02 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-09-02 13:04 - 2022-07-03 04:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-09-02 13:04 - 2022-05-19 08:02 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-09-02 13:04 - 2022-05-19 08:02 - 000000000 ____D C:\Users\Claire\AppData\LocalLow\Mozilla
2022-09-02 12:53 - 2022-07-03 09:40 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-02 12:25 - 2022-05-23 19:35 - 000000000 ____D C:\Program Files\Microsoft Office
2022-09-02 12:25 - 2022-05-18 18:09 - 000000000 ____D C:\ProgramData\NVIDIA
2022-09-02 12:25 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-09-02 11:55 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-09-02 11:35 - 2022-05-23 21:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-09-02 11:26 - 2022-07-09 14:13 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-09-02 11:26 - 2022-07-09 13:40 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-09-02 11:22 - 2022-06-26 13:45 - 000000000 ___DC C:\WINDOWS\Panther
2022-09-02 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-09-02 10:46 - 2022-07-03 09:40 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{19506319-74EF-4D38-8216-485379C2D27E}
2022-09-02 10:46 - 2022-07-03 09:40 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{76E01C18-BA14-4329-BC80-BE62A28D668F}
2022-09-02 10:44 - 2022-07-03 08:40 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-09-02 10:44 - 2022-07-03 08:40 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d88e8335ef341e
2022-09-02 10:35 - 2022-05-23 21:04 - 144534560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-09-02 10:25 - 2022-05-19 07:47 - 000000000 ____D C:\Users\Claire\AppData\Local\D3DSCache
2022-09-02 10:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2022-09-02 08:39 - 2022-07-09 13:40 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-02 08:35 - 2022-05-19 00:34 - 000000000 __SHD C:\Users\Claire\IntelGraphicsProfiles
2022-08-16 18:18 - 2022-07-03 03:56 - 000000000 ____D C:\Users\Claire
2022-08-16 18:09 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-08-16 18:08 - 2022-05-19 08:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-08-11 19:55 - 2022-05-19 07:30 - 000000000 ___RD C:\Users\Claire\OneDrive
2022-08-11 19:43 - 2022-07-03 04:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-11 19:43 - 2022-05-18 18:08 - 000000000 ____D C:\Intel
2022-08-11 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-08-11 19:41 - 2022-07-03 03:44 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-08 20:39 - 2022-07-03 04:24 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-424003697-1833591418-233594348-1001
2022-08-08 19:18 - 2022-07-03 04:07 - 001841164 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-08 19:18 - 2019-12-07 16:49 - 000793016 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-08 19:18 - 2019-12-07 16:49 - 000150146 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-03 20:02 - 2022-05-19 00:34 - 000000000 ____D C:\Users\Claire\AppData\Local\Packages
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================