Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022
Exécuté par LONOVO (administrateur) sur DESKTOP-MFROBE8 (LENOVO 81YH) (15-09-2022 10:13:58)
Exécuté depuis C:\Users\LONOVO\Downloads
Profils chargés: LONOVO
Plate-forme: Microsoft Windows 11 Professionnel Version 21H2 22000.978 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\WindowsApps\MicrosoftTeams_22249.1200.1551.1009_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\105.0.1343.33\msedgewebview2.exe <13>
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxCUIServiceN.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxEMN.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\FnHotkeyUtility.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <26>
(explorer.exe ->) (Lavasoft Software Canada Inc. -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_69d915519e0a2ac8\aesm_service.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxCUIServiceN.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_55bf1834336e8765\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_27e3f997fcc85a29\IntelCpHDCPSvc.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe
(Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe <6>
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.543.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.625.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1158944 2020-09-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UD.exe [538144 2020-02-28] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [9250224 2022-04-13] (Lavasoft Software Canada Inc. -> Lavasoft)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [MicrosoftEdgeAutoLaunch_F5FE1831AEFDCDBE409739F776CEEE27] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3795360 2022-09-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [AvastSvcXoF] => C:\ProgramData\AvastSvcXoF\AvastSvc.exe [61648 2020-03-20] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\MountPoints2: {131c91a3-0ead-11ed-a259-e02be97ee4c8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\MountPoints2: {30ab550c-2f55-11ed-a25d-c1cb1a332652} - "E:\EMP_UDSe.exe" /autorun
HKLM\...\Print\Monitors\HP 8711 Status Monitor: C:\WINDOWS\system32\hpinksts8711LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\105.0.5195.102\Installer\chrmstp.exe [2022-09-07] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {09890617-0760-422C-9623-576089D0DFD6} - System32\Tasks\GoogleUpdateTaskMachineCore{00C6D1C5-3E52-430D-AA2D-1CEFF1AA65B6} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-08-02] (Google LLC -> Google LLC)
Task: {0B442FA2-7780-4950-A2AD-1EEB64E2A971} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23706576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {11610C47-CEE1-4109-A648-489F9750742B} - System32\Tasks\GoogleUpdateTaskMachineUA{0AC8282B-291D-4248-B522-26B9A3BB3AF8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-08-02] (Google LLC -> Google LLC)
Task: {125E1677-BD21-40FA-A448-CF11B9543F61} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23706576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {15B9D5FB-09AB-4864-BE3B-D8D5D16ECA8B} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64408 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {28256E57-B2F1-48F3-A513-232BE9E066F5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8516576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E975218-EA56-4548-842F-D6B6AB076570} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142232 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B630B4F-C0C3-4133-8B1E-5F2A080F60C7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1555696 2022-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {A2150CA9-5608-49EB-AE05-957949454552} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B28BD754-40B2-4B9C-8DA6-6AB20DE42E5F} - System32\Tasks\Opera scheduled Autoupdate 1649873076 => C:\Users\LONOVO\AppData\Local\Programs\Opera\launcher.exe [2538448 2022-09-05] (Opera Norway AS -> Opera Software)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {D239CC5D-8EDB-4DA3-BC7F-29741FCCF490} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D59282F4-595C-4FA4-8FDE-F528E7AF8ABD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D78B4119-100C-43DD-AC24-96A0FC79C59B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8516576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D876EC26-59D1-4DF7-AA19-8E294853554A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D9803F9E-4606-4215-AA49-B6E7067A312B} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [4119200 2021-12-06] (HP Inc. -> Hewlett-Packard Co.)
Task: {F7409E17-E63C-4D02-BB02-035084C39649} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142232 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1d555eda-216e-4e5b-a112-fd71ab28aaaf}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\LONOVO\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-15]
Edge HomePage: Default -> hxxps://go-go.tech?fr=ps&gp=496724&altserp=1
Edge StartupUrls: Default -> "hxxps://go-go.tech?fr=ps&gp=496724&altserp=1"
Edge DefaultSearchURL: Default -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496724&altserp=1
Edge DefaultSearchKeyword: Default -> go go tech search
Edge DefaultSuggestURL: Default -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
Edge Profile: C:\Users\LONOVO\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-09-15]
Edge HomePage: Profile 1 -> hxxps://go-go.tech?fr=ps&gp=496724&altserp=1
Edge StartupUrls: Profile 1 -> "hxxps://go-go.tech?fr=ps&gp=496724&altserp=1"
Edge DefaultSearchURL: Profile 1 -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496724&altserp=1
Edge DefaultSearchKeyword: Profile 1 -> Go Go Tech Search
Edge DefaultSuggestURL: Profile 1 -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default [2022-09-15]
CHR HomePage: Default -> hxxps://go-go.tech?fr=ps&gp=496723&altserp=1
CHR StartupUrls: Default -> "hxxps://go-go.tech?fr=ps&gp=496723&altserp=1"
CHR DefaultSearchURL: Default -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496723&altserp=1
CHR DefaultSearchKeyword: Default -> go go tech search
CHR DefaultSuggestURL: Default -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
CHR Extension: (Google Docs hors connexion) - C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-02]
Opera:
=======
OPR Profile: C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable [2022-09-15]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-05-09]
OPR Extension: (Opera Crypto Wallet) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-06-16]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-05-09]
Brave:
=======
BRA Profile: C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-08-28]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-08-28]
BRA Extension: (Brave NTP background images) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-08-28]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-08-28]
BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2022-08-28]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2022-08-28]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-08-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2022-08-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-08-28]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172264 2022-08-03] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12126112 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-04-13] (Lavasoft Software Canada Inc. -> )
S3 dcsvc; C:\WINDOWS\system32\dcsvc.dll [831488 2022-09-14] (Microsoft Windows -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [1928648 2020-05-19] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe [165920 2020-02-28] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [334728 2020-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe [241904 2022-08-12] (Lenovo -> Lenovo(beijing) Limited)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1832944 2021-08-12] (Lenovo -> Lenovo(beijing) Limited)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [245208 2022-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-04-13] (Lavasoft Software Canada Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2022-04-13] (Bitdefender SRL -> Bitdefender)
R3 BHTPCRDR; C:\WINDOWS\System32\drivers\bhtpcrdr.sys [184416 2020-08-31] (BayHub Technology Inc. -> BayHubTech/O2Micro)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [98304 2021-06-05] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 eppvad_simple; C:\WINDOWS\system32\drivers\EMP_UDAU.sys [23040 2011-06-07] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R3 iaLPSS2_GPIO2_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_icl.inf_amd64_90beccc7e046abab\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-27] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_icl.inf_amd64_c8c0638291b9b209\iaLPSS2_I2C_ICL.sys [200456 2020-04-27] (Intel Corporation -> Intel Corporation)
R3 MpKsl765795d6; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5D44A5D2-E1B3-419B-96F0-06F0FEF82AC1}\MpKslDrv.sys [228600 2022-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-09-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94480 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
NETSVC: DcSvc -> C:\Windows\system32\dcsvc.dll (Microsoft Corporation)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-15 10:12 - 2022-09-15 10:12 - 002371072 _____ (Farbar) C:\Users\LONOVO\Downloads\FRST64 (2).exe
2022-09-15 10:11 - 2022-09-15 10:12 - 000034152 _____ C:\Users\LONOVO\Downloads\Addition.txt
2022-09-15 10:10 - 2022-09-15 10:14 - 000023148 _____ C:\Users\LONOVO\Downloads\FRST.txt
2022-09-15 10:09 - 2022-09-15 10:14 - 000000000 ____D C:\FRST
2022-09-15 10:09 - 2022-09-15 10:09 - 002371072 _____ (Farbar) C:\Users\LONOVO\Downloads\FRST64 (1).exe
2022-09-14 08:22 - 2022-09-14 08:22 - 000015030 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-09-14 08:21 - 2022-09-14 08:21 - 000335872 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-09-14 08:20 - 2022-09-14 08:20 - 000000000 ___HD C:\$WinREAgent
2022-09-13 17:10 - 2022-09-13 17:11 - 000009589 _____ C:\Users\LONOVO\OneDrive\Documents\Book (1).xlsx
2022-09-13 17:07 - 2022-09-13 17:07 - 000009007 _____ C:\Users\LONOVO\OneDrive\Documents\Book.xlsx
2022-09-12 17:29 - 2022-09-12 17:30 - 001649778 _____ C:\Users\LONOVO\Downloads\BILANS EN COURS (1).rar
2022-09-11 13:36 - 2022-09-11 13:36 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\com.adobe.dunamis
2022-09-09 15:45 - 2022-09-09 15:45 - 002525725 _____ C:\Users\LONOVO\Downloads\DOSSIER SAMASSI.rar
2022-09-09 15:45 - 2022-09-09 15:45 - 001649778 _____ C:\Users\LONOVO\Downloads\BILANS EN COURS.rar
2022-09-08 16:26 - 2022-09-08 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Projector
2022-09-08 16:26 - 2022-09-08 16:26 - 000000000 ____D C:\Program Files (x86)\EPSON Projector
2022-09-08 16:26 - 2011-06-07 18:56 - 000023040 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\Drivers\EMP_UDAU.sys
2022-09-07 15:15 - 2022-09-07 15:15 - 002106404 _____ C:\Users\LONOVO\Downloads\fwdlesbilansquevousneretrouver.zip
2022-09-06 17:03 - 2022-09-06 17:06 - 1065811979 _____ C:\Users\LONOVO\Downloads\VISA ET DOSSIER.rar
2022-09-05 08:40 - 2022-09-05 08:40 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\Sublime Text
2022-09-05 08:40 - 2022-09-05 08:40 - 000000000 ____D C:\Users\LONOVO\AppData\Local\Sublime Text
2022-09-05 08:38 - 2022-09-05 08:38 - 000000913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text.lnk
2022-09-05 08:38 - 2022-09-05 08:38 - 000000000 ____D C:\Program Files\Sublime Text
2022-09-05 08:32 - 2022-09-05 08:32 - 019148248 _____ (Sublime HQ Pty Ltd ) C:\Users\LONOVO\Downloads\sublime_text_build_4126_x64_setup.exe
2022-09-01 15:50 - 2022-09-01 15:50 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV (2).torrent
2022-09-01 15:47 - 2022-09-01 15:47 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV (1).torrent
2022-08-31 10:40 - 2022-08-31 10:40 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV.torrent
2022-08-28 15:03 - 2022-08-28 15:03 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (3).torrent
2022-08-28 15:02 - 2022-08-28 15:02 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (2).torrent
2022-08-28 15:02 - 2022-08-28 15:02 - 000000000 ____D C:\Users\LONOVO\AppData\LocalLow\uTorrent.WebView2
2022-08-28 15:01 - 2022-09-05 17:04 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\uTorrent
2022-08-28 15:01 - 2022-08-28 15:01 - 000000877 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2022-08-28 14:59 - 2022-08-28 14:59 - 001763848 _____ ( ) C:\Users\LONOVO\Downloads\uTorrent.exe
2022-08-28 14:51 - 2022-08-28 14:56 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2022-08-28 14:51 - 2022-08-28 14:51 - 001211024 _____ (BraveSoftware Inc.) C:\Users\LONOVO\Downloads\BraveBrowserSetup-CLU884 (1).exe
2022-08-28 14:47 - 2022-08-28 14:47 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (1).torrent
2022-08-28 14:44 - 2022-08-28 14:44 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV.torrent
2022-08-26 14:18 - 2022-08-26 14:18 - 001904025 _____ C:\Users\LONOVO\Downloads\ENG_A2_24 Eating out (1).pdf
2022-08-26 10:54 - 2022-08-26 10:54 - 000054226 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E12 VOSTFR HDTV (1).torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000057387 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E17 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000054366 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E16 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000048127 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E18 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000030849 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E15 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000029647 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E19 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000057209 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E13 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000054226 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E12 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000045968 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E14 VOSTFR HDTV.torrent
2022-08-26 10:47 - 2022-08-26 10:47 - 000056405 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E05 VOSTFR HDTV.torrent
2022-08-24 09:10 - 2022-08-24 09:10 - 035347155 _____ C:\Users\LONOVO\Downloads\com.babbel.mobile.android.en_21080099_55116770.zip
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-15 10:12 - 2021-06-05 12:09 - 000000000 ____D C:\WINDOWS\INF
2022-09-15 10:08 - 2022-08-02 08:38 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-15 10:05 - 2021-06-05 12:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-15 09:35 - 2022-04-13 21:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-15 09:20 - 2021-06-05 12:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-15 09:20 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-15 09:19 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-09-15 09:09 - 2022-03-25 19:12 - 000000000 ___RD C:\Users\LONOVO\OneDrive
2022-09-15 09:09 - 2022-03-25 12:27 - 000000000 __SHD C:\Users\LONOVO\IntelGraphicsProfiles
2022-09-14 14:12 - 2022-03-25 19:10 - 000000000 ____D C:\Users\LONOVO\AppData\Local\Packages
2022-09-14 08:34 - 2022-04-13 21:08 - 001709664 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-09-14 08:34 - 2021-06-05 18:15 - 000772574 _____ C:\WINDOWS\system32\perfh00C.dat
2022-09-14 08:34 - 2021-06-05 18:15 - 000148820 _____ C:\WINDOWS\system32\perfc00C.dat
2022-09-14 08:28 - 2022-04-13 21:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-14 08:28 - 2022-04-13 21:06 - 000471304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-09-14 08:28 - 2022-03-25 19:07 - 000012288 ___SH C:\DumpStack.log.tmp
2022-09-14 08:28 - 2022-03-25 12:27 - 000000000 ____D C:\Intel
2022-09-14 08:28 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\setup
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\Provisioning
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-09-14 08:28 - 2021-06-05 12:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-09-14 08:25 - 2022-03-25 12:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-09-14 08:24 - 2022-03-25 12:25 - 141646296 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-09-14 08:23 - 2021-06-05 12:08 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2022-09-14 08:23 - 2021-06-05 12:08 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2022-09-14 08:23 - 2021-06-05 12:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-09-14 08:21 - 2022-04-13 21:08 - 003103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-09-13 14:31 - 2022-03-25 19:10 - 000000000 ____D C:\ProgramData\Packages
2022-09-13 08:36 - 2022-03-25 15:52 - 000000000 ____D C:\Users\LONOVO\AppData\Local\D3DSCache
2022-09-13 08:34 - 2022-04-13 21:08 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-663671340-2365547099-3198154546-1001
2022-09-13 08:34 - 2022-04-13 21:08 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-663671340-2365547099-3198154546-1001
2022-09-13 08:34 - 2022-03-25 19:10 - 000002420 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-10 17:33 - 2022-04-13 21:08 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-09-10 17:33 - 2022-03-31 08:45 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-09-10 11:35 - 2022-03-25 19:07 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-09-09 20:47 - 2022-03-25 12:35 - 000000000 ____D C:\Program Files\Microsoft Office
2022-09-08 08:05 - 2022-04-13 21:08 - 000004244 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1649873076
2022-09-08 08:05 - 2022-04-13 18:04 - 000001408 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-09-07 08:21 - 2022-08-02 08:39 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-07 08:17 - 2022-03-25 19:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-09-06 10:11 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-09-06 10:11 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-09-06 10:11 - 2021-06-05 18:15 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-09-06 10:11 - 2021-06-05 18:15 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\OCR
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\IME
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files\Windows Defender
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files\Common Files\System
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-09-06 10:11 - 2021-06-05 12:01 - 000000000 ____D C:\WINDOWS\servicing
2022-09-06 09:45 - 2022-06-12 19:03 - 000000000 ____D C:\Program Files (x86)\Mr DJ
2022-09-05 08:07 - 2022-04-13 20:00 - 000000000 ____D C:\Users\LONOVO\AppData\Local\BitTorrentHelper
2022-08-30 21:13 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2022-08-30 09:03 - 2022-08-02 08:38 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{0AC8282B-291D-4248-B522-26B9A3BB3AF8}
2022-08-30 09:03 - 2022-08-02 08:38 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{00C6D1C5-3E52-430D-AA2D-1CEFF1AA65B6}
2022-08-28 15:03 - 2022-08-02 08:38 - 000000000 ____D C:\Program Files\Google
2022-08-28 14:57 - 2022-04-13 18:03 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\uTorrent Web
2022-08-28 14:52 - 2022-04-09 11:25 - 000000000 ____D C:\Users\LONOVO\AppData\Local\BraveSoftware
2022-08-23 08:20 - 2022-04-13 21:08 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 08:20 - 2022-04-13 21:08 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par LONOVO (administrateur) sur DESKTOP-MFROBE8 (LENOVO 81YH) (15-09-2022 10:13:58)
Exécuté depuis C:\Users\LONOVO\Downloads
Profils chargés: LONOVO
Plate-forme: Microsoft Windows 11 Professionnel Version 21H2 22000.978 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\WindowsApps\MicrosoftTeams_22249.1200.1551.1009_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\105.0.1343.33\msedgewebview2.exe <13>
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxCUIServiceN.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxEMN.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\FnHotkeyUtility.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <26>
(explorer.exe ->) (Lavasoft Software Canada Inc. -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_69d915519e0a2ac8\aesm_service.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_790c20683c3a62ec\igfxCUIServiceN.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_55bf1834336e8765\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_27e3f997fcc85a29\IntelCpHDCPSvc.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe
(Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe <6>
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.543.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.625.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1158944 2020-09-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UD.exe [538144 2020-02-28] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [9250224 2022-04-13] (Lavasoft Software Canada Inc. -> Lavasoft)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [MicrosoftEdgeAutoLaunch_F5FE1831AEFDCDBE409739F776CEEE27] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3795360 2022-09-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\Run: [AvastSvcXoF] => C:\ProgramData\AvastSvcXoF\AvastSvc.exe [61648 2020-03-20] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\MountPoints2: {131c91a3-0ead-11ed-a259-e02be97ee4c8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-663671340-2365547099-3198154546-1001\...\MountPoints2: {30ab550c-2f55-11ed-a25d-c1cb1a332652} - "E:\EMP_UDSe.exe" /autorun
HKLM\...\Print\Monitors\HP 8711 Status Monitor: C:\WINDOWS\system32\hpinksts8711LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\105.0.5195.102\Installer\chrmstp.exe [2022-09-07] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {09890617-0760-422C-9623-576089D0DFD6} - System32\Tasks\GoogleUpdateTaskMachineCore{00C6D1C5-3E52-430D-AA2D-1CEFF1AA65B6} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-08-02] (Google LLC -> Google LLC)
Task: {0B442FA2-7780-4950-A2AD-1EEB64E2A971} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23706576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {11610C47-CEE1-4109-A648-489F9750742B} - System32\Tasks\GoogleUpdateTaskMachineUA{0AC8282B-291D-4248-B522-26B9A3BB3AF8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-08-02] (Google LLC -> Google LLC)
Task: {125E1677-BD21-40FA-A448-CF11B9543F61} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23706576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {15B9D5FB-09AB-4864-BE3B-D8D5D16ECA8B} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64408 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {28256E57-B2F1-48F3-A513-232BE9E066F5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8516576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E975218-EA56-4548-842F-D6B6AB076570} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142232 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B630B4F-C0C3-4133-8B1E-5F2A080F60C7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1555696 2022-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {A2150CA9-5608-49EB-AE05-957949454552} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B28BD754-40B2-4B9C-8DA6-6AB20DE42E5F} - System32\Tasks\Opera scheduled Autoupdate 1649873076 => C:\Users\LONOVO\AppData\Local\Programs\Opera\launcher.exe [2538448 2022-09-05] (Opera Norway AS -> Opera Software)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {D239CC5D-8EDB-4DA3-BC7F-29741FCCF490} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D59282F4-595C-4FA4-8FDE-F528E7AF8ABD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D78B4119-100C-43DD-AC24-96A0FC79C59B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8516576 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D876EC26-59D1-4DF7-AA19-8E294853554A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D9803F9E-4606-4215-AA49-B6E7067A312B} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [4119200 2021-12-06] (HP Inc. -> Hewlett-Packard Co.)
Task: {F7409E17-E63C-4D02-BB02-035084C39649} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142232 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1d555eda-216e-4e5b-a112-fd71ab28aaaf}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\LONOVO\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-15]
Edge HomePage: Default -> hxxps://go-go.tech?fr=ps&gp=496724&altserp=1
Edge StartupUrls: Default -> "hxxps://go-go.tech?fr=ps&gp=496724&altserp=1"
Edge DefaultSearchURL: Default -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496724&altserp=1
Edge DefaultSearchKeyword: Default -> go go tech search
Edge DefaultSuggestURL: Default -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
Edge Profile: C:\Users\LONOVO\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-09-15]
Edge HomePage: Profile 1 -> hxxps://go-go.tech?fr=ps&gp=496724&altserp=1
Edge StartupUrls: Profile 1 -> "hxxps://go-go.tech?fr=ps&gp=496724&altserp=1"
Edge DefaultSearchURL: Profile 1 -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496724&altserp=1
Edge DefaultSearchKeyword: Profile 1 -> Go Go Tech Search
Edge DefaultSuggestURL: Profile 1 -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default [2022-09-15]
CHR HomePage: Default -> hxxps://go-go.tech?fr=ps&gp=496723&altserp=1
CHR StartupUrls: Default -> "hxxps://go-go.tech?fr=ps&gp=496723&altserp=1"
CHR DefaultSearchURL: Default -> hxxps://go-go.tech/search?q={searchTerms}&fr=ps&gp=496723&altserp=1
CHR DefaultSearchKeyword: Default -> go go tech search
CHR DefaultSuggestURL: Default -> hxxps://suggest.finditnowonline.com/suggestionfeed/suggestion?format=json&gd=496721&q={searchTerms}
CHR Extension: (Google Docs hors connexion) - C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\LONOVO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-02]
Opera:
=======
OPR Profile: C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable [2022-09-15]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-05-09]
OPR Extension: (Opera Crypto Wallet) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-06-16]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\LONOVO\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-05-09]
Brave:
=======
BRA Profile: C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-08-28]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-08-28]
BRA Extension: (Brave NTP background images) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-08-28]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-08-28]
BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2022-08-28]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2022-08-28]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-08-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2022-08-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\LONOVO\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-08-28]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172264 2022-08-03] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12126112 2022-09-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-04-13] (Lavasoft Software Canada Inc. -> )
S3 dcsvc; C:\WINDOWS\system32\dcsvc.dll [831488 2022-09-14] (Microsoft Windows -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [1928648 2020-05-19] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe [165920 2020-02-28] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [334728 2020-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_eea2c15eb4860b4b\LenovoUtilityService.exe [241904 2022-08-12] (Lenovo -> Lenovo(beijing) Limited)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1832944 2021-08-12] (Lenovo -> Lenovo(beijing) Limited)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [245208 2022-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-04-13] (Lavasoft Software Canada Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2022-04-13] (Bitdefender SRL -> Bitdefender)
R3 BHTPCRDR; C:\WINDOWS\System32\drivers\bhtpcrdr.sys [184416 2020-08-31] (BayHub Technology Inc. -> BayHubTech/O2Micro)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [98304 2021-06-05] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 eppvad_simple; C:\WINDOWS\system32\drivers\EMP_UDAU.sys [23040 2011-06-07] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R3 iaLPSS2_GPIO2_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_icl.inf_amd64_90beccc7e046abab\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-27] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_icl.inf_amd64_c8c0638291b9b209\iaLPSS2_I2C_ICL.sys [200456 2020-04-27] (Intel Corporation -> Intel Corporation)
R3 MpKsl765795d6; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5D44A5D2-E1B3-419B-96F0-06F0FEF82AC1}\MpKslDrv.sys [228600 2022-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-09-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94480 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
NETSVC: DcSvc -> C:\Windows\system32\dcsvc.dll (Microsoft Corporation)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-15 10:12 - 2022-09-15 10:12 - 002371072 _____ (Farbar) C:\Users\LONOVO\Downloads\FRST64 (2).exe
2022-09-15 10:11 - 2022-09-15 10:12 - 000034152 _____ C:\Users\LONOVO\Downloads\Addition.txt
2022-09-15 10:10 - 2022-09-15 10:14 - 000023148 _____ C:\Users\LONOVO\Downloads\FRST.txt
2022-09-15 10:09 - 2022-09-15 10:14 - 000000000 ____D C:\FRST
2022-09-15 10:09 - 2022-09-15 10:09 - 002371072 _____ (Farbar) C:\Users\LONOVO\Downloads\FRST64 (1).exe
2022-09-14 08:22 - 2022-09-14 08:22 - 000015030 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-09-14 08:21 - 2022-09-14 08:21 - 000335872 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-09-14 08:20 - 2022-09-14 08:20 - 000000000 ___HD C:\$WinREAgent
2022-09-13 17:10 - 2022-09-13 17:11 - 000009589 _____ C:\Users\LONOVO\OneDrive\Documents\Book (1).xlsx
2022-09-13 17:07 - 2022-09-13 17:07 - 000009007 _____ C:\Users\LONOVO\OneDrive\Documents\Book.xlsx
2022-09-12 17:29 - 2022-09-12 17:30 - 001649778 _____ C:\Users\LONOVO\Downloads\BILANS EN COURS (1).rar
2022-09-11 13:36 - 2022-09-11 13:36 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\com.adobe.dunamis
2022-09-09 15:45 - 2022-09-09 15:45 - 002525725 _____ C:\Users\LONOVO\Downloads\DOSSIER SAMASSI.rar
2022-09-09 15:45 - 2022-09-09 15:45 - 001649778 _____ C:\Users\LONOVO\Downloads\BILANS EN COURS.rar
2022-09-08 16:26 - 2022-09-08 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Projector
2022-09-08 16:26 - 2022-09-08 16:26 - 000000000 ____D C:\Program Files (x86)\EPSON Projector
2022-09-08 16:26 - 2011-06-07 18:56 - 000023040 _____ (SEIKO EPSON CORPORATION) C:\WINDOWS\system32\Drivers\EMP_UDAU.sys
2022-09-07 15:15 - 2022-09-07 15:15 - 002106404 _____ C:\Users\LONOVO\Downloads\fwdlesbilansquevousneretrouver.zip
2022-09-06 17:03 - 2022-09-06 17:06 - 1065811979 _____ C:\Users\LONOVO\Downloads\VISA ET DOSSIER.rar
2022-09-05 08:40 - 2022-09-05 08:40 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\Sublime Text
2022-09-05 08:40 - 2022-09-05 08:40 - 000000000 ____D C:\Users\LONOVO\AppData\Local\Sublime Text
2022-09-05 08:38 - 2022-09-05 08:38 - 000000913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text.lnk
2022-09-05 08:38 - 2022-09-05 08:38 - 000000000 ____D C:\Program Files\Sublime Text
2022-09-05 08:32 - 2022-09-05 08:32 - 019148248 _____ (Sublime HQ Pty Ltd ) C:\Users\LONOVO\Downloads\sublime_text_build_4126_x64_setup.exe
2022-09-01 15:50 - 2022-09-01 15:50 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV (2).torrent
2022-09-01 15:47 - 2022-09-01 15:47 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV (1).torrent
2022-08-31 10:40 - 2022-08-31 10:40 - 000056916 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E09 VOSTFR HDTV.torrent
2022-08-28 15:03 - 2022-08-28 15:03 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (3).torrent
2022-08-28 15:02 - 2022-08-28 15:02 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (2).torrent
2022-08-28 15:02 - 2022-08-28 15:02 - 000000000 ____D C:\Users\LONOVO\AppData\LocalLow\uTorrent.WebView2
2022-08-28 15:01 - 2022-09-05 17:04 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\uTorrent
2022-08-28 15:01 - 2022-08-28 15:01 - 000000877 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2022-08-28 14:59 - 2022-08-28 14:59 - 001763848 _____ ( ) C:\Users\LONOVO\Downloads\uTorrent.exe
2022-08-28 14:51 - 2022-08-28 14:56 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2022-08-28 14:51 - 2022-08-28 14:51 - 001211024 _____ (BraveSoftware Inc.) C:\Users\LONOVO\Downloads\BraveBrowserSetup-CLU884 (1).exe
2022-08-28 14:47 - 2022-08-28 14:47 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV (1).torrent
2022-08-28 14:44 - 2022-08-28 14:44 - 000057105 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E02 VOSTFR HDTV.torrent
2022-08-26 14:18 - 2022-08-26 14:18 - 001904025 _____ C:\Users\LONOVO\Downloads\ENG_A2_24 Eating out (1).pdf
2022-08-26 10:54 - 2022-08-26 10:54 - 000054226 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E12 VOSTFR HDTV (1).torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000057387 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E17 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000054366 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E16 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000048127 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E18 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000030849 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E15 VOSTFR HDTV.torrent
2022-08-26 10:49 - 2022-08-26 10:49 - 000029647 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E19 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000057209 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E13 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000054226 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E12 VOSTFR HDTV.torrent
2022-08-26 10:48 - 2022-08-26 10:48 - 000045968 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E14 VOSTFR HDTV.torrent
2022-08-26 10:47 - 2022-08-26 10:47 - 000056405 _____ C:\Users\LONOVO\Downloads\[ cpasbien.ch ] Riverdale S04E05 VOSTFR HDTV.torrent
2022-08-24 09:10 - 2022-08-24 09:10 - 035347155 _____ C:\Users\LONOVO\Downloads\com.babbel.mobile.android.en_21080099_55116770.zip
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-09-15 10:12 - 2021-06-05 12:09 - 000000000 ____D C:\WINDOWS\INF
2022-09-15 10:08 - 2022-08-02 08:38 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-15 10:05 - 2021-06-05 12:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-15 09:35 - 2022-04-13 21:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-15 09:20 - 2021-06-05 12:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-15 09:20 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-15 09:19 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-09-15 09:09 - 2022-03-25 19:12 - 000000000 ___RD C:\Users\LONOVO\OneDrive
2022-09-15 09:09 - 2022-03-25 12:27 - 000000000 __SHD C:\Users\LONOVO\IntelGraphicsProfiles
2022-09-14 14:12 - 2022-03-25 19:10 - 000000000 ____D C:\Users\LONOVO\AppData\Local\Packages
2022-09-14 08:34 - 2022-04-13 21:08 - 001709664 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-09-14 08:34 - 2021-06-05 18:15 - 000772574 _____ C:\WINDOWS\system32\perfh00C.dat
2022-09-14 08:34 - 2021-06-05 18:15 - 000148820 _____ C:\WINDOWS\system32\perfc00C.dat
2022-09-14 08:28 - 2022-04-13 21:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-14 08:28 - 2022-04-13 21:06 - 000471304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-09-14 08:28 - 2022-03-25 19:07 - 000012288 ___SH C:\DumpStack.log.tmp
2022-09-14 08:28 - 2022-03-25 12:27 - 000000000 ____D C:\Intel
2022-09-14 08:28 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\setup
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\Provisioning
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-09-14 08:28 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-09-14 08:28 - 2021-06-05 12:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-09-14 08:25 - 2022-03-25 12:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-09-14 08:24 - 2022-03-25 12:25 - 141646296 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-09-14 08:23 - 2021-06-05 12:08 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2022-09-14 08:23 - 2021-06-05 12:08 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2022-09-14 08:23 - 2021-06-05 12:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-09-14 08:21 - 2022-04-13 21:08 - 003103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-09-13 14:31 - 2022-03-25 19:10 - 000000000 ____D C:\ProgramData\Packages
2022-09-13 08:36 - 2022-03-25 15:52 - 000000000 ____D C:\Users\LONOVO\AppData\Local\D3DSCache
2022-09-13 08:34 - 2022-04-13 21:08 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-663671340-2365547099-3198154546-1001
2022-09-13 08:34 - 2022-04-13 21:08 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-663671340-2365547099-3198154546-1001
2022-09-13 08:34 - 2022-03-25 19:10 - 000002420 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-10 17:33 - 2022-04-13 21:08 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-09-10 17:33 - 2022-03-31 08:45 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-09-10 11:35 - 2022-03-25 19:07 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-09-09 20:47 - 2022-03-25 12:35 - 000000000 ____D C:\Program Files\Microsoft Office
2022-09-08 08:05 - 2022-04-13 21:08 - 000004244 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1649873076
2022-09-08 08:05 - 2022-04-13 18:04 - 000001408 _____ C:\Users\LONOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2022-09-07 08:21 - 2022-08-02 08:39 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-07 08:17 - 2022-03-25 19:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-09-06 10:11 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-09-06 10:11 - 2021-06-05 18:23 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-09-06 10:11 - 2021-06-05 18:15 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-09-06 10:11 - 2021-06-05 18:15 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\OCR
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\IME
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files\Windows Defender
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files\Common Files\System
2022-09-06 10:11 - 2021-06-05 12:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-09-06 10:11 - 2021-06-05 12:01 - 000000000 ____D C:\WINDOWS\servicing
2022-09-06 09:45 - 2022-06-12 19:03 - 000000000 ____D C:\Program Files (x86)\Mr DJ
2022-09-05 08:07 - 2022-04-13 20:00 - 000000000 ____D C:\Users\LONOVO\AppData\Local\BitTorrentHelper
2022-08-30 21:13 - 2021-06-05 12:10 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2022-08-30 09:03 - 2022-08-02 08:38 - 000003666 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{0AC8282B-291D-4248-B522-26B9A3BB3AF8}
2022-08-30 09:03 - 2022-08-02 08:38 - 000003542 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{00C6D1C5-3E52-430D-AA2D-1CEFF1AA65B6}
2022-08-28 15:03 - 2022-08-02 08:38 - 000000000 ____D C:\Program Files\Google
2022-08-28 14:57 - 2022-04-13 18:03 - 000000000 ____D C:\Users\LONOVO\AppData\Roaming\uTorrent Web
2022-08-28 14:52 - 2022-04-09 11:25 - 000000000 ____D C:\Users\LONOVO\AppData\Local\BraveSoftware
2022-08-23 08:20 - 2022-04-13 21:08 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 08:20 - 2022-04-13 21:08 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================