Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022
Exécuté par nicolehenri (administrateur) sur DESKTOP-LGDTLBP (LENOVO 7827AB2) (13-09-2022 17:04:35)
Exécuté depuis C:\Users\nicol\OneDrive\Desktop
Profils chargés: nicolehenri
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1889 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(services.exe ->) () [Fichier non signé] C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\ElevationService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (LENOVO -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\ProgramData\Wondershare\Service\InstallAssistService.exe
(services.exe ->) (wondershare) [Fichier non signé] C:\Program Files (x86)\Wondershare\drfone\WsidService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.543.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-07-28] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [SynLenovoHelper] => C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [146600 2015-07-28] (Synaptics Incorporated -> Synaptics)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12632168 2011-07-19] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-3363349640-3431665104-818008575-1001\...\Run: [utweb] => C:\Users\nicol\AppData\Roaming\uTorrent Web\utweb.exe [6282784 2022-03-26] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-3363349640-3431665104-818008575-1001\...\Run: [MicrosoftEdgeAutoLaunch_B9B257C7C4ABB38D87EB5195476F971F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3795360 2022-09-08] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C211 Status Monitor: C:\WINDOWS\system32\hpinkstsC211LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 2540 series): C:\WINDOWS\system32\HPDiscoPMC211.dll [763912 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\105.0.5195.102\Installer\chrmstp.exe [2022-09-07] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Préchargeur.lnk [2021-11-20]
ShortcutTarget: WinZip Préchargeur.lnk -> C:\Program Files\WinZip\WzPreloader.exe (Corel Corporation -> WinZip Computing)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {312E0CBA-645A-4214-B257-7CC575CFE485} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {38E13882-F000-4432-84D3-653A92F9495F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {53C08D2C-9DC2-4A84-95CE-8BBF7756AA32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {97A274A0-8C3E-4A37-A8FB-9D979960FAC4} - System32\Tasks\GoogleUpdateTaskMachineCore{3CA60AF4-70A1-4BAD-9BE6-074B0C3208C2} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-21] (Google LLC -> Google LLC)
Task: {CBE1267C-5543-4F61-A39C-1C5AC60C79D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D5B464CD-C892-4C83-ADAF-AB3D71800016} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DD10741E-EBA7-4802-BA8D-AE9132E90B24} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {E825F2B8-395C-4D7A-9F51-16534D887D08} - System32\Tasks\GoogleUpdateTaskMachineUA{1A9577C2-CF17-43C0-82CE-951A708E93C0} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-21] (Google LLC -> Google LLC)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fb1f8592-5061-4407-ab4a-0494011e912f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\nicol\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-13]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\nicol\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-09-03]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 3bq0qpda.default
FF ProfilePath: C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\3bq0qpda.default [2022-02-11]
FF ProfilePath: C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release [2022-09-13]
FF Session Restore: Mozilla\Firefox\Profiles\f0are5tr.default-release -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\f0are5tr.default-release -> hxxps://mail.google.com; hxxps://www.gametwist.com; hxxps://calendar.google.com; hxxps://www.youtube.com; hxxps://fr.aliexpress.com; hxxps://www.mp3juices.cc; hxxps://www.systemed.fr; hxxps://forum.geekzone.fr; hxxps://www.lemonde.fr; hxxps://twitter.com
FF Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\firefox@ghostery.com.xpi [2022-07-13]
FF Extension: (LastPass: Free Password Manager) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\support@lastpass.com.xpi [2022-08-06]
FF Extension: (uBlock Origin) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-09-06]
FF Extension: (Ouvre Gmail dans un nouvel onglet) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{07abc6fc-2c64-4c13-b9aa-73325b0b1163}.xpi [2021-10-21]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-09-03]
FF Extension: (Boomerang for Gmail) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{65e41d20-f092-41b7-bb83-c6e8a9ab0f57}.xpi [2022-02-02] [UpdateUrl:hxxps://www.boomeranggmail.com/firefox/updates.json]
FF Extension: (Total Adblock - Ad Blocker) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{ae283ad9-d906-495c-8a6d-80cb47cdafe4}.xpi [2022-08-28]
FF Extension: (Wind Blocker) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{f86474db-5ef3-482a-b4d9-d8a33ea752e4}.xpi [2021-10-21]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\nicol\AppData\Local\Google\Chrome\User Data\Default [2022-09-13]
CHR Notifications: Default -> hxxps://www.floabank.fr
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\nicol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-29]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 DFWSIDService; C:\Program Files (x86)\Wondershare\drfone\WsidService.exe [1051648 2021-12-09] (wondershare) [Fichier non signé]
R2 ElevationService; C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\ElevationService.exe [913408 2021-12-14] () [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [262880 2021-12-09] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-11-20] (Bitdefender SRL -> Bitdefender)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 ecnssndis; C:\WINDOWS\System32\Drivers\wwuss64.sys [26664 2011-06-13] (Ericsson AB -> Ericsson AB)
S3 ecnssndisfltr; C:\WINDOWS\System32\Drivers\wwussf64.sys [30248 2011-06-13] (Ericsson AB -> Ericsson AB)
S3 l36wgps; C:\WINDOWS\System32\drivers\l36wgps64.sys [101416 2011-07-01] (Ericsson AB -> Ericsson AB)
S3 Mbm3CBus; C:\WINDOWS\System32\drivers\Mbm3CBus.sys [419400 2011-04-29] (MCCI Corporation -> MCCI Corporation)
S3 Mbm3DevMt; C:\WINDOWS\System32\drivers\Mbm3DevMt.sys [430664 2011-04-29] (MCCI Corporation -> MCCI Corporation)
S3 qcfilterlno2k; C:\WINDOWS\System32\drivers\qcfilterlno2k.sys [6400 2011-05-23] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 qcusbserlno2k; C:\WINDOWS\System32\drivers\qcusbserlno2k.sys [231040 2011-05-23] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
R2 rimmptsk; C:\WINDOWS\System32\drivers\rimmpx64.sys [67072 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rimspci; C:\WINDOWS\System32\drivers\rimspe64.sys [61952 2009-10-26] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rimsptsk; C:\WINDOWS\System32\drivers\rimspx64.sys [54784 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rismxdp; C:\WINDOWS\System32\drivers\rixdpx64.sys [57856 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rixdpcie; C:\WINDOWS\System32\drivers\rixdpe64.sys [55808 2009-09-28] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [87168 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [43648 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-09-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94480 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-13 11:54 - 2022-09-13 11:54 - 000070135 _____ C:\Users\nicol\Downloads\Ticket de caisse_10092022-143155.pdf
2022-09-13 10:42 - 2022-09-13 10:42 - 000209231 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-3.pdf
2022-09-12 16:31 - 2022-09-12 16:31 - 000012384 _____ C:\Users\nicol\Downloads\sfr-49c93a38-7733-44dc-894f-e510554879bd-pdf-devis.pdf
2022-09-12 08:56 - 2022-09-12 08:56 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-3.pdf
2022-09-11 18:58 - 2022-09-11 18:58 - 000140802 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-2.pdf
2022-09-11 18:49 - 2022-09-11 18:49 - 000140798 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-1.pdf
2022-09-11 18:33 - 2022-09-11 18:33 - 000140797 _____ C:\Users\nicol\Downloads\076530463620220909173227005978.pdf
2022-09-11 11:56 - 2022-09-13 17:07 - 000000000 ____D C:\FRST
2022-09-07 07:19 - 2022-09-13 16:53 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-06 10:43 - 2022-09-06 10:43 - 000069935 _____ C:\Users\nicol\Downloads\Ticket de caisse_02092022-094008.pdf
2022-09-03 11:31 - 2022-09-03 11:32 - 000000000 ____D C:\Program Files\Malwarebytes
2022-09-02 18:15 - 2022-09-02 18:15 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA-2.pdf
2022-09-02 18:12 - 2022-09-02 18:12 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-2.pdf
2022-08-31 17:56 - 2022-08-31 17:56 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA-1.pdf
2022-08-31 17:56 - 2022-08-31 17:56 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA.pdf
2022-08-31 17:55 - 2022-08-31 17:55 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-1.pdf
2022-08-31 17:55 - 2022-08-31 17:55 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV.pdf
2022-08-30 16:20 - 2022-08-30 16:20 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{1A9577C2-CF17-43C0-82CE-951A708E93C0}
2022-08-30 16:20 - 2022-08-30 16:20 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{3CA60AF4-70A1-4BAD-9BE6-074B0C3208C2}
2022-08-28 11:08 - 2022-08-28 11:08 - 003312678 _____ C:\Users\nicol\Downloads\PiRUq4kz.mp3.part
2022-08-20 17:42 - 2022-08-20 17:42 - 000169561 _____ C:\Users\nicol\Downloads\sfr-facture-0466539187-0.pdf
2022-08-14 09:10 - 2022-08-14 09:10 - 000000000 ____D C:\Users\nicol\AppData\LocalLow\webviewdata
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-13 17:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-13 17:10 - 2021-10-21 19:37 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-13 17:10 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-13 17:04 - 2021-12-14 11:18 - 000000000 ____D C:\Users\Administrateur.DESKTOP-LGDTLBP
2022-09-13 17:04 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-13 16:55 - 2021-10-21 10:13 - 000000000 ____D C:\Users\nicol\AppData\LocalLow\Mozilla
2022-09-13 16:54 - 2021-10-21 09:57 - 000000000 ____D C:\Users\nicol
2022-09-13 16:53 - 2021-10-21 10:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-09-13 16:53 - 2021-10-21 08:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-13 16:53 - 2021-10-21 08:50 - 000008192 ___SH C:\DumpStack.log.tmp
2022-09-13 16:53 - 2021-10-21 08:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-11 09:48 - 2021-10-21 08:54 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-09-07 17:15 - 2022-01-18 12:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-09-07 17:14 - 2021-10-21 10:13 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-09-07 09:32 - 2021-10-21 19:40 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-07 09:08 - 2021-10-21 08:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-09-06 16:56 - 2021-10-21 10:06 - 000000000 ____D C:\Users\nicol\AppData\Local\Packages
2022-09-03 17:43 - 2021-10-21 12:43 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{49167EEA-6E7E-44EF-910C-D50E429F6C92}
2022-09-03 13:15 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-09-03 12:40 - 2021-11-23 20:00 - 000000000 ____D C:\Users\nicol\AppData\Local\CrashDumps
2022-09-03 12:25 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-09-03 11:22 - 2021-12-28 13:36 - 000000000 ____D C:\Users\nicol\AppData\Roaming\vlc
2022-09-02 17:41 - 2022-06-16 17:44 - 000002462 _____ C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-02 17:41 - 2021-12-12 21:38 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3363349640-3431665104-818008575-1001
2022-09-02 17:41 - 2021-10-21 10:11 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3363349640-3431665104-818008575-1001
2022-08-23 07:24 - 2021-10-21 08:53 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 07:24 - 2021-10-21 08:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-17 10:23 - 2021-10-21 09:10 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-17 10:23 - 2019-12-07 16:50 - 000792972 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-17 10:23 - 2019-12-07 16:50 - 000150102 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-17 10:23 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par nicolehenri (administrateur) sur DESKTOP-LGDTLBP (LENOVO 7827AB2) (13-09-2022 17:04:35)
Exécuté depuis C:\Users\nicol\OneDrive\Desktop
Profils chargés: nicolehenri
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1889 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(services.exe ->) () [Fichier non signé] C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\ElevationService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (LENOVO -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\ProgramData\Wondershare\Service\InstallAssistService.exe
(services.exe ->) (wondershare) [Fichier non signé] C:\Program Files (x86)\Wondershare\drfone\WsidService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.543.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-07-28] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [SynLenovoHelper] => C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe [146600 2015-07-28] (Synaptics Incorporated -> Synaptics)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12632168 2011-07-19] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-3363349640-3431665104-818008575-1001\...\Run: [utweb] => C:\Users\nicol\AppData\Roaming\uTorrent Web\utweb.exe [6282784 2022-03-26] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-3363349640-3431665104-818008575-1001\...\Run: [MicrosoftEdgeAutoLaunch_B9B257C7C4ABB38D87EB5195476F971F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3795360 2022-09-08] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C211 Status Monitor: C:\WINDOWS\system32\hpinkstsC211LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 2540 series): C:\WINDOWS\system32\HPDiscoPMC211.dll [763912 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\105.0.5195.102\Installer\chrmstp.exe [2022-09-07] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Préchargeur.lnk [2021-11-20]
ShortcutTarget: WinZip Préchargeur.lnk -> C:\Program Files\WinZip\WzPreloader.exe (Corel Corporation -> WinZip Computing)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {312E0CBA-645A-4214-B257-7CC575CFE485} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {38E13882-F000-4432-84D3-653A92F9495F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {53C08D2C-9DC2-4A84-95CE-8BBF7756AA32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {97A274A0-8C3E-4A37-A8FB-9D979960FAC4} - System32\Tasks\GoogleUpdateTaskMachineCore{3CA60AF4-70A1-4BAD-9BE6-074B0C3208C2} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-21] (Google LLC -> Google LLC)
Task: {CBE1267C-5543-4F61-A39C-1C5AC60C79D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D5B464CD-C892-4C83-ADAF-AB3D71800016} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DD10741E-EBA7-4802-BA8D-AE9132E90B24} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {E825F2B8-395C-4D7A-9F51-16534D887D08} - System32\Tasks\GoogleUpdateTaskMachineUA{1A9577C2-CF17-43C0-82CE-951A708E93C0} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-21] (Google LLC -> Google LLC)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fb1f8592-5061-4407-ab4a-0494011e912f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\nicol\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-13]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\nicol\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-09-03]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 3bq0qpda.default
FF ProfilePath: C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\3bq0qpda.default [2022-02-11]
FF ProfilePath: C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release [2022-09-13]
FF Session Restore: Mozilla\Firefox\Profiles\f0are5tr.default-release -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\f0are5tr.default-release -> hxxps://mail.google.com; hxxps://www.gametwist.com; hxxps://calendar.google.com; hxxps://www.youtube.com; hxxps://fr.aliexpress.com; hxxps://www.mp3juices.cc; hxxps://www.systemed.fr; hxxps://forum.geekzone.fr; hxxps://www.lemonde.fr; hxxps://twitter.com
FF Extension: (Ghostery – Bloqueur de publicité protégeant la vie privée) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\firefox@ghostery.com.xpi [2022-07-13]
FF Extension: (LastPass: Free Password Manager) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\support@lastpass.com.xpi [2022-08-06]
FF Extension: (uBlock Origin) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-09-06]
FF Extension: (Ouvre Gmail dans un nouvel onglet) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{07abc6fc-2c64-4c13-b9aa-73325b0b1163}.xpi [2021-10-21]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-09-03]
FF Extension: (Boomerang for Gmail) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{65e41d20-f092-41b7-bb83-c6e8a9ab0f57}.xpi [2022-02-02] [UpdateUrl:hxxps://www.boomeranggmail.com/firefox/updates.json]
FF Extension: (Total Adblock - Ad Blocker) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{ae283ad9-d906-495c-8a6d-80cb47cdafe4}.xpi [2022-08-28]
FF Extension: (Wind Blocker) - C:\Users\nicol\AppData\Roaming\Mozilla\Firefox\Profiles\f0are5tr.default-release\Extensions\{f86474db-5ef3-482a-b4d9-d8a33ea752e4}.xpi [2021-10-21]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\nicol\AppData\Local\Google\Chrome\User Data\Default [2022-09-13]
CHR Notifications: Default -> hxxps://www.floabank.fr
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\nicol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-29]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 DFWSIDService; C:\Program Files (x86)\Wondershare\drfone\WsidService.exe [1051648 2021-12-09] (wondershare) [Fichier non signé]
R2 ElevationService; C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\ElevationService.exe [913408 2021-12-14] () [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [262880 2021-12-09] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-11-20] (Bitdefender SRL -> Bitdefender)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 ecnssndis; C:\WINDOWS\System32\Drivers\wwuss64.sys [26664 2011-06-13] (Ericsson AB -> Ericsson AB)
S3 ecnssndisfltr; C:\WINDOWS\System32\Drivers\wwussf64.sys [30248 2011-06-13] (Ericsson AB -> Ericsson AB)
S3 l36wgps; C:\WINDOWS\System32\drivers\l36wgps64.sys [101416 2011-07-01] (Ericsson AB -> Ericsson AB)
S3 Mbm3CBus; C:\WINDOWS\System32\drivers\Mbm3CBus.sys [419400 2011-04-29] (MCCI Corporation -> MCCI Corporation)
S3 Mbm3DevMt; C:\WINDOWS\System32\drivers\Mbm3DevMt.sys [430664 2011-04-29] (MCCI Corporation -> MCCI Corporation)
S3 qcfilterlno2k; C:\WINDOWS\System32\drivers\qcfilterlno2k.sys [6400 2011-05-23] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 qcusbserlno2k; C:\WINDOWS\System32\drivers\qcusbserlno2k.sys [231040 2011-05-23] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
R2 rimmptsk; C:\WINDOWS\System32\drivers\rimmpx64.sys [67072 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rimspci; C:\WINDOWS\System32\drivers\rimspe64.sys [61952 2009-10-26] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rimsptsk; C:\WINDOWS\System32\drivers\rimspx64.sys [54784 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rismxdp; C:\WINDOWS\System32\drivers\rixdpx64.sys [57856 2009-09-03] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rixdpcie; C:\WINDOWS\System32\drivers\rixdpe64.sys [55808 2009-09-28] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [87168 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [43648 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-09-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94480 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-13 11:54 - 2022-09-13 11:54 - 000070135 _____ C:\Users\nicol\Downloads\Ticket de caisse_10092022-143155.pdf
2022-09-13 10:42 - 2022-09-13 10:42 - 000209231 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-3.pdf
2022-09-12 16:31 - 2022-09-12 16:31 - 000012384 _____ C:\Users\nicol\Downloads\sfr-49c93a38-7733-44dc-894f-e510554879bd-pdf-devis.pdf
2022-09-12 08:56 - 2022-09-12 08:56 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-3.pdf
2022-09-11 18:58 - 2022-09-11 18:58 - 000140802 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-2.pdf
2022-09-11 18:49 - 2022-09-11 18:49 - 000140798 _____ C:\Users\nicol\Downloads\076530463620220909173227005978-1.pdf
2022-09-11 18:33 - 2022-09-11 18:33 - 000140797 _____ C:\Users\nicol\Downloads\076530463620220909173227005978.pdf
2022-09-11 11:56 - 2022-09-13 17:07 - 000000000 ____D C:\FRST
2022-09-07 07:19 - 2022-09-13 16:53 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-06 10:43 - 2022-09-06 10:43 - 000069935 _____ C:\Users\nicol\Downloads\Ticket de caisse_02092022-094008.pdf
2022-09-03 11:31 - 2022-09-03 11:32 - 000000000 ____D C:\Program Files\Malwarebytes
2022-09-02 18:15 - 2022-09-02 18:15 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA-2.pdf
2022-09-02 18:12 - 2022-09-02 18:12 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-2.pdf
2022-08-31 17:56 - 2022-08-31 17:56 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA-1.pdf
2022-08-31 17:56 - 2022-08-31 17:56 - 000316521 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_MANDAT-SEPA.pdf
2022-08-31 17:55 - 2022-08-31 17:55 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV-1.pdf
2022-08-31 17:55 - 2022-08-31 17:55 - 000867859 _____ C:\Users\nicol\Downloads\Document_CL00004349_E000003289__electronicSignature_CPV.pdf
2022-08-30 16:20 - 2022-08-30 16:20 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{1A9577C2-CF17-43C0-82CE-951A708E93C0}
2022-08-30 16:20 - 2022-08-30 16:20 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{3CA60AF4-70A1-4BAD-9BE6-074B0C3208C2}
2022-08-28 11:08 - 2022-08-28 11:08 - 003312678 _____ C:\Users\nicol\Downloads\PiRUq4kz.mp3.part
2022-08-20 17:42 - 2022-08-20 17:42 - 000169561 _____ C:\Users\nicol\Downloads\sfr-facture-0466539187-0.pdf
2022-08-14 09:10 - 2022-08-14 09:10 - 000000000 ____D C:\Users\nicol\AppData\LocalLow\webviewdata
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-13 17:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-13 17:10 - 2021-10-21 19:37 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-13 17:10 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-13 17:04 - 2021-12-14 11:18 - 000000000 ____D C:\Users\Administrateur.DESKTOP-LGDTLBP
2022-09-13 17:04 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-13 16:55 - 2021-10-21 10:13 - 000000000 ____D C:\Users\nicol\AppData\LocalLow\Mozilla
2022-09-13 16:54 - 2021-10-21 09:57 - 000000000 ____D C:\Users\nicol
2022-09-13 16:53 - 2021-10-21 10:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-09-13 16:53 - 2021-10-21 08:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-13 16:53 - 2021-10-21 08:50 - 000008192 ___SH C:\DumpStack.log.tmp
2022-09-13 16:53 - 2021-10-21 08:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-11 09:48 - 2021-10-21 08:54 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-09-07 17:15 - 2022-01-18 12:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-09-07 17:14 - 2021-10-21 10:13 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-09-07 09:32 - 2021-10-21 19:40 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-07 09:08 - 2021-10-21 08:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-09-06 16:56 - 2021-10-21 10:06 - 000000000 ____D C:\Users\nicol\AppData\Local\Packages
2022-09-03 17:43 - 2021-10-21 12:43 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{49167EEA-6E7E-44EF-910C-D50E429F6C92}
2022-09-03 13:15 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-09-03 12:40 - 2021-11-23 20:00 - 000000000 ____D C:\Users\nicol\AppData\Local\CrashDumps
2022-09-03 12:25 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-09-03 11:22 - 2021-12-28 13:36 - 000000000 ____D C:\Users\nicol\AppData\Roaming\vlc
2022-09-02 17:41 - 2022-06-16 17:44 - 000002462 _____ C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-02 17:41 - 2021-12-12 21:38 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3363349640-3431665104-818008575-1001
2022-09-02 17:41 - 2021-10-21 10:11 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3363349640-3431665104-818008575-1001
2022-08-23 07:24 - 2021-10-21 08:53 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 07:24 - 2021-10-21 08:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-17 10:23 - 2021-10-21 09:10 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-17 10:23 - 2019-12-07 16:50 - 000792972 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-17 10:23 - 2019-12-07 16:50 - 000150102 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-17 10:23 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================