Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2023
Exécuté par Aimef (administrateur) sur LAPTOP-2M7HIM05 (HP HP 255 G6 Notebook PC) (28-08-2023 19:42:55)
Exécuté depuis C:\Users\Aimef\Desktop\FRST64.exe
Profils chargés: Aimef
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3208 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Areson Technology -> ) C:\Program Files (x86)\Hama Mouse Assistant\mouse_driver.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe <3>
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0369840.inf_amd64_9adec0a7f9b57873\B369081\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [uni mouse driver] => C:\Program Files (x86)\Hama Mouse Assistant\mouse_driver.exe [1634296 2015-04-13] (Areson Technology -> )
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [63018400 2023-08-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Uninstall 23.147.0716.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\23.147.0716.0001" [0 2023-08-28] () <==== ATTENTION [zéro octet Fichier/Dossier]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {F021831A-98DD-40B5-86E2-2EB30BE9D3C9} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2016-12-06] (HP Inc. -> HP Inc.)
Task: {55569E0B-9C02-4B63-A084-63621ECE0DD8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {ABDA51B2-4FAE-4DF6-9A79-C5119DB413D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe [555640 2021-03-25] (HP Inc. -> HP Inc.)
Task: {18468F19-753F-439D-9A56-D28484B5CD4A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {55814A16-93D4-4395-AA1C-416F883F90FF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.)
Task: {B54ADF83-F5A8-4575-AE3E-A3D4E6C66114} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.)
Task: {856B41AF-833A-4E3C-A2DC-C14399C16BB3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {ABAF30D9-BFF4-4D02-B211-158BD1DB2AF7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [327256 2022-02-09] (HP Inc. -> HP Inc.)
Task: {97B59746-B4BC-4322-B83B-F7F6ABC2C7D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {A7C030DD-17D9-4B22-A225-7602475943C0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {48624328-91C9-454C-A511-F4E67795C12F} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644960 2017-02-02] (HP Inc. -> HP Inc.)
Task: {697443A2-27E2-451E-AA21-318C94D95BB9} - System32\Tasks\HPEA3JOBS => C:\Program -> Files\HP\HP ePrint\hpeprint.exe /CheckJobs
Task: {6D3442A1-BA24-441D-95D6-11A146522428} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [459264 2017-02-01] (HP Inc. -> )
Task: {E9D600F6-BE03-433A-AE11-C29E4E264298} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\WINDOWS\system32\MRT.exe [175983240 2023-08-18] (Microsoft Windows -> Microsoft Corporation)
Task: {6572D54F-3973-4745-AEC8-3CD80C6FE3A1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1ABD82E4-ED5F-4739-A455-B9DD82521691} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3ECDEDDC-BF03-49A6-8BDF-50D88038179A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {48F07EA5-CF6F-4FA1-A104-CCAA5BB04C4F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0CFECFE0-F570-4663-96E8-8168EC970ACC} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [687008 2023-08-18] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0D8EBA62-C9ED-4518-9A6A-7D3B168DF73B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [733088 2023-08-18] (Mozilla Corporation -> Mozilla Foundation)
Task: {0ABF75D1-0D65-46D0-A556-FF9599C970DC} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [62864 2021-06-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0D30FA86-ECC9-496A-A6E4-B1EE8F9DB0F7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [268688 2021-06-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {D5280E0E-2296-4A4A-BF50-36FF9E039F96} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{7c7eadd4-32ea-40d1-b732-99037c71be10}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{acc5e022-30e1-4237-aacc-0327723d7be7}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\Aimef\AppData\Local\Microsoft\Edge\User Data\Default [2022-12-17]
FireFox:
========
FF DefaultProfile: wfgsvreo.default
FF ProfilePath: C:\Users\Aimef\AppData\Roaming\Mozilla\Firefox\Profiles\wfgsvreo.default [2022-01-16]
FF ProfilePath: C:\Users\Aimef\AppData\Roaming\Mozilla\Firefox\Profiles\rtqs4jfa.default-release [2023-08-28]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1150066786-4232253159-1029593273-1003: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1309184 2016-10-07] (HP Inc.) [Fichier non signé]
S4 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-04-03] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [403576 2021-04-01] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [631800 2016-06-20] (HP Inc. -> HP Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\NisSrv.exe [3244928 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MsMpEng.exe [133576 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_8e2568524f674315\amdsafd.sys [100768 2021-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 AmdSMBusSdk; C:\WINDOWS\System32\drivers\amdembsmbus.sys [42808 2021-04-07] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdWDT; C:\WINDOWS\System32\drivers\amdwdt.sys [42624 2021-08-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2023-07-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-07-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99608 2023-07-30] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-08-28 19:42 - 2023-08-28 19:46 - 000017829 _____ C:\Users\Aimef\Desktop\FRST.txt
2023-08-28 19:39 - 2023-08-28 19:39 - 002382336 _____ (Farbar) C:\Users\Aimef\Desktop\FRST64.exe
2023-08-26 14:37 - 2023-08-26 14:38 - 000000000 ____D C:\Users\Aimef\Documents\administratif 2023
2023-08-26 14:32 - 2023-08-26 14:32 - 000000000 ___HD C:\$WinREAgent
2023-08-26 14:30 - 2023-08-26 14:31 - 000030255 _____ C:\Users\Aimef\Downloads\LECLERC-1.pdf
2023-08-26 14:30 - 2023-08-26 14:31 - 000030255 _____ C:\Users\Aimef\Downloads\LECLERC.pdf
2023-08-18 13:55 - 2023-08-18 13:57 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-07 19:32 - 2023-08-07 19:32 - 000030255 _____ C:\Users\Aimef\Downloads\Refus retraite reversion.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-08-28 19:45 - 2022-01-15 19:48 - 000000000 ____D C:\FRST
2023-08-28 19:37 - 2022-01-18 18:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-08-28 19:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-08-28 19:29 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-08-28 19:22 - 2023-06-30 15:52 - 000002428 _____ C:\Users\Aimef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-08-28 19:22 - 2022-01-18 19:19 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1150066786-4232253159-1029593273-1003
2023-08-28 19:22 - 2022-01-18 19:19 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1150066786-4232253159-1029593273-1003
2023-08-28 19:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-08-28 19:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-28 19:02 - 2023-01-23 17:43 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-08-28 19:02 - 2020-06-23 16:24 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-08-28 18:09 - 2022-02-14 12:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-08-26 14:36 - 2022-02-21 20:28 - 000000000 ____D C:\Users\Aimef\Documents\Credit Mutuel
2023-08-26 14:07 - 2019-02-05 16:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-25 15:10 - 2022-01-06 20:03 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-08-18 14:01 - 2022-02-01 11:31 - 000000000 ____D C:\Users\Aimef\AppData\Local\AMD_Common
2023-08-18 13:59 - 2022-01-13 12:05 - 000000000 ____D C:\Users\Aimef\AppData\Local\Packages
2023-08-18 13:59 - 2019-02-05 16:22 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-08-02 16:52 - 2022-01-06 20:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-07-30 20:40 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-07-30 20:37 - 2019-02-05 23:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-07-30 20:30 - 2022-01-18 19:07 - 001923854 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-07-30 20:30 - 2019-12-07 16:49 - 000833050 _____ C:\WINDOWS\system32\perfh00C.dat
2023-07-30 20:30 - 2019-12-07 16:49 - 000167780 _____ C:\WINDOWS\system32\perfc00C.dat
2023-07-30 20:23 - 2022-01-18 19:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-07-30 20:23 - 2022-01-18 18:47 - 000522104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-07-30 20:22 - 2022-01-18 18:47 - 000008192 ___SH C:\DumpStack.log.tmp
2023-07-30 20:21 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2023-07-30 20:21 - 2017-11-30 23:12 - 000065536 _____ C:\WINDOWS\psp_storage.bin
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-07-30 19:56 - 2022-01-18 18:51 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-07-30 18:58 - 2019-02-05 17:26 - 000918960 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Aimef (administrateur) sur LAPTOP-2M7HIM05 (HP HP 255 G6 Notebook PC) (28-08-2023 19:42:55)
Exécuté depuis C:\Users\Aimef\Desktop\FRST64.exe
Profils chargés: Aimef
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3208 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Areson Technology -> ) C:\Program Files (x86)\Hama Mouse Assistant\mouse_driver.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe <3>
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0369840.inf_amd64_9adec0a7f9b57873\B369081\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [uni mouse driver] => C:\Program Files (x86)\Hama Mouse Assistant\mouse_driver.exe [1634296 2015-04-13] (Areson Technology -> )
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [63018400 2023-08-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1150066786-4232253159-1029593273-1003\...\RunOnce: [Uninstall 23.147.0716.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Aimef\AppData\Local\Microsoft\OneDrive\23.147.0716.0001" [0 2023-08-28] () <==== ATTENTION [zéro octet Fichier/Dossier]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {F021831A-98DD-40B5-86E2-2EB30BE9D3C9} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2016-12-06] (HP Inc. -> HP Inc.)
Task: {55569E0B-9C02-4B63-A084-63621ECE0DD8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {ABDA51B2-4FAE-4DF6-9A79-C5119DB413D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe [555640 2021-03-25] (HP Inc. -> HP Inc.)
Task: {18468F19-753F-439D-9A56-D28484B5CD4A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {55814A16-93D4-4395-AA1C-416F883F90FF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.)
Task: {B54ADF83-F5A8-4575-AE3E-A3D4E6C66114} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.)
Task: {856B41AF-833A-4E3C-A2DC-C14399C16BB3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {ABAF30D9-BFF4-4D02-B211-158BD1DB2AF7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [327256 2022-02-09] (HP Inc. -> HP Inc.)
Task: {97B59746-B4BC-4322-B83B-F7F6ABC2C7D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {A7C030DD-17D9-4B22-A225-7602475943C0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {48624328-91C9-454C-A511-F4E67795C12F} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644960 2017-02-02] (HP Inc. -> HP Inc.)
Task: {697443A2-27E2-451E-AA21-318C94D95BB9} - System32\Tasks\HPEA3JOBS => C:\Program -> Files\HP\HP ePrint\hpeprint.exe /CheckJobs
Task: {6D3442A1-BA24-441D-95D6-11A146522428} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [459264 2017-02-01] (HP Inc. -> )
Task: {E9D600F6-BE03-433A-AE11-C29E4E264298} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\WINDOWS\system32\MRT.exe [175983240 2023-08-18] (Microsoft Windows -> Microsoft Corporation)
Task: {6572D54F-3973-4745-AEC8-3CD80C6FE3A1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1ABD82E4-ED5F-4739-A455-B9DD82521691} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3ECDEDDC-BF03-49A6-8BDF-50D88038179A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {48F07EA5-CF6F-4FA1-A104-CCAA5BB04C4F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MpCmdRun.exe [1649976 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0CFECFE0-F570-4663-96E8-8168EC970ACC} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [687008 2023-08-18] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0D8EBA62-C9ED-4518-9A6A-7D3B168DF73B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [733088 2023-08-18] (Mozilla Corporation -> Mozilla Foundation)
Task: {0ABF75D1-0D65-46D0-A556-FF9599C970DC} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [62864 2021-06-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0D30FA86-ECC9-496A-A6E4-B1EE8F9DB0F7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [268688 2021-06-28] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {D5280E0E-2296-4A4A-BF50-36FF9E039F96} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{7c7eadd4-32ea-40d1-b732-99037c71be10}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{acc5e022-30e1-4237-aacc-0327723d7be7}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\Aimef\AppData\Local\Microsoft\Edge\User Data\Default [2022-12-17]
FireFox:
========
FF DefaultProfile: wfgsvreo.default
FF ProfilePath: C:\Users\Aimef\AppData\Roaming\Mozilla\Firefox\Profiles\wfgsvreo.default [2022-01-16]
FF ProfilePath: C:\Users\Aimef\AppData\Roaming\Mozilla\Firefox\Profiles\rtqs4jfa.default-release [2023-08-28]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1150066786-4232253159-1029593273-1003: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1309184 2016-10-07] (HP Inc.) [Fichier non signé]
S4 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-04-03] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [403576 2021-04-01] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [631800 2016-06-20] (HP Inc. -> HP Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\NisSrv.exe [3244928 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.9-0\MsMpEng.exe [133576 2023-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_8e2568524f674315\amdsafd.sys [100768 2021-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 AmdSMBusSdk; C:\WINDOWS\System32\drivers\amdembsmbus.sys [42808 2021-04-07] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdWDT; C:\WINDOWS\System32\drivers\amdwdt.sys [42624 2021-08-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2023-07-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-07-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99608 2023-07-30] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-08-28 19:42 - 2023-08-28 19:46 - 000017829 _____ C:\Users\Aimef\Desktop\FRST.txt
2023-08-28 19:39 - 2023-08-28 19:39 - 002382336 _____ (Farbar) C:\Users\Aimef\Desktop\FRST64.exe
2023-08-26 14:37 - 2023-08-26 14:38 - 000000000 ____D C:\Users\Aimef\Documents\administratif 2023
2023-08-26 14:32 - 2023-08-26 14:32 - 000000000 ___HD C:\$WinREAgent
2023-08-26 14:30 - 2023-08-26 14:31 - 000030255 _____ C:\Users\Aimef\Downloads\LECLERC-1.pdf
2023-08-26 14:30 - 2023-08-26 14:31 - 000030255 _____ C:\Users\Aimef\Downloads\LECLERC.pdf
2023-08-18 13:55 - 2023-08-18 13:57 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-07 19:32 - 2023-08-07 19:32 - 000030255 _____ C:\Users\Aimef\Downloads\Refus retraite reversion.pdf
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-08-28 19:45 - 2022-01-15 19:48 - 000000000 ____D C:\FRST
2023-08-28 19:37 - 2022-01-18 18:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-08-28 19:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-08-28 19:29 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-08-28 19:22 - 2023-06-30 15:52 - 000002428 _____ C:\Users\Aimef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-08-28 19:22 - 2022-01-18 19:19 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1150066786-4232253159-1029593273-1003
2023-08-28 19:22 - 2022-01-18 19:19 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1150066786-4232253159-1029593273-1003
2023-08-28 19:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-08-28 19:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-28 19:02 - 2023-01-23 17:43 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-08-28 19:02 - 2020-06-23 16:24 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-08-28 18:09 - 2022-02-14 12:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-08-26 14:36 - 2022-02-21 20:28 - 000000000 ____D C:\Users\Aimef\Documents\Credit Mutuel
2023-08-26 14:07 - 2019-02-05 16:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-25 15:10 - 2022-01-06 20:03 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-08-18 14:01 - 2022-02-01 11:31 - 000000000 ____D C:\Users\Aimef\AppData\Local\AMD_Common
2023-08-18 13:59 - 2022-01-13 12:05 - 000000000 ____D C:\Users\Aimef\AppData\Local\Packages
2023-08-18 13:59 - 2019-02-05 16:22 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-08-02 16:52 - 2022-01-06 20:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-07-30 20:40 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-07-30 20:37 - 2019-02-05 23:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-07-30 20:30 - 2022-01-18 19:07 - 001923854 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-07-30 20:30 - 2019-12-07 16:49 - 000833050 _____ C:\WINDOWS\system32\perfh00C.dat
2023-07-30 20:30 - 2019-12-07 16:49 - 000167780 _____ C:\WINDOWS\system32\perfc00C.dat
2023-07-30 20:23 - 2022-01-18 19:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-07-30 20:23 - 2022-01-18 18:47 - 000522104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-07-30 20:22 - 2022-01-18 18:47 - 000008192 ___SH C:\DumpStack.log.tmp
2023-07-30 20:21 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2023-07-30 20:21 - 2017-11-30 23:12 - 000065536 _____ C:\WINDOWS\psp_storage.bin
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-07-30 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-07-30 19:56 - 2022-01-18 18:51 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-07-30 18:58 - 2019-02-05 17:26 - 000918960 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================