Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2023
Exécuté par WL (administrateur) sur LAPTOP-W (ASUSTeK COMPUTER INC. UX410UAR) (08-09-2023 15:18:59)
Exécuté depuis C:\Users\ledou\Desktop\FRST64.exe
Profils chargés: WL
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3324 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe ->) (Plex, Inc. -> ) C:\Program Files\Plex\Plex Media Server\Plex Tuner Service.exe
(C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe ->) (Plex, Inc. -> ) C:\Program Files\Plex\Plex Media Server\PlexScriptHost.exe <2>
(C:\Program Files\Plex\Plex Media Server\PlexScriptHost.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Conexant Systems LLC -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxEM.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTek Computer Inc.) C:\Program Files\WindowsApps\B9ECED6F.ASUSBatteryHealthCharging_1.0.7.0_x86__qmba6cd70vzyy\ASUS Battery Health Charging\BhcMgr.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé] C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(explorer.exe ->) (Plex, Inc. -> Plex, Inc.) C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5>
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Evoluent) [Fichier non signé] C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoDriverUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_5324fa118488c79a\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe
(services.exe ->) (OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(services.exe ->) (Orbweb Taiwan Inc. -> Orbweb Inc.) C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\updater.exe
(services.exe ->) (Orbweb Taiwan Inc. -> Orbweb Inc.) C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\ZenAnywhere.exe
(services.exe ->) (Plex, Inc. -> Plex, Inc.) C:\Program Files\Plex\Plex Media Server\Plex Update Service.exe
(services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe <2>
(services.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\spaceman.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(www.xmrig.com) [Fichier non signé] C:\Windows\DlHost.exe <4>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-29] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6609176 2022-04-11] (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11559648 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Evoluent Mouse Listener] => C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoMouseListener.exe [33280 2017-01-11] (Microsoft) [Fichier non signé]
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKLM-x32\...\Run: [Share-to-Web Namespace Daemon] => C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe [57344 2001-07-03] (Hewlett-Packard) [Fichier non signé]
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2023-07-31] (Adobe Inc. -> )
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [669112 2019-10-31] (OpenVPN Inc. -> )
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\AnyTrans for iOS\AnyTransToolHelper.exe [575160 2021-08-05] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [Plex Media Server] => C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe [27641368 2023-07-24] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\MountPoints2: {00c12bf3-7589-11ec-a135-8aa1811400a4} - "E:\Autoplay.exe" -auto
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\MountPoints2: {b9e8248a-bc27-11ec-a13b-8ef1f1d1e7c9} - "F:\Autoplay.exe" -auto
HKU\S-1-5-21-2004802613-415574345-268722864-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [39936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Plex Media Server] => "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (Pas de fichier)
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS6000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDE.DLL [30720 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS6100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDP.DLL [482816 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2022-04-07] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS6000 series: C:\WINDOWS\system32\CNMLMDE.DLL [485376 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS6100 series: C:\WINDOWS\system32\CNMLMDP.DLL [1302016 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.180\Installer\chrmstp.exe [2023-09-08] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk [2019-02-06]
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoMouseExec.exe (Evoluent) [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {DFBDE00D-2804-4B34-B48D-1BFB7D3964AF} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {D030319E-FF30-4CC2-AF01-1B5817B07F61} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-ledoux.william@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled (Pas de fichier)
Task: {8D634482-FD8F-4640-98E6-2A3B54FA51AD} - System32\Tasks\ASUS Hello => C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe [642448 2018-05-31] (ASUSTeK Computer Inc. -> )
Task: {B4E10865-06CF-481C-B3B3-BE8D158CE99B} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304 2017-11-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D587E41D-7268-43EE-8578-2973C95EFACA} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304 2017-11-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {F5080595-495F-4847-A868-C63CFBF64FF0} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {DF74EC8A-67B8-4B41-8705-78B71319BDAD} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "42e8b4e3-3820-4e77-99d0-04c2f0615176" --version "6.15.10623" --silent
Task: {2B1A6EDD-EE98-4A11-A69A-0C56BFF40D84} - System32\Tasks\CCleanerSkipUAC - WL => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {749C67A6-4459-493C-A537-8A56D86F10E7} - System32\Tasks\CEUA1 => C:\Users\ledou\AppData\Local\MSkio2\MSkio2.exe (Pas de fichier)
Task: {CE782460-C148-407E-ABB7-3155C9E66160} - System32\Tasks\CEUA2 => C:\Users\ledou\AppData\Local\MSimw2\MSimw2.exe (Pas de fichier)
Task: {1CA79E9B-3131-459F-8D9F-3AE0E9911983} - System32\Tasks\CEUA3 => C:\Users\ledou\AppData\Local\MSssg2\MSssg2.exe (Pas de fichier)
Task: {09A8C2F6-5832-4147-8A52-BB390613CD8D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {224BBF78-47D4-4065-BADF-BC3ACB7CC3E2} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {3A81FEB6-F0E2-421E-9CE8-D429254C632B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2020-01-20] (Google Inc -> Google Inc.)
Task: {B0071860-9882-4896-A0EA-DDE2D9732E39} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2020-01-20] (Google Inc -> Google Inc.)
Task: {5FF91C2B-BAB3-4D2D-9572-0E16CF3B1AA4} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)
Task: {02724FCD-9862-4F74-BD93-79F46C2D704D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)
Task: {1DDC86FA-9FC2-421F-ABB2-CD45B6678710} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier)
Task: {9A81D6B5-FF03-419F-9F7E-91B5398C2C47} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24257912 2018-12-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BFCD299-4537-421B-8947-B9C27202D7FC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24257912 2018-12-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FE929F1-D9D5-4592-939B-9047D4A9D8F9} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [123168 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {EB9C5F08-0346-45DC-8614-7D66BAE2C14F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [123168 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {CE1CEBDB-4FE0-4F4A-AD10-26E2A74BFC21} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2139424 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {86D08AD8-194A-471A-A3BB-CDC8EB84B3E8} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2139424 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {39E1A679-B059-4E15-902D-358A741A6C94} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3398344 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {FA30D967-0955-4621-BF0E-A9C690B6691A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3398344 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {5EDCBFE2-9841-4132-BBE3-69E369485FC4} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [492032 2023-05-10] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\WINDOWS\mid.ps1
Task: {247EF7E3-A16A-418F-8637-D8387E06B1C8} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [Fichier non signé]
Task: {AE7600A9-4801-4A19-8CBF-269267A10B41} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {CC555EEE-EFCD-4EDC-910F-35D731EC12C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {715C2813-ACE2-4FE6-BE7F-94668F97523C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DFF7899C-FD9F-4888-BC56-D7A9D783B4C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EE710013-3285-429A-8C9F-0035DE18BF4C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42A8BF4B-25DA-4D94-A9D0-492259B4296F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [733088 2023-08-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {2BEC5814-5C4D-4262-A619-9A6AB28DC77F} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [492032 2023-05-10] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy ByPass -WindowStyle Hidden C:\Users\ledou\AppData\Roaming\Winsoft\core.ps1
Task: {A14CF0BE-E5FC-4557-97AF-F8E02EB3BC90} - System32\Tasks\PinnacleStudio22Notifier => C:\Program Files\Pinnacle\Studio 22\programs\PinnacleNotifierWrapper.exe [17504 2019-06-19] (Corel Corporation -> Pinnacle)
Task: {B6281908-E32B-4FED-9F48-B01E56D86BBB} - System32\Tasks\PinnacleStudioUpdater => C:\Program Files\Pinnacle\Studio 22\programs\PSNotification.exe [635976 2019-02-20] (Corel Corporation -> )
Task: {79893140-0446-4646-8FC3-39EA8401065D} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{3e039893-c8be-44fe-8753-484b5266aff7}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{5b0fa311-2ae5-4a56-9fa6-3c59e5a8e38b}: [DhcpNameServer] 80.67.169.12 80.67.169.40
Tcpip\..\Interfaces\{98018192-438d-460e-a64c-2e17171f73ac}: [DhcpNameServer] 10.66.24.1
Tcpip\..\Interfaces\{ec82b8b8-d494-4fd7-9dbf-087a92418e78}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{ee00d3a4-5e9b-41a0-b9be-4beefa3d4039}: [DhcpNameServer] 192.168.42.129
Edge:
=======
DownloadDir: C:\Users\ledou\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\ledou\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-03]
Edge HomePage: Default -> hxxp://asus17win10.msn.com/?pc=ASTE
Edge StartupUrls: Default -> "hxxp://www.google.fr/"
Edge Extension: (Edge relevant text changes) - C:\Users\ledou\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-08-09]
FireFox:
========
FF DefaultProfile: otoh2llq.default-1566826665196
FF ProfilePath: C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 [2023-09-08]
FF Homepage: Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 -> hxxp://www.google.fr/
FF Notifications: Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 -> hxxps://pagesjaunes-by.accengage.net; hxxps://www.zdnet.fr; hxxps://guitargearfinder.com; hxxps://www.piecesauto24.com; hxxps://www.avis-sportifs.com; hxxps://www.bandsintown.com; hxxps://www.decitre.fr; hxxps://news.amomama.com; hxxps://monjardinmamaison.maison-travaux.fr; hxxps://www.opensubtitles.org; hxxps://www.marmiton.org
FF Extension: (Malwarebytes Browser Guard) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2023-08-31]
FF Extension: (Video DownloadHelper) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-08-25]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-20]
FF Extension: (Pas de nom) - C:\Program Files\Mozilla Firefox\browser\features\{3B1335C3-B907-4CDC-A956-374AA110DAAD}.xpi [2019-02-19] [non signé]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) [Fichier non signé]
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.4 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom) [Fichier non signé]
FF Plugin HKU\S-1-5-21-2004802613-415574345-268722864-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom) [Fichier non signé]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default [2023-09-08]
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (Chrome IG Story) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmhknopedmipekbmmilfjgpefeonmog [2020-11-03]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-07-04]
CHR Profile: C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-09-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-05-20] (Apple Inc. -> Apple Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9619824 2018-12-26] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
S2 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [325456 2018-06-12] (ASUSTek Computer Inc. -> )
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43272 2023-07-03] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [212744 2023-07-03] (Intel Corporation -> Intel)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [135824 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R2 EvoDriverUpdateService; C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoDriverUpdateService.exe [30208 2017-01-11] (Evoluent) [Fichier non signé]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-08-10] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9283096 2023-09-01] (Malwarebytes Inc. -> Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
R2 PlexUpdateService; C:\Program Files\Plex\Plex Media Server\Plex Update Service.exe [898048 2023-07-24] (Plex, Inc. -> Plex, Inc.)
R2 TabletServiceWacom; C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe [6438264 2011-06-06] (Wacom Technology Corp. -> Wacom Technology, Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe [3121008 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe [133688 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe [495720 2018-07-04] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 ZenAnywhere; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\ZenAnywhere.exe [156056 2018-05-17] (Orbweb Taiwan Inc. -> Orbweb Inc.)
R2 ZenAnywhere Updater; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\updater.exe [156056 2018-05-17] (Orbweb Taiwan Inc. -> Orbweb Inc.)
S3 ZenAnywhereNetworkService; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\bin\ZenAnywhereNetworkService.exe [69016 2017-04-07] (Orbweb Taiwan Inc. -> Orbweb Inc.)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [150840 2021-07-08] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 DCamUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emDevice64.sys [231312 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [42256 2022-01-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 emAudio; C:\WINDOWS\system32\drivers\emAudio64.sys [42000 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
S3 EvoMouseDriverFilterHidUsb; C:\WINDOWS\System32\drivers\EvoMouseDriverFilterHidUsb.sys [29928 2017-01-06] (WDKTestCert v.kurilovich,130838452094803308 -> Evoluent)
R3 EvoMouseDriverMini; C:\WINDOWS\system32\drivers\EvoMouseDriverMini.sys [27344 2017-01-12] (WDKTestCert v.kurilovich,130838452094803308 -> Evoluent)
S3 FiltUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emFilter64.sys [17792 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-08-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-07-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-07-31] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKslc1628421; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B749D5BA-F335-48D0-83EA-BE53B470687A}\MpKslDrv.sys [222464 2023-09-08] (Microsoft Windows -> Microsoft Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2020-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 RealWoW60; C:\WINDOWS\system32\DRIVERS\RealWoW60.sys [39432 2017-04-07] (Realtek Semiconductor Corp. -> Realtek semiconductor corp)
S3 ScanUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emScan64.sys [18304 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 UcmCxRtk; C:\WINDOWS\System32\drivers\UcmCxRtk.sys [101344 2017-08-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55872 2023-08-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [574872 2023-08-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2023-08-30] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-09-08 15:18 - 2023-09-08 15:19 - 000039383 _____ C:\Users\ledou\Desktop\FRST.txt
2023-09-08 15:16 - 2023-09-08 15:16 - 002382336 _____ (Farbar) C:\Users\ledou\Desktop\FRST64.exe
2023-09-08 13:34 - 2023-09-08 13:34 - 000000000 ____D C:\Users\ledou\Downloads\DeDRM_tools_10.0.3
2023-09-08 13:27 - 2023-09-08 13:28 - 158523392 _____ C:\Users\ledou\Downloads\calibre-64bit-6.26.0.msi
2023-09-08 13:25 - 2023-09-08 13:25 - 000447095 _____ C:\Users\ledou\Downloads\DeDRM_tools_10.0.3.zip
2023-09-08 13:18 - 2023-09-08 13:18 - 000023170 _____ C:\Users\ledou\Downloads\Oscar Peterson Trio - Something Warm (Remastered Version) (Doxy Collection) - 2023 - WEB FLAC 16BITS 44.1KHZ-EICHBAUM.torrent
2023-09-08 13:16 - 2023-09-08 13:16 - 000029195 _____ C:\Users\ledou\Downloads\Sentinelle (2023).mkv.torrent
2023-09-08 05:19 - 2023-09-08 05:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-09-06 22:56 - 2023-09-06 22:56 - 000000392 _____ C:\Users\ledou\Downloads\Les Vies de Loulou_Almudena Grandes_1989_FR [PDF].torrent
2023-09-06 22:55 - 2023-09-06 22:55 - 000040727 _____ C:\Users\ledou\Downloads\Las Edades de Lulú_1990_DVD Rip.torrent
2023-09-06 21:32 - 2023-09-06 21:49 - 000000000 ____D C:\Program Files\Stellar Repair for Video
2023-09-06 21:31 - 2023-09-06 21:31 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Stellar Repair for Video 6.7.0.0
2023-09-06 21:25 - 2023-09-06 21:25 - 000021182 _____ C:\Users\ledou\Downloads\Stellar Repair for Video 6.7.0.0 Win Multi + Crack.torrent
2023-09-06 00:17 - 2023-09-06 00:17 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-09-05 20:43 - 2023-09-05 20:43 - 000128119 _____ C:\Users\ledou\Downloads\1956 La blonde et moi Frank Tashlin.torrent
2023-09-05 19:19 - 2023-09-05 19:19 - 000129518 ____R C:\Users\ledou\Downloads\OR_12_PCA_20230905064522_988QN2163P_1580936044034_264.pdf
2023-09-04 22:32 - 2023-09-04 22:32 - 000000000 _____ C:\Users\ledou\Downloads\Y0qoCuvA.htm
2023-09-04 22:23 - 2023-09-04 22:23 - 000028167 _____ C:\Users\ledou\Downloads\Jeff Beck - Blowing In Detroit - 2023 - WEB FLAC 16BITS 44.1KHZ-EICHBAUM.torrent
2023-09-03 23:48 - 2023-09-03 23:48 - 000000699 _____ C:\Users\ledou\Downloads\L.Envie.2011.Sophie.Fontanel.epub.torrent
2023-09-03 18:42 - 2023-09-03 18:43 - 000070468 _____ C:\Users\ledou\Downloads\Addition.txt
2023-09-03 18:39 - 2023-09-03 18:43 - 000057060 _____ C:\Users\ledou\Downloads\FRST.txt
2023-09-03 18:38 - 2023-09-08 15:19 - 000000000 ____D C:\FRST
2023-09-03 18:38 - 2023-09-08 15:03 - 000000000 ____D C:\Users\ledou\Downloads\FRST-OlderVersion
2023-09-03 18:38 - 2023-09-03 18:38 - 002382336 _____ (Farbar) C:\Users\ledou\Downloads\FRST64-2.1.exe
2023-09-03 17:46 - 2023-09-03 17:46 - 000000658 _____ C:\Users\ledou\Downloads\Le.Terminus.Des.Pretentieux.2023.Michel.Audiard.epub.torrent
2023-09-02 23:03 - 2023-09-02 23:05 - 095685832 _____ (Plex, Inc. ) C:\Users\ledou\Downloads\PlexMediaServer-1.32.5.7349-8f4248874-x86_64.exe
2023-09-02 20:47 - 2023-09-02 20:47 - 000000699 _____ C:\Users\ledou\Downloads\Éloge des oiseaux de passage • Jean-Noël Rieffel (2023)_ePub.torrent
2023-09-02 20:47 - 2023-09-02 20:47 - 000000491 _____ C:\Users\ledou\Downloads\L.Echiquier.2023.Jean.Philippe.Toussaint.epub.torrent
2023-09-01 18:31 - 2023-09-01 18:31 - 000059401 _____ C:\Users\ledou\Downloads\The.Fabelmans.2022.MULTi.1080p.10bit.WEBRip.6CH.x265.HEVC-NoTag.mkv.torrent
2023-09-01 18:26 - 2023-09-01 18:26 - 000002253 _____ C:\Users\ledou\Downloads\L'ex plus beau metier du monde.torrent
2023-08-31 19:38 - 2023-08-31 19:38 - 000000481 _____ C:\Users\ledou\Downloads\William.2023.Stéphanie.Hochet.epub.torrent
2023-08-31 19:37 - 2023-08-31 19:37 - 000001419 _____ C:\Users\ledou\Downloads\Des.Que.Sa.Bouche.Fut.Pleine.2023.Juliette.Oury.epub.torrent
2023-08-30 19:56 - 2023-08-30 19:58 - 269848328 _____ C:\Users\ledou\Downloads\hérouville gregory porter.zip
2023-08-29 23:28 - 2023-08-29 23:28 - 000000926 _____ C:\Users\ledou\Downloads\A.Ma.Soeur.Et.Unique.2023.Guy.Boley.epub.torrent
2023-08-29 23:26 - 2023-08-29 23:26 - 000000938 _____ C:\Users\ledou\Downloads\EBOOK Pour les Nuls - La resistance pour les nuls - Dominique Lormier.epub.torrent
2023-08-29 00:13 - 2023-08-29 00:13 - 000001225 _____ C:\Users\ledou\Downloads\Paradise.Nevada.2023.Dario.Diofebi.epub.torrent
2023-08-29 00:13 - 2023-08-29 00:13 - 000000754 _____ C:\Users\ledou\Downloads\Mes.Pas.Dans.Leurs.Ombres.2023.Lionel.Duroy.epub.torrent
2023-08-29 00:09 - 2023-08-29 00:09 - 000000876 _____ C:\Users\ledou\Downloads\Le salon de massage • Mazarine Pingeot (Rentrée Littéraire 2023)_ePub.torrent
2023-08-29 00:09 - 2023-08-29 00:09 - 000000727 _____ C:\Users\ledou\Downloads\Tu la retrouveras • Jean Hatzfeld (Rentrée Littérature 2023)_ePub.torrent
2023-08-27 14:32 - 2023-08-27 14:32 - 000020566 _____ C:\Users\ledou\Downloads\Mahavishnu Orchestra - Birds Of Fire (1973)[FLAC 16bits, 44kHz].torrent
2023-08-27 13:14 - 2023-08-30 21:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-27 11:59 - 2023-08-27 11:59 - 000006917 _____ C:\Users\ledou\Downloads\Ulyssemariareve720p.torrent
2023-08-26 21:45 - 2023-08-26 21:45 - 000036131 _____ C:\Users\ledou\Downloads\Bebel Gilberto - Joao - 2023 WEB [FLAC 24Bit 48 KHZ].torrent
2023-08-26 21:43 - 2023-08-26 21:43 - 000000770 _____ C:\Users\ledou\Downloads\Commissaire.Brunetti.T31.Le.Don.Du.Mensonge.2023.Donna.Leon.epub.torrent
2023-08-26 11:37 - 2023-08-26 11:37 - 000000467 _____ C:\Users\ledou\Downloads\Maria Pourchet - Champion - Epub.torrent
2023-08-26 11:37 - 2023-08-26 11:37 - 000000467 _____ C:\Users\ledou\Downloads\Maria Pourchet - Champion - Epub(1).torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000522 _____ C:\Users\ledou\Downloads\Maria Pourchet - Les Impatients.epub.torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000485 _____ C:\Users\ledou\Downloads\Maria Pourchet - Avancer - Epub.torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000485 _____ C:\Users\ledou\Downloads\Maria Pourchet - Avancer - Epub(1).torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000452 _____ C:\Users\ledou\Downloads\Toutes les femmes sauf une - Pourchet, Maria.epub.torrent
2023-08-26 11:35 - 2023-08-26 11:35 - 000000618 _____ C:\Users\ledou\Downloads\Feu • Maria Pourchet (2021)_ePub.torrent
2023-08-25 10:59 - 2023-08-25 10:59 - 000000665 _____ C:\Users\ledou\Downloads\Chaleur.Humaine.2023.Serge.Joncour.epub.torrent
2023-08-25 10:59 - 2023-08-25 10:59 - 000000558 _____ C:\Users\ledou\Downloads\Deserter.2023.Mathias.Enard.epub.torrent
2023-08-25 10:58 - 2023-08-25 10:58 - 000000550 _____ C:\Users\ledou\Downloads\La.Nuit.Imaginaire.2023.Hugo.Lindenberg.epub.torrent
2023-08-25 10:57 - 2023-08-25 10:57 - 000100050 _____ C:\Users\ledou\Downloads\Asteroid.City.2023.MULTI.VFF.1080p.WEBRip.x264-LUCKY.mkv.torrent
2023-08-23 13:51 - 2023-08-23 13:51 - 000000687 _____ C:\Users\ledou\Downloads\Nouvelle.Vague.2023.Patrick.Roegiers.epub.torrent
2023-08-23 03:34 - 2023-08-23 03:34 - 000040982 _____ C:\WINDOWS\mid.bin
2023-08-22 18:18 - 2023-07-07 10:31 - 081837568 _____ C:\WINDOWS\svshost.exe
2023-08-22 18:18 - 2023-07-03 07:59 - 008251392 _____ (www.xmrig.com) C:\WINDOWS\DlHost.exe
2023-08-22 18:18 - 2023-06-10 23:29 - 000000202 _____ C:\WINDOWS\bb.bat
2023-08-22 18:18 - 2023-06-10 16:55 - 000000020 _____ C:\WINDOWS\key
2023-08-22 18:18 - 2023-06-09 21:26 - 000000821 _____ C:\WINDOWS\mid.ps1
2023-08-22 18:18 - 2023-06-03 22:02 - 000014544 _____ (OpenLibSys.org) C:\WINDOWS\WinRing0x64.sys
2023-08-22 00:41 - 2023-08-22 00:41 - 000000402 _____ C:\Users\ledou\Downloads\L.Amour.2023.Francois.Begaudeau.epub.torrent
2023-08-21 21:12 - 2023-08-21 21:12 - 000000619 _____ C:\Users\ledou\Downloads\Panorama.2023.Lilia.Hassaine.epub.torrent
2023-08-20 17:14 - 2023-08-20 17:14 - 000000684 _____ C:\Users\ledou\Downloads\Petites.Choses.2023.Benoit.Coquil.epub.torrent
2023-08-20 17:11 - 2023-08-20 17:11 - 000000534 _____ C:\Users\ledou\Downloads\Le.Chateau.Des.Rentiers.2023.Agnes.Desarthe.epub.torrent
2023-08-20 16:43 - 2023-08-20 16:43 - 000017706 _____ C:\Users\ledou\Downloads\Élémentaire [FR-EN] (2023).mkv.torrent
2023-08-15 23:15 - 2023-08-15 23:15 - 004967461 ____R C:\Users\ledou\Downloads\toaz.info-a-new-approach-to-violin-playing-kato-havas-pr_ad812d1c916506e687b24c0ff1296852.pdf
2023-08-15 14:14 - 2023-08-15 14:14 - 000023156 _____ C:\Users\ledou\Downloads\Rêves (Yume) (Akira Kurosawa - 1990) VOSTFR - H264 AVC - AAC.mkv.torrent
2023-08-14 20:11 - 2023-08-14 20:11 - 012160512 _____ (Tim Kosse) C:\Users\ledou\Downloads\FileZilla_3.65.0_win64-setup.exe
2023-08-14 20:10 - 2023-08-14 20:10 - 000005943 _____ C:\Users\ledou\Downloads\Les.trois.mousquetaires.D.Artagnan.2023.VOF.1080p.BluRay.mHD.x264.AC3-ROMKENT.torrent
2023-08-14 00:00 - 2023-08-14 00:00 - 000002550 _____ C:\Users\ledou\Downloads\Le petit livre des plaisirs coupables.epub.torrent
2023-08-13 21:23 - 2023-08-13 21:23 - 000214970 _____ C:\Users\ledou\Downloads\A.Mon.Seul.Desir.2023.FRENCH.1080p.WEB.H265-ONLYMOViE.torrent
2023-08-11 14:38 - 2023-09-08 15:03 - 119537664 _____ C:\WINDOWS\system32\config\SOFTWARE
2023-08-10 22:31 - 2023-08-10 22:31 - 000009860 _____ C:\Users\ledou\Downloads\Corse.Matin.10.Aout.2023.FRENCH.PDF-TFA.torrent
2023-08-09 21:42 - 2023-08-09 21:42 - 000237172 _____ C:\Users\ledou\Downloads\Jeune.Femme.2017.VOF.1080P.mHD.X264.AC3-ROMKENT.torrent
2023-08-09 18:16 - 2023-08-09 18:16 - 000000358 _____ C:\Users\ledou\Downloads\prof ne devrait pas dire ça _ Choses vues et choses tues dans l'Education Nationale, Un - Eve Vaguerlant.epub.torrent
2023-08-09 11:34 - 2023-08-09 11:34 - 000000000 ___HD C:\$WinREAgent
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-09-08 15:19 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-08 15:13 - 2022-02-18 13:12 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-09-08 15:08 - 2021-04-21 11:11 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-09-08 15:08 - 2019-12-07 16:49 - 000794330 _____ C:\WINDOWS\system32\perfh00C.dat
2023-09-08 15:08 - 2019-12-07 16:49 - 000150444 _____ C:\WINDOWS\system32\perfc00C.dat
2023-09-08 15:08 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-08 15:06 - 2021-12-17 05:34 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-08 15:06 - 2020-01-20 00:23 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-08 15:05 - 2023-07-31 14:09 - 000000000 ____D C:\Users\ledou\AppData\Local\Malwarebytes
2023-09-08 15:05 - 2020-03-08 19:43 - 000000000 ____D C:\Users\ledou\AppData\Local\Plex Media Server
2023-09-08 15:05 - 2019-01-16 02:25 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Dropbox
2023-09-08 15:05 - 2019-01-16 02:25 - 000000000 ____D C:\Users\ledou\AppData\Local\Dropbox
2023-09-08 15:04 - 2021-04-21 11:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-09-08 15:04 - 2020-01-20 00:24 - 000000000 ____D C:\Program Files\CCleaner
2023-09-08 15:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-09-08 15:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-08 15:04 - 2018-10-23 07:53 - 000000000 ___RD C:\Users\ledou\OneDrive
2023-09-08 15:04 - 2018-10-23 06:55 - 000000000 ___HD C:\Intel
2023-09-08 15:03 - 2021-04-21 11:00 - 000008192 ___SH C:\DumpStack.log.tmp
2023-09-08 15:03 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-09-08 15:02 - 2019-02-25 19:16 - 000000000 ____D C:\Users\ledou\AppData\LocalLow\Temp
2023-09-08 14:21 - 2020-09-06 12:30 - 000000000 ____D C:\Users\ledou\AppData\Roaming\calibre
2023-09-08 14:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-08 14:21 - 2019-01-17 14:12 - 000000000 ____D C:\Users\ledou\AppData\LocalLow\Mozilla
2023-09-08 14:16 - 2020-09-06 12:22 - 000000000 ____D C:\Users\ledou\AppData\Local\calibre-cache
2023-09-08 13:35 - 2019-02-06 13:01 - 000000000 ____D C:\Users\ledou\AppData\Roaming\FileZilla
2023-09-08 13:31 - 2022-07-27 15:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2023-09-08 13:31 - 2022-07-27 15:03 - 000000000 ____D C:\Program Files\Calibre2
2023-09-08 13:10 - 2019-01-19 01:40 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Microsoft\Word
2023-09-08 12:36 - 2021-04-21 11:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-08 05:19 - 2019-01-16 02:25 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-09-08 05:19 - 2019-01-16 00:54 - 000000000 ____D C:\ProgramData\Packages
2023-09-08 05:19 - 2018-10-23 07:51 - 000000000 ____D C:\Users\ledou\AppData\Local\Packages
2023-09-08 01:00 - 2020-01-20 00:24 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-09-07 20:45 - 2019-01-15 19:40 - 000000000 ____D C:\Users\ledou\AppData\Roaming\vlc
2023-09-06 22:54 - 2020-09-20 00:35 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-09-03 23:50 - 2021-09-26 17:17 - 000000000 ____D C:\WINDOWS\Minidump
2023-09-03 23:50 - 2019-02-19 16:47 - 000000000 ____D C:\Users\ledou\AppData\Local\CrashDumps
2023-09-02 23:22 - 2021-04-21 10:24 - 000000000 ____D C:\Users\ledou
2023-09-02 23:06 - 2022-10-22 23:10 - 000001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server.lnk
2023-09-02 11:12 - 2020-06-24 13:38 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-02 00:41 - 2021-12-11 00:45 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2004802613-415574345-268722864-1001
2023-09-02 00:41 - 2021-04-21 11:07 - 000003356 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2004802613-415574345-268722864-1001
2023-09-02 00:41 - 2021-04-21 10:24 - 000002419 _____ C:\Users\ledou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-08-30 22:10 - 2019-01-16 01:00 - 000000000 ____D C:\Users\ledou\AppData\Local\D3DSCache
2023-08-30 21:26 - 2018-05-14 22:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-08-30 21:15 - 2019-01-17 14:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-30 20:24 - 2020-01-19 19:41 - 000000000 ____D C:\ProgramData\TEMP
2023-08-30 19:55 - 2020-05-03 14:16 - 000000000 ____D C:\Users\ledou\AppData\Roaming\WhatsApp
2023-08-27 13:20 - 2019-01-17 14:12 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-08-18 00:24 - 2022-09-20 16:26 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-08-16 21:33 - 2022-09-20 16:26 - 000003472 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-08-16 21:33 - 2021-04-21 11:07 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-08-15 23:32 - 2019-02-06 13:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2023-08-15 23:32 - 2019-02-06 13:01 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2023-08-12 19:15 - 2021-04-21 17:57 - 000000000 ___RD C:\Users\ledou\Dropbox
2023-08-12 09:59 - 2020-10-23 11:26 - 000000000 ____D C:\Program Files (x86)\TagRename
2023-08-11 14:38 - 2023-07-31 14:18 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2023-08-11 13:36 - 2019-01-19 01:44 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Microsoft\Excel
2023-08-10 22:46 - 2021-04-21 11:00 - 000488568 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2023-08-10 16:56 - 2021-11-27 15:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2023-08-10 16:56 - 2021-11-27 15:38 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2023-08-09 11:44 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-09 11:41 - 2021-04-21 11:00 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-08-09 10:09 - 2019-01-15 19:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-09 10:06 - 2019-01-15 19:31 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2023-07-30 14:27 - 2023-07-30 14:27 - 000000004 _____ () C:\Users\ledou\.JixiFlag.dat
2023-07-30 14:26 - 2023-07-30 14:27 - 107496061 _____ () C:\Users\ledou\.JixiImg.dat
2019-08-17 12:13 - 2019-08-19 02:00 - 000000551 _____ () C:\Users\ledou\AppData\Roaming\LAPTOP-W.MTBF.txt
2019-02-19 09:33 - 2022-09-20 18:11 - 000001456 _____ () C:\Users\ledou\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-08-17 12:27 - 2019-08-17 12:27 - 000003584 _____ () C:\Users\ledou\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-02-12 17:39 - 2023-07-31 12:59 - 000011275 _____ () C:\Users\ledou\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par WL (administrateur) sur LAPTOP-W (ASUSTeK COMPUTER INC. UX410UAR) (08-09-2023 15:18:59)
Exécuté depuis C:\Users\ledou\Desktop\FRST64.exe
Profils chargés: WL
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3324 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe ->) (Plex, Inc. -> ) C:\Program Files\Plex\Plex Media Server\Plex Tuner Service.exe
(C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe ->) (Plex, Inc. -> ) C:\Program Files\Plex\Plex Media Server\PlexScriptHost.exe <2>
(C:\Program Files\Plex\Plex Media Server\PlexScriptHost.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Conexant Systems LLC -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxEM.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTek Computer Inc.) C:\Program Files\WindowsApps\B9ECED6F.ASUSBatteryHealthCharging_1.0.7.0_x86__qmba6cd70vzyy\ASUS Battery Health Charging\BhcMgr.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé] C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(explorer.exe ->) (Plex, Inc. -> Plex, Inc.) C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5>
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Evoluent) [Fichier non signé] C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoDriverUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_5324fa118488c79a\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_fb9939a7d714d646\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe
(services.exe ->) (OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(services.exe ->) (Orbweb Taiwan Inc. -> Orbweb Inc.) C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\updater.exe
(services.exe ->) (Orbweb Taiwan Inc. -> Orbweb Inc.) C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\ZenAnywhere.exe
(services.exe ->) (Plex, Inc. -> Plex, Inc.) C:\Program Files\Plex\Plex Media Server\Plex Update Service.exe
(services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe <2>
(services.exe ->) (Wacom Technology Corp. -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\spaceman.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(www.xmrig.com) [Fichier non signé] C:\Windows\DlHost.exe <4>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-29] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6609176 2022-04-11] (Adobe Inc. -> Adobe Systems Inc.) [Fichier non signé]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11559648 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Evoluent Mouse Listener] => C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoMouseListener.exe [33280 2017-01-11] (Microsoft) [Fichier non signé]
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [Fichier non signé]
HKLM-x32\...\Run: [Share-to-Web Namespace Daemon] => C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe [57344 2001-07-03] (Hewlett-Packard) [Fichier non signé]
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2023-07-31] (Adobe Inc. -> )
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [669112 2019-10-31] (OpenVPN Inc. -> )
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\AnyTrans for iOS\AnyTransToolHelper.exe [575160 2021-08-05] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\Run: [Plex Media Server] => C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe [27641368 2023-07-24] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\MountPoints2: {00c12bf3-7589-11ec-a135-8aa1811400a4} - "E:\Autoplay.exe" -auto
HKU\S-1-5-21-2004802613-415574345-268722864-1001\...\MountPoints2: {b9e8248a-bc27-11ec-a13b-8ef1f1d1e7c9} - "F:\Autoplay.exe" -auto
HKU\S-1-5-21-2004802613-415574345-268722864-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [39936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Plex Media Server] => "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (Pas de fichier)
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS6000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDE.DLL [30720 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS6100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDP.DLL [482816 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2022-04-07] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS6000 series: C:\WINDOWS\system32\CNMLMDE.DLL [485376 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS6100 series: C:\WINDOWS\system32\CNMLMDP.DLL [1302016 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.180\Installer\chrmstp.exe [2023-09-08] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Evoluent Mouse Manager.lnk [2019-02-06]
ShortcutTarget: Evoluent Mouse Manager.lnk -> C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoMouseExec.exe (Evoluent) [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {DFBDE00D-2804-4B34-B48D-1BFB7D3964AF} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {D030319E-FF30-4CC2-AF01-1B5817B07F61} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-ledoux.william@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled (Pas de fichier)
Task: {8D634482-FD8F-4640-98E6-2A3B54FA51AD} - System32\Tasks\ASUS Hello => C:\Program Files (x86)\ASUS\ASUS Hello\ASUSHelloBG.exe [642448 2018-05-31] (ASUSTeK Computer Inc. -> )
Task: {B4E10865-06CF-481C-B3B3-BE8D158CE99B} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304 2017-11-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {D587E41D-7268-43EE-8578-2973C95EFACA} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124304 2017-11-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {F5080595-495F-4847-A868-C63CFBF64FF0} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {DF74EC8A-67B8-4B41-8705-78B71319BDAD} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "42e8b4e3-3820-4e77-99d0-04c2f0615176" --version "6.15.10623" --silent
Task: {2B1A6EDD-EE98-4A11-A69A-0C56BFF40D84} - System32\Tasks\CCleanerSkipUAC - WL => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {749C67A6-4459-493C-A537-8A56D86F10E7} - System32\Tasks\CEUA1 => C:\Users\ledou\AppData\Local\MSkio2\MSkio2.exe (Pas de fichier)
Task: {CE782460-C148-407E-ABB7-3155C9E66160} - System32\Tasks\CEUA2 => C:\Users\ledou\AppData\Local\MSimw2\MSimw2.exe (Pas de fichier)
Task: {1CA79E9B-3131-459F-8D9F-3AE0E9911983} - System32\Tasks\CEUA3 => C:\Users\ledou\AppData\Local\MSssg2\MSssg2.exe (Pas de fichier)
Task: {09A8C2F6-5832-4147-8A52-BB390613CD8D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {224BBF78-47D4-4065-BADF-BC3ACB7CC3E2} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {3A81FEB6-F0E2-421E-9CE8-D429254C632B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2020-01-20] (Google Inc -> Google Inc.)
Task: {B0071860-9882-4896-A0EA-DDE2D9732E39} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2020-01-20] (Google Inc -> Google Inc.)
Task: {5FF91C2B-BAB3-4D2D-9572-0E16CF3B1AA4} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)
Task: {02724FCD-9862-4F74-BD93-79F46C2D704D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)
Task: {1DDC86FA-9FC2-421F-ABB2-CD45B6678710} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier)
Task: {9A81D6B5-FF03-419F-9F7E-91B5398C2C47} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24257912 2018-12-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BFCD299-4537-421B-8947-B9C27202D7FC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24257912 2018-12-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FE929F1-D9D5-4592-939B-9047D4A9D8F9} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [123168 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {EB9C5F08-0346-45DC-8614-7D66BAE2C14F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [123168 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {CE1CEBDB-4FE0-4F4A-AD10-26E2A74BFC21} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2139424 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {86D08AD8-194A-471A-A3BB-CDC8EB84B3E8} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2139424 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {39E1A679-B059-4E15-902D-358A741A6C94} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3398344 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {FA30D967-0955-4621-BF0E-A9C690B6691A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3398344 2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {5EDCBFE2-9841-4132-BBE3-69E369485FC4} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [492032 2023-05-10] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\WINDOWS\mid.ps1
Task: {247EF7E3-A16A-418F-8637-D8387E06B1C8} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [Fichier non signé]
Task: {AE7600A9-4801-4A19-8CBF-269267A10B41} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {CC555EEE-EFCD-4EDC-910F-35D731EC12C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {715C2813-ACE2-4FE6-BE7F-94668F97523C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DFF7899C-FD9F-4888-BC56-D7A9D783B4C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EE710013-3285-429A-8C9F-0035DE18BF4C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42A8BF4B-25DA-4D94-A9D0-492259B4296F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [733088 2023-08-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {2BEC5814-5C4D-4262-A619-9A6AB28DC77F} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [492032 2023-05-10] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy ByPass -WindowStyle Hidden C:\Users\ledou\AppData\Roaming\Winsoft\core.ps1
Task: {A14CF0BE-E5FC-4557-97AF-F8E02EB3BC90} - System32\Tasks\PinnacleStudio22Notifier => C:\Program Files\Pinnacle\Studio 22\programs\PinnacleNotifierWrapper.exe [17504 2019-06-19] (Corel Corporation -> Pinnacle)
Task: {B6281908-E32B-4FED-9F48-B01E56D86BBB} - System32\Tasks\PinnacleStudioUpdater => C:\Program Files\Pinnacle\Studio 22\programs\PSNotification.exe [635976 2019-02-20] (Corel Corporation -> )
Task: {79893140-0446-4646-8FC3-39EA8401065D} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{3e039893-c8be-44fe-8753-484b5266aff7}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{5b0fa311-2ae5-4a56-9fa6-3c59e5a8e38b}: [DhcpNameServer] 80.67.169.12 80.67.169.40
Tcpip\..\Interfaces\{98018192-438d-460e-a64c-2e17171f73ac}: [DhcpNameServer] 10.66.24.1
Tcpip\..\Interfaces\{ec82b8b8-d494-4fd7-9dbf-087a92418e78}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{ee00d3a4-5e9b-41a0-b9be-4beefa3d4039}: [DhcpNameServer] 192.168.42.129
Edge:
=======
DownloadDir: C:\Users\ledou\Downloads
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\ledou\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-03]
Edge HomePage: Default -> hxxp://asus17win10.msn.com/?pc=ASTE
Edge StartupUrls: Default -> "hxxp://www.google.fr/"
Edge Extension: (Edge relevant text changes) - C:\Users\ledou\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-08-09]
FireFox:
========
FF DefaultProfile: otoh2llq.default-1566826665196
FF ProfilePath: C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 [2023-09-08]
FF Homepage: Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 -> hxxp://www.google.fr/
FF Notifications: Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196 -> hxxps://pagesjaunes-by.accengage.net; hxxps://www.zdnet.fr; hxxps://guitargearfinder.com; hxxps://www.piecesauto24.com; hxxps://www.avis-sportifs.com; hxxps://www.bandsintown.com; hxxps://www.decitre.fr; hxxps://news.amomama.com; hxxps://monjardinmamaison.maison-travaux.fr; hxxps://www.opensubtitles.org; hxxps://www.marmiton.org
FF Extension: (Malwarebytes Browser Guard) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2023-08-31]
FF Extension: (Video DownloadHelper) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-08-25]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ledou\AppData\Roaming\Mozilla\Firefox\Profiles\otoh2llq.default-1566826665196\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-20]
FF Extension: (Pas de nom) - C:\Program Files\Mozilla Firefox\browser\features\{3B1335C3-B907-4CDC-A956-374AA110DAAD}.xpi [2019-02-19] [non signé]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) [Fichier non signé]
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.4 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom) [Fichier non signé]
FF Plugin HKU\S-1-5-21-2004802613-415574345-268722864-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom) [Fichier non signé]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default [2023-09-08]
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (Chrome IG Story) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmhknopedmipekbmmilfjgpefeonmog [2020-11-03]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-07-04]
CHR Profile: C:\Users\ledou\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-09-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-05-20] (Apple Inc. -> Apple Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9619824 2018-12-26] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
S2 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [325456 2018-06-12] (ASUSTek Computer Inc. -> )
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43272 2023-07-03] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [212744 2023-07-03] (Intel Corporation -> Intel)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [135824 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R2 EvoDriverUpdateService; C:\Program Files (x86)\Evoluent\Evoluent Mouse Manager\EvoDriverUpdateService.exe [30208 2017-01-11] (Evoluent) [Fichier non signé]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-08-10] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9283096 2023-09-01] (Malwarebytes Inc. -> Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
R2 PlexUpdateService; C:\Program Files\Plex\Plex Media Server\Plex Update Service.exe [898048 2023-07-24] (Plex, Inc. -> Plex, Inc.)
R2 TabletServiceWacom; C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe [6438264 2011-06-06] (Wacom Technology Corp. -> Wacom Technology, Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe [3121008 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe [133688 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe [495720 2018-07-04] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 ZenAnywhere; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\ZenAnywhere.exe [156056 2018-05-17] (Orbweb Taiwan Inc. -> Orbweb Inc.)
R2 ZenAnywhere Updater; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\updater.exe [156056 2018-05-17] (Orbweb Taiwan Inc. -> Orbweb Inc.)
S3 ZenAnywhereNetworkService; C:\Program Files\Orbweb Inc\ASUS ZenAnywhere\bin\ZenAnywhereNetworkService.exe [69016 2017-04-07] (Orbweb Taiwan Inc. -> Orbweb Inc.)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [150840 2021-07-08] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 DCamUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emDevice64.sys [231312 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [42256 2022-01-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 emAudio; C:\WINDOWS\system32\drivers\emAudio64.sys [42000 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
S3 EvoMouseDriverFilterHidUsb; C:\WINDOWS\System32\drivers\EvoMouseDriverFilterHidUsb.sys [29928 2017-01-06] (WDKTestCert v.kurilovich,130838452094803308 -> Evoluent)
R3 EvoMouseDriverMini; C:\WINDOWS\system32\drivers\EvoMouseDriverMini.sys [27344 2017-01-12] (WDKTestCert v.kurilovich,130838452094803308 -> Evoluent)
S3 FiltUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emFilter64.sys [17792 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-08-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-07-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-07-31] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKslc1628421; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B749D5BA-F335-48D0-83EA-BE53B470687A}\MpKslDrv.sys [222464 2023-09-08] (Microsoft Windows -> Microsoft Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2020-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 RealWoW60; C:\WINDOWS\system32\DRIVERS\RealWoW60.sys [39432 2017-04-07] (Realtek Semiconductor Corp. -> Realtek semiconductor corp)
S3 ScanUSBEMPIA; C:\WINDOWS\system32\DRIVERS\emScan64.sys [18304 2015-08-05] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology Corp.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 UcmCxRtk; C:\WINDOWS\System32\drivers\UcmCxRtk.sys [101344 2017-08-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55872 2023-08-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [574872 2023-08-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2023-08-30] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-09-08 15:18 - 2023-09-08 15:19 - 000039383 _____ C:\Users\ledou\Desktop\FRST.txt
2023-09-08 15:16 - 2023-09-08 15:16 - 002382336 _____ (Farbar) C:\Users\ledou\Desktop\FRST64.exe
2023-09-08 13:34 - 2023-09-08 13:34 - 000000000 ____D C:\Users\ledou\Downloads\DeDRM_tools_10.0.3
2023-09-08 13:27 - 2023-09-08 13:28 - 158523392 _____ C:\Users\ledou\Downloads\calibre-64bit-6.26.0.msi
2023-09-08 13:25 - 2023-09-08 13:25 - 000447095 _____ C:\Users\ledou\Downloads\DeDRM_tools_10.0.3.zip
2023-09-08 13:18 - 2023-09-08 13:18 - 000023170 _____ C:\Users\ledou\Downloads\Oscar Peterson Trio - Something Warm (Remastered Version) (Doxy Collection) - 2023 - WEB FLAC 16BITS 44.1KHZ-EICHBAUM.torrent
2023-09-08 13:16 - 2023-09-08 13:16 - 000029195 _____ C:\Users\ledou\Downloads\Sentinelle (2023).mkv.torrent
2023-09-08 05:19 - 2023-09-08 05:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-09-06 22:56 - 2023-09-06 22:56 - 000000392 _____ C:\Users\ledou\Downloads\Les Vies de Loulou_Almudena Grandes_1989_FR [PDF].torrent
2023-09-06 22:55 - 2023-09-06 22:55 - 000040727 _____ C:\Users\ledou\Downloads\Las Edades de Lulú_1990_DVD Rip.torrent
2023-09-06 21:32 - 2023-09-06 21:49 - 000000000 ____D C:\Program Files\Stellar Repair for Video
2023-09-06 21:31 - 2023-09-06 21:31 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Stellar Repair for Video 6.7.0.0
2023-09-06 21:25 - 2023-09-06 21:25 - 000021182 _____ C:\Users\ledou\Downloads\Stellar Repair for Video 6.7.0.0 Win Multi + Crack.torrent
2023-09-06 00:17 - 2023-09-06 00:17 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-09-05 20:43 - 2023-09-05 20:43 - 000128119 _____ C:\Users\ledou\Downloads\1956 La blonde et moi Frank Tashlin.torrent
2023-09-05 19:19 - 2023-09-05 19:19 - 000129518 ____R C:\Users\ledou\Downloads\OR_12_PCA_20230905064522_988QN2163P_1580936044034_264.pdf
2023-09-04 22:32 - 2023-09-04 22:32 - 000000000 _____ C:\Users\ledou\Downloads\Y0qoCuvA.htm
2023-09-04 22:23 - 2023-09-04 22:23 - 000028167 _____ C:\Users\ledou\Downloads\Jeff Beck - Blowing In Detroit - 2023 - WEB FLAC 16BITS 44.1KHZ-EICHBAUM.torrent
2023-09-03 23:48 - 2023-09-03 23:48 - 000000699 _____ C:\Users\ledou\Downloads\L.Envie.2011.Sophie.Fontanel.epub.torrent
2023-09-03 18:42 - 2023-09-03 18:43 - 000070468 _____ C:\Users\ledou\Downloads\Addition.txt
2023-09-03 18:39 - 2023-09-03 18:43 - 000057060 _____ C:\Users\ledou\Downloads\FRST.txt
2023-09-03 18:38 - 2023-09-08 15:19 - 000000000 ____D C:\FRST
2023-09-03 18:38 - 2023-09-08 15:03 - 000000000 ____D C:\Users\ledou\Downloads\FRST-OlderVersion
2023-09-03 18:38 - 2023-09-03 18:38 - 002382336 _____ (Farbar) C:\Users\ledou\Downloads\FRST64-2.1.exe
2023-09-03 17:46 - 2023-09-03 17:46 - 000000658 _____ C:\Users\ledou\Downloads\Le.Terminus.Des.Pretentieux.2023.Michel.Audiard.epub.torrent
2023-09-02 23:03 - 2023-09-02 23:05 - 095685832 _____ (Plex, Inc. ) C:\Users\ledou\Downloads\PlexMediaServer-1.32.5.7349-8f4248874-x86_64.exe
2023-09-02 20:47 - 2023-09-02 20:47 - 000000699 _____ C:\Users\ledou\Downloads\Éloge des oiseaux de passage • Jean-Noël Rieffel (2023)_ePub.torrent
2023-09-02 20:47 - 2023-09-02 20:47 - 000000491 _____ C:\Users\ledou\Downloads\L.Echiquier.2023.Jean.Philippe.Toussaint.epub.torrent
2023-09-01 18:31 - 2023-09-01 18:31 - 000059401 _____ C:\Users\ledou\Downloads\The.Fabelmans.2022.MULTi.1080p.10bit.WEBRip.6CH.x265.HEVC-NoTag.mkv.torrent
2023-09-01 18:26 - 2023-09-01 18:26 - 000002253 _____ C:\Users\ledou\Downloads\L'ex plus beau metier du monde.torrent
2023-08-31 19:38 - 2023-08-31 19:38 - 000000481 _____ C:\Users\ledou\Downloads\William.2023.Stéphanie.Hochet.epub.torrent
2023-08-31 19:37 - 2023-08-31 19:37 - 000001419 _____ C:\Users\ledou\Downloads\Des.Que.Sa.Bouche.Fut.Pleine.2023.Juliette.Oury.epub.torrent
2023-08-30 19:56 - 2023-08-30 19:58 - 269848328 _____ C:\Users\ledou\Downloads\hérouville gregory porter.zip
2023-08-29 23:28 - 2023-08-29 23:28 - 000000926 _____ C:\Users\ledou\Downloads\A.Ma.Soeur.Et.Unique.2023.Guy.Boley.epub.torrent
2023-08-29 23:26 - 2023-08-29 23:26 - 000000938 _____ C:\Users\ledou\Downloads\EBOOK Pour les Nuls - La resistance pour les nuls - Dominique Lormier.epub.torrent
2023-08-29 00:13 - 2023-08-29 00:13 - 000001225 _____ C:\Users\ledou\Downloads\Paradise.Nevada.2023.Dario.Diofebi.epub.torrent
2023-08-29 00:13 - 2023-08-29 00:13 - 000000754 _____ C:\Users\ledou\Downloads\Mes.Pas.Dans.Leurs.Ombres.2023.Lionel.Duroy.epub.torrent
2023-08-29 00:09 - 2023-08-29 00:09 - 000000876 _____ C:\Users\ledou\Downloads\Le salon de massage • Mazarine Pingeot (Rentrée Littéraire 2023)_ePub.torrent
2023-08-29 00:09 - 2023-08-29 00:09 - 000000727 _____ C:\Users\ledou\Downloads\Tu la retrouveras • Jean Hatzfeld (Rentrée Littérature 2023)_ePub.torrent
2023-08-27 14:32 - 2023-08-27 14:32 - 000020566 _____ C:\Users\ledou\Downloads\Mahavishnu Orchestra - Birds Of Fire (1973)[FLAC 16bits, 44kHz].torrent
2023-08-27 13:14 - 2023-08-30 21:15 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-27 11:59 - 2023-08-27 11:59 - 000006917 _____ C:\Users\ledou\Downloads\Ulyssemariareve720p.torrent
2023-08-26 21:45 - 2023-08-26 21:45 - 000036131 _____ C:\Users\ledou\Downloads\Bebel Gilberto - Joao - 2023 WEB [FLAC 24Bit 48 KHZ].torrent
2023-08-26 21:43 - 2023-08-26 21:43 - 000000770 _____ C:\Users\ledou\Downloads\Commissaire.Brunetti.T31.Le.Don.Du.Mensonge.2023.Donna.Leon.epub.torrent
2023-08-26 11:37 - 2023-08-26 11:37 - 000000467 _____ C:\Users\ledou\Downloads\Maria Pourchet - Champion - Epub.torrent
2023-08-26 11:37 - 2023-08-26 11:37 - 000000467 _____ C:\Users\ledou\Downloads\Maria Pourchet - Champion - Epub(1).torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000522 _____ C:\Users\ledou\Downloads\Maria Pourchet - Les Impatients.epub.torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000485 _____ C:\Users\ledou\Downloads\Maria Pourchet - Avancer - Epub.torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000485 _____ C:\Users\ledou\Downloads\Maria Pourchet - Avancer - Epub(1).torrent
2023-08-26 11:36 - 2023-08-26 11:36 - 000000452 _____ C:\Users\ledou\Downloads\Toutes les femmes sauf une - Pourchet, Maria.epub.torrent
2023-08-26 11:35 - 2023-08-26 11:35 - 000000618 _____ C:\Users\ledou\Downloads\Feu • Maria Pourchet (2021)_ePub.torrent
2023-08-25 10:59 - 2023-08-25 10:59 - 000000665 _____ C:\Users\ledou\Downloads\Chaleur.Humaine.2023.Serge.Joncour.epub.torrent
2023-08-25 10:59 - 2023-08-25 10:59 - 000000558 _____ C:\Users\ledou\Downloads\Deserter.2023.Mathias.Enard.epub.torrent
2023-08-25 10:58 - 2023-08-25 10:58 - 000000550 _____ C:\Users\ledou\Downloads\La.Nuit.Imaginaire.2023.Hugo.Lindenberg.epub.torrent
2023-08-25 10:57 - 2023-08-25 10:57 - 000100050 _____ C:\Users\ledou\Downloads\Asteroid.City.2023.MULTI.VFF.1080p.WEBRip.x264-LUCKY.mkv.torrent
2023-08-23 13:51 - 2023-08-23 13:51 - 000000687 _____ C:\Users\ledou\Downloads\Nouvelle.Vague.2023.Patrick.Roegiers.epub.torrent
2023-08-23 03:34 - 2023-08-23 03:34 - 000040982 _____ C:\WINDOWS\mid.bin
2023-08-22 18:18 - 2023-07-07 10:31 - 081837568 _____ C:\WINDOWS\svshost.exe
2023-08-22 18:18 - 2023-07-03 07:59 - 008251392 _____ (www.xmrig.com) C:\WINDOWS\DlHost.exe
2023-08-22 18:18 - 2023-06-10 23:29 - 000000202 _____ C:\WINDOWS\bb.bat
2023-08-22 18:18 - 2023-06-10 16:55 - 000000020 _____ C:\WINDOWS\key
2023-08-22 18:18 - 2023-06-09 21:26 - 000000821 _____ C:\WINDOWS\mid.ps1
2023-08-22 18:18 - 2023-06-03 22:02 - 000014544 _____ (OpenLibSys.org) C:\WINDOWS\WinRing0x64.sys
2023-08-22 00:41 - 2023-08-22 00:41 - 000000402 _____ C:\Users\ledou\Downloads\L.Amour.2023.Francois.Begaudeau.epub.torrent
2023-08-21 21:12 - 2023-08-21 21:12 - 000000619 _____ C:\Users\ledou\Downloads\Panorama.2023.Lilia.Hassaine.epub.torrent
2023-08-20 17:14 - 2023-08-20 17:14 - 000000684 _____ C:\Users\ledou\Downloads\Petites.Choses.2023.Benoit.Coquil.epub.torrent
2023-08-20 17:11 - 2023-08-20 17:11 - 000000534 _____ C:\Users\ledou\Downloads\Le.Chateau.Des.Rentiers.2023.Agnes.Desarthe.epub.torrent
2023-08-20 16:43 - 2023-08-20 16:43 - 000017706 _____ C:\Users\ledou\Downloads\Élémentaire [FR-EN] (2023).mkv.torrent
2023-08-15 23:15 - 2023-08-15 23:15 - 004967461 ____R C:\Users\ledou\Downloads\toaz.info-a-new-approach-to-violin-playing-kato-havas-pr_ad812d1c916506e687b24c0ff1296852.pdf
2023-08-15 14:14 - 2023-08-15 14:14 - 000023156 _____ C:\Users\ledou\Downloads\Rêves (Yume) (Akira Kurosawa - 1990) VOSTFR - H264 AVC - AAC.mkv.torrent
2023-08-14 20:11 - 2023-08-14 20:11 - 012160512 _____ (Tim Kosse) C:\Users\ledou\Downloads\FileZilla_3.65.0_win64-setup.exe
2023-08-14 20:10 - 2023-08-14 20:10 - 000005943 _____ C:\Users\ledou\Downloads\Les.trois.mousquetaires.D.Artagnan.2023.VOF.1080p.BluRay.mHD.x264.AC3-ROMKENT.torrent
2023-08-14 00:00 - 2023-08-14 00:00 - 000002550 _____ C:\Users\ledou\Downloads\Le petit livre des plaisirs coupables.epub.torrent
2023-08-13 21:23 - 2023-08-13 21:23 - 000214970 _____ C:\Users\ledou\Downloads\A.Mon.Seul.Desir.2023.FRENCH.1080p.WEB.H265-ONLYMOViE.torrent
2023-08-11 14:38 - 2023-09-08 15:03 - 119537664 _____ C:\WINDOWS\system32\config\SOFTWARE
2023-08-10 22:31 - 2023-08-10 22:31 - 000009860 _____ C:\Users\ledou\Downloads\Corse.Matin.10.Aout.2023.FRENCH.PDF-TFA.torrent
2023-08-09 21:42 - 2023-08-09 21:42 - 000237172 _____ C:\Users\ledou\Downloads\Jeune.Femme.2017.VOF.1080P.mHD.X264.AC3-ROMKENT.torrent
2023-08-09 18:16 - 2023-08-09 18:16 - 000000358 _____ C:\Users\ledou\Downloads\prof ne devrait pas dire ça _ Choses vues et choses tues dans l'Education Nationale, Un - Eve Vaguerlant.epub.torrent
2023-08-09 11:34 - 2023-08-09 11:34 - 000000000 ___HD C:\$WinREAgent
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-09-08 15:19 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-08 15:13 - 2022-02-18 13:12 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-09-08 15:08 - 2021-04-21 11:11 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-09-08 15:08 - 2019-12-07 16:49 - 000794330 _____ C:\WINDOWS\system32\perfh00C.dat
2023-09-08 15:08 - 2019-12-07 16:49 - 000150444 _____ C:\WINDOWS\system32\perfc00C.dat
2023-09-08 15:08 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-08 15:06 - 2021-12-17 05:34 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-08 15:06 - 2020-01-20 00:23 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-08 15:05 - 2023-07-31 14:09 - 000000000 ____D C:\Users\ledou\AppData\Local\Malwarebytes
2023-09-08 15:05 - 2020-03-08 19:43 - 000000000 ____D C:\Users\ledou\AppData\Local\Plex Media Server
2023-09-08 15:05 - 2019-01-16 02:25 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Dropbox
2023-09-08 15:05 - 2019-01-16 02:25 - 000000000 ____D C:\Users\ledou\AppData\Local\Dropbox
2023-09-08 15:04 - 2021-04-21 11:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-09-08 15:04 - 2020-01-20 00:24 - 000000000 ____D C:\Program Files\CCleaner
2023-09-08 15:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-09-08 15:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-08 15:04 - 2018-10-23 07:53 - 000000000 ___RD C:\Users\ledou\OneDrive
2023-09-08 15:04 - 2018-10-23 06:55 - 000000000 ___HD C:\Intel
2023-09-08 15:03 - 2021-04-21 11:00 - 000008192 ___SH C:\DumpStack.log.tmp
2023-09-08 15:03 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-09-08 15:02 - 2019-02-25 19:16 - 000000000 ____D C:\Users\ledou\AppData\LocalLow\Temp
2023-09-08 14:21 - 2020-09-06 12:30 - 000000000 ____D C:\Users\ledou\AppData\Roaming\calibre
2023-09-08 14:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-08 14:21 - 2019-01-17 14:12 - 000000000 ____D C:\Users\ledou\AppData\LocalLow\Mozilla
2023-09-08 14:16 - 2020-09-06 12:22 - 000000000 ____D C:\Users\ledou\AppData\Local\calibre-cache
2023-09-08 13:35 - 2019-02-06 13:01 - 000000000 ____D C:\Users\ledou\AppData\Roaming\FileZilla
2023-09-08 13:31 - 2022-07-27 15:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2023-09-08 13:31 - 2022-07-27 15:03 - 000000000 ____D C:\Program Files\Calibre2
2023-09-08 13:10 - 2019-01-19 01:40 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Microsoft\Word
2023-09-08 12:36 - 2021-04-21 11:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-08 05:19 - 2019-01-16 02:25 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-09-08 05:19 - 2019-01-16 00:54 - 000000000 ____D C:\ProgramData\Packages
2023-09-08 05:19 - 2018-10-23 07:51 - 000000000 ____D C:\Users\ledou\AppData\Local\Packages
2023-09-08 01:00 - 2020-01-20 00:24 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-09-07 20:45 - 2019-01-15 19:40 - 000000000 ____D C:\Users\ledou\AppData\Roaming\vlc
2023-09-06 22:54 - 2020-09-20 00:35 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-09-03 23:50 - 2021-09-26 17:17 - 000000000 ____D C:\WINDOWS\Minidump
2023-09-03 23:50 - 2019-02-19 16:47 - 000000000 ____D C:\Users\ledou\AppData\Local\CrashDumps
2023-09-02 23:22 - 2021-04-21 10:24 - 000000000 ____D C:\Users\ledou
2023-09-02 23:06 - 2022-10-22 23:10 - 000001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server.lnk
2023-09-02 11:12 - 2020-06-24 13:38 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-02 00:41 - 2021-12-11 00:45 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2004802613-415574345-268722864-1001
2023-09-02 00:41 - 2021-04-21 11:07 - 000003356 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2004802613-415574345-268722864-1001
2023-09-02 00:41 - 2021-04-21 10:24 - 000002419 _____ C:\Users\ledou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-08-30 22:10 - 2019-01-16 01:00 - 000000000 ____D C:\Users\ledou\AppData\Local\D3DSCache
2023-08-30 21:26 - 2018-05-14 22:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-08-30 21:15 - 2019-01-17 14:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-30 20:24 - 2020-01-19 19:41 - 000000000 ____D C:\ProgramData\TEMP
2023-08-30 19:55 - 2020-05-03 14:16 - 000000000 ____D C:\Users\ledou\AppData\Roaming\WhatsApp
2023-08-27 13:20 - 2019-01-17 14:12 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-08-18 00:24 - 2022-09-20 16:26 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-08-16 21:33 - 2022-09-20 16:26 - 000003472 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-08-16 21:33 - 2021-04-21 11:07 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-08-15 23:32 - 2019-02-06 13:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2023-08-15 23:32 - 2019-02-06 13:01 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2023-08-12 19:15 - 2021-04-21 17:57 - 000000000 ___RD C:\Users\ledou\Dropbox
2023-08-12 09:59 - 2020-10-23 11:26 - 000000000 ____D C:\Program Files (x86)\TagRename
2023-08-11 14:38 - 2023-07-31 14:18 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2023-08-11 13:36 - 2019-01-19 01:44 - 000000000 ____D C:\Users\ledou\AppData\Roaming\Microsoft\Excel
2023-08-10 22:46 - 2021-04-21 11:00 - 000488568 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-08-10 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2023-08-10 16:56 - 2021-11-27 15:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2023-08-10 16:56 - 2021-11-27 15:38 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2023-08-09 11:44 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-09 11:41 - 2021-04-21 11:00 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-08-09 10:09 - 2019-01-15 19:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-09 10:06 - 2019-01-15 19:31 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2023-07-30 14:27 - 2023-07-30 14:27 - 000000004 _____ () C:\Users\ledou\.JixiFlag.dat
2023-07-30 14:26 - 2023-07-30 14:27 - 107496061 _____ () C:\Users\ledou\.JixiImg.dat
2019-08-17 12:13 - 2019-08-19 02:00 - 000000551 _____ () C:\Users\ledou\AppData\Roaming\LAPTOP-W.MTBF.txt
2019-02-19 09:33 - 2022-09-20 18:11 - 000001456 _____ () C:\Users\ledou\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2019-08-17 12:27 - 2019-08-17 12:27 - 000003584 _____ () C:\Users\ledou\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-02-12 17:39 - 2023-07-31 12:59 - 000011275 _____ () C:\Users\ledou\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================