Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-11-2023 02
Exécuté par theo- (administrateur) sur LAPTOP-JS4V87MC (HUAWEI BOHK-WAX9X) (15-11-2023 10:13:55)
Exécuté depuis C:\Users\theo-\OneDrive\Bureau\FRST64.exe
Profils chargés: theo-
Plate-forme: Microsoft Windows 11 Famille Version 22H2 22621.2428 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) D:\AMD\CNext\CNext\RadeonSoftware.exe
(D:\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) D:\AMD\CNext\CNext\cncmd.exe
(DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atieclxx.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2342.8.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files (x86)\McAfee Security Scan\4.1.385\McUpdaterModule.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.29700.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.2423_none_e946dbb842dfcc3f\TiWorker.exe
(SystemSettingsAdminFlows.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Dism\DismHost.exe
(Western Digital Technologies, Inc.) [Fichier non signé] C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe [1257032 2021-04-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2253824 2022-04-22] (Western Digital Technologies, Inc.) [Fichier non signé]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [708840 2022-04-25] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [ut] => C:\Users\theo-\AppData\Roaming\uTorrent\uTorrent.exe [2257928 2023-11-08] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [MicrosoftEdgeAutoLaunch_3585A091B9C934786EF5DF22B480513A] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3894824 2023-11-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [Steam] => D:\steam\steam.exe [4377448 2023-10-31] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\MountPoints2: {7c129fdd-b57f-11ea-9b77-a37db32989f7} - "F:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MX360 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAK.DLL [29696 2010-09-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP a211 Status Monitor: C:\WINDOWS\system32\hpinkstsa211LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3070 B611 series): C:\WINDOWS\system32\HPDiscoPMa211.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2023-10-12]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe (McAfee, LLC -> McAfee, LLC)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {BC0A6097-F752-4DF9-A567-0D788B2215D2} - \Microsoft\Windows\Bluetooth\UninstallDeviceTask -> Pas de fichier <==== ATTENTION
Task: {9EB381F7-724D-435C-9A10-EF0BB81126A8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {E76131B7-C11C-4B60-A261-7D09302A08BD} - System32\Tasks\AMDInstallLauncher => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {C11DD0EF-B85A-4985-8ED3-BF4AE508C5D2} - System32\Tasks\AMDLinkUpdate => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {385E3CF9-9391-487A-A281-C2ECD5AAD204} - System32\Tasks\AMDRyzenMasterSDKTask => D:\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {49FEB6E1-82F5-4623-9250-67436AEB3AFD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [617096 2022-02-25] (Apple Inc. -> Apple Inc.)
Task: {7F5C217E-773F-4D8B-8390-F9AB846BCB7E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Pas de fichier)
Task: {C9A88254-AEEC-4034-8931-C33E7DE72590} - System32\Tasks\CCleanerSkipUAC => "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) (Pas de fichier)
Task: {B91FF6F5-83AA-438F-8F04-4C260C71991A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\EXPLORER.EXE [5261576 2023-10-12] (Microsoft Windows -> Microsoft Corporation)
Task: {5B679B83-A143-41F1-B651-4F9151EB3E97} - System32\Tasks\McUpdaterModuleTask => C:\Program Files (x86)\McAfee Security Scan\4.1.385\McUpdaterModule.exe [2094368 2023-08-22] (McAfee, LLC -> McAfee, LLC)
Task: {83F8EA17-8073-4426-B13A-730DF989BBF3} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy RefresheIt9qX => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\2203.tmp\2204.tmp.ps1" <==== ATTENTION
Task: {5410C6AD-0EB1-4E91-84EF-8A578762B08E} - System32\Tasks\Microsoft\Windows\License Manager\TempSignedLicenseExchangeKbhYOwk => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\986C.tmp\986D.tmp.ps1" <==== ATTENTION
Task: {C3AC2219-CD76-42C3-9274-C1F973EC7CEF} - System32\Tasks\Microsoft\Windows\Maintenance\WinSAT4zzXx6 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\728.tmp\729.tmp.ps1" <==== ATTENTION
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {3C264CB4-5855-4A6A-8319-FA8965CAF0F3} - System32\Tasks\Microsoft\Windows\RestartManager\Gm3Ige => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\60D3.tmp\60D4.tmp.ps1" <==== ATTENTION
Task: {134CC06A-EFBD-40A9-9B62-2FF41883B85D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (Pas de fichier)
Task: {7C1DAA9A-3E57-42F8-84C4-86199A1943E1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {77880370-7C25-4E04-B1CA-927DCBD26818} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (Pas de fichier)
Task: {78B6F2BD-0B32-4D65-93CB-A031794EF830} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {C16DD160-7C19-4ED8-BA55-C9300FDD81A6} - System32\Tasks\Microsoft\Windows\WaaSMedic\DeferredWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {4F6CF0E2-B096-4F55-9E9B-0209A5E7D0C9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7F8A6A2-A6B1-479C-BDA7-DA57FD7CCE39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DE6720FA-2644-4D0A-8FCF-8033107207D8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FE80EEC5-CCA6-4218-A09D-DE80851409B9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8EFE3E3E-25DB-40C2-B195-D59792AB2BCD} - System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration LoaderGS7Qp6E => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\CA10.tmp\CA20.tmp.ps1" <==== ATTENTION
Task: {CBE9CF38-A07A-4EA1-AE94-860AAD55D1C6} - System32\Tasks\ModifyLinkUpdate => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {48646DAC-B4D8-4BD6-A4E9-47CACFC55301} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-10-09] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {DDB969CB-6825-4B9A-9D98-686DD2C48B0F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-10-09] (Mozilla Corporation -> Mozilla Foundation)
Task: {D08B7B31-10C2-4C40-AE7B-BA47B0242A96} - System32\Tasks\Opera scheduled assistant Autoupdate 1667388390 => C:\Users\theo-\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\theo-\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {FAD6ED5F-C4B9-46B2-8207-F3E34B2CA922} - System32\Tasks\Opera scheduled Autoupdate 1667388388 => C:\Users\theo-\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {13E4E025-0360-42F5-87D5-2DDCEB4C1A14} - System32\Tasks\SecurityScannerScheduler => C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe [817352 2023-08-22] (McAfee, LLC -> McAfee, LLC)
Task: {145B4213-BD9D-4BB4-8655-CB4292F9B21E} - System32\Tasks\StartCN => D:\AMD\CNext\CNext\cncmd.exe [60344 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {AEC8C360-A58A-4C8C-B05A-AA24387D9550} - System32\Tasks\StartDVR => D:\AMD\CNext\CNext\RSServCmd.exe [324024 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {C7FDE7AB-DAC6-45AE-BE78-F9C8CFA2258D} - System32\Tasks\Toolbox.exe_{38E406AF-D12B-4CE6-8DF1-D42C600F3D90} => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\Toolbox.exe [3985512 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{4f301fd8-e382-4983-9ea0-efaa5d14e4f7}: [DhcpNameServer] 40.40.1.12
Tcpip\..\Interfaces\{7a2f0a97-0fb4-45d0-8b73-5ee6784947b5}: [NameServer] 77.88.8.8,77.88.8.1
Tcpip\..\Interfaces\{7a2f0a97-0fb4-45d0-8b73-5ee6784947b5}: [DhcpNameServer] 192.168.43.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-13]
Edge Extension: (Google Docs hors connexion) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-03]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2023-11-13]
Edge Extension: (Edge relevant text changes) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]
FireFox:
========
FF DefaultProfile: 46awi8or.default
FF ProfilePath: C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\46awi8or.default [2023-10-24]
FF ProfilePath: C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\zlcjsx03.default-release [2023-11-15]
FF Notifications: Mozilla\Firefox\Profiles\zlcjsx03.default-release -> hxxps://mon-guide-pc.com; hxxps://www.instagram.com; hxxps://floridaman.com; hxxps://www.salaire-brut-en-net.fr; hxxps://cuisine-addict.com; hxxps://www.e-snes.org; hxxps://www.opensubtitles.org; hxxps://www.ldlc.com
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\zlcjsx03.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-22]
FF Plugin: @java.com/DTPlugin,version=11.333.2 -> C:\Program Files\Java\jre1.8.0_333\bin\dtplugin\npDeployJava1.dll [2022-06-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.333.2 -> C:\Program Files\Java\jre1.8.0_333\bin\plugin2\npjp2.dll [2022-06-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.14 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-10-09] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default [2023-10-14]
CHR Extension: (Torrent Scanner) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2023-06-04]
CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2020-05-01]
CHR Extension: (HP SimplePass) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\fidikogfgleiaefnjbmnjaplmgknppkg [2020-05-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-04]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-06-04]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-04]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
Opera:
=======
OPR Profile: C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable [2023-10-14]
OPR Notifications: Opera Stable -> hxxps://download-alert.com; hxxps://fr.aliexpress.com; hxxps://mail.yandex.ru; hxxps://ourhotstories.com; hxxps://tinder.com; hxxps://totalcoolblog.com; hxxps://twitter.com; hxxps://www.capital.fr; hxxps://www.facebook.com; hxxps://www.instagram.com; hxxps://www.lesnumeriques.com; hxxps://www.oui.sncf; hxxps://www.youtube.com
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-11-02]
OPR Extension: (Opera Wallet) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-11-02]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-09-04]
OPR Extension: (Installer des extensions Chrome) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2021-01-21]
OPR Extension: (Google Traduction) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2022-11-02]
OPR Extension: (Amazon Assistant pour Opera) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2022-03-22]
OPR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2022-11-02]
Brave:
=======
BRA Profile: C:\Users\theo-\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-10-14]
BRA Extension: (Safe Torrent Scanner) - C:\Users\theo-\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-08-03]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103264 2023-03-01] (Apple Inc. -> Apple Inc.)
S3 CloudBackupRestoreSvc; C:\WINDOWS\System32\CloudRestoreLauncher.dll [1261568 2023-10-12] (Microsoft Windows -> Microsoft Corporation)
S4 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [1641416 2019-05-07] (Dolby Laboratories, Inc. -> )
S4 FMAPOService; C:\WINDOWS\System32\FMService64.exe [360320 2019-09-05] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
S4 HiviewService; C:\Program Files\Huawei\Hiview\HiviewService.exe [5127064 2022-12-05] (Huawei Technologies Co., Ltd. -> Huawei Device Co., Ltd.)
S4 HMSCoreService; C:\Program Files\Huawei\HMS Core\HMSCoreService.exe [178760 2022-10-28] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-08-10] (HP Inc. -> HP Inc.)
S4 Huawei_OSDServer; C:\Windows\system32\RPC\OSD\osdservice.exe [217072 2019-08-16] (Huawei Technologies Co., Ltd. -> )
S4 HwPCCoreService; C:\Program Files\Huawei\BasicService\BasicService.exe [629640 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S4 LCD_Service; C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe [44424 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S4 MBAMainService; C:\Program Files\Huawei\PCManager\MateBookService.exe [589192 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\4.1.385\McCHSvc.exe [330208 2023-08-22] (McAfee, LLC -> McAfee, LLC)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [367616 2022-04-22] (Western Digital Technologies, Inc.) [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WUCSProxy; C:\Program Files\Huawei\wucs\WUCSProxyService.exe [7303752 2022-10-13] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
S2 ShieldVPNService; "C:\Program Files (x86)\ShieldVPN\shieldsvc.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66a9fa5d80327844\amdsafd.sys [113080 2022-06-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
S3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0396538.inf_amd64_5079b158caf50d08\B395672\amdkmdag.sys [106388096 2023-10-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [105168 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsb; C:\WINDOWS\System32\drivers\FocusriteUsb.sys [169680 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbAudio; C:\WINDOWS\System32\drivers\FocusriteUsbAudio.sys [106192 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\WINDOWS\System32\drivers\FocusriteUsbSwRoot.sys [111824 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 MpKslc43e2c91; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C8D37ED7-726A-47AE-B69D-FFCCF75590F1}\MpKslDrv.sys [263560 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [90704 2021-05-06] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\WINDOWS\System32\drivers\secnvmeF.sys [30512 2021-05-06] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 stdcfltn; C:\WINDOWS\System32\drivers\stdcfltn.sys [31504 2019-09-26] ("STMicroelectronics Srl" -> STMicroelectronics)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2018-08-29] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R1 UCPD; C:\WINDOWS\System32\drivers\UCPD.sys [29184 2023-09-15] (Microsoft Windows -> Microsoft Corporation)
R3 virtbus; C:\WINDOWS\System32\drivers\virtbus.sys [42968 2022-10-23] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-09] (Microsoft Windows -> Microsoft Corporation)
R2 WUCS; C:\WINDOWS\system32\drivers\WUCSDriver.sys [968640 2022-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-14 16:04 - 2023-11-14 16:04 - 000011182 _____ C:\Users\theo-\Downloads\note-dintention-Les-ateliers-2.pdf
2023-11-14 16:03 - 2023-11-14 16:03 - 000440884 _____ C:\Users\theo-\Downloads\2f0bc2b6-1f12-4eb6-a362-ecc47f9b5ec6.html
2023-11-14 14:31 - 2023-11-14 14:31 - 001039370 _____ C:\Users\theo-\Downloads\CP_LA TRAVERSE_ESACM-Fondation_Ricard.pdf
2023-11-13 16:17 - 2023-11-15 09:35 - 000003090 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2023-11-13 14:52 - 2023-11-13 14:52 - 000809482 _____ C:\WINDOWS\system32\perfh00C.dat
2023-11-13 14:52 - 2023-11-13 14:52 - 000156934 _____ C:\WINDOWS\system32\perfc00C.dat
2023-11-04 22:55 - 2023-11-15 09:35 - 000003082 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-11-02 19:50 - 2023-11-02 19:50 - 000000000 ____D C:\Users\theo-\AppData\Roaming\Celemony Software GmbH
2023-11-02 19:50 - 2023-11-02 19:50 - 000000000 ____D C:\ProgramData\Celemony Software GmbH
2023-10-30 16:31 - 2023-10-30 16:31 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\iZotope
2023-10-30 16:31 - 2023-10-30 16:31 - 000000000 ____D C:\Program Files\Celemony
2023-10-30 16:30 - 2023-10-30 16:30 - 000000000 ____D C:\Program Files\Common Files\Celemony
2023-10-30 16:29 - 2023-10-30 16:29 - 000000000 ____D C:\Program Files (x86)\iZotope
2023-10-26 08:53 - 2023-10-26 08:53 - 000000000 ____D C:\ProgramData\Focusrite
2023-10-23 13:30 - 2023-10-23 13:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite Drivers
2023-10-23 13:30 - 2023-10-23 13:30 - 000000000 ____D C:\Program Files\Focusrite
2023-10-23 13:30 - 2023-08-23 09:25 - 000169680 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsb.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000111824 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsbSwRoot.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000106192 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsbAudio.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000105168 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusritePCIeSwRoot.sys
2023-10-23 13:30 - 2023-08-23 09:01 - 000097880 _____ C:\WINDOWS\SysWOW64\FocusritePal32.dll
2023-10-23 13:30 - 2023-08-23 09:00 - 000109144 _____ C:\WINDOWS\system32\FocusritePal64.dll
2023-10-17 18:53 - 2023-10-17 18:53 - 000000000 ____D C:\Users\theo-\AppData\Local\ATI
2023-10-17 11:41 - 2023-10-17 11:41 - 000000000 ____D C:\Users\theo-\AppData\Roaming\FabFilter
2023-10-17 11:34 - 2023-10-17 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FabFilter
2023-10-17 11:33 - 2023-10-17 11:34 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\FabFilter
2023-10-16 11:03 - 2023-10-16 11:03 - 000000000 ____D C:\Users\theo-\AppData\Local\Backup
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-15 10:14 - 2023-10-14 10:36 - 000000000 ____D C:\FRST
2023-11-15 10:13 - 2020-01-08 15:02 - 000000000 ____D C:\ProgramData\Goodix
2023-11-15 10:03 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-11-15 09:41 - 2023-02-21 23:50 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{49C60F47-217F-48F4-AEFA-9D19425598C2}
2023-11-15 09:41 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-11-15 09:40 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-11-15 09:40 - 2020-01-08 15:50 - 000000000 ____D C:\Users\theo-\AppData\Local\Publishers
2023-11-15 09:39 - 2022-05-10 22:08 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-11-14 23:15 - 2020-04-28 18:41 - 000000000 ____D C:\Users\theo-\AppData\Roaming\vlc
2023-11-14 23:14 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-11-14 19:25 - 2020-06-07 20:21 - 000000000 ____D C:\Users\theo-\AppData\Roaming\dvdcss
2023-11-14 19:10 - 2023-02-21 23:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-11-14 14:39 - 2020-04-29 12:51 - 000000000 ____D C:\Users\theo-\AppData\Local\CrashDumps
2023-11-13 22:32 - 2023-02-22 10:30 - 000000000 ____D C:\Users\theo-\AppData\Local\D3DSCache
2023-11-13 21:45 - 2020-09-17 15:49 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\REAPER Media
2023-11-13 17:33 - 2022-10-22 10:20 - 000000000 ____D C:\Users\theo-\AppData\Roaming\iZotope
2023-11-13 14:54 - 2020-06-25 12:06 - 000000529 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2023-11-13 14:52 - 2023-02-21 23:49 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-13 14:52 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-11-12 22:32 - 2020-04-28 18:32 - 000000000 ____D C:\Users\theo-\AppData\Roaming\uTorrent
2023-11-12 13:08 - 2020-04-28 18:33 - 000000000 ____D C:\Users\theo-\AppData\Local\BitTorrentHelper
2023-11-12 12:54 - 2023-09-13 18:19 - 000263784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 002758248 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000210536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000190056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000095848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-11-12 12:54 - 2022-11-01 15:33 - 000075368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-11-11 19:02 - 2023-07-23 00:01 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-11-10 10:13 - 2023-02-21 23:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-10 10:13 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-11-10 10:13 - 2021-07-12 17:56 - 000012288 ___SH C:\DumpStack.log.tmp
2023-11-10 10:12 - 2023-10-12 09:41 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-11-10 10:11 - 2022-05-07 06:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-11-09 15:22 - 2023-02-21 23:42 - 000000000 ____D C:\Users\theo-
2023-11-09 10:39 - 2019-12-11 01:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-11-06 14:01 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-11-05 16:58 - 2020-01-08 15:47 - 000000000 ____D C:\Users\theo-\AppData\Local\Packages
2023-11-05 16:35 - 2020-10-02 15:53 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-02 19:50 - 2022-10-22 10:20 - 000000000 ____D C:\Users\theo-\AppData\Local\iZotope
2023-10-30 16:31 - 2022-10-22 09:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope
2023-10-30 16:29 - 2022-10-22 09:59 - 000000000 ____D C:\Program Files\Common Files\VST3
2023-10-30 16:22 - 2023-08-31 08:26 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\My Games
2023-10-30 16:08 - 2022-10-22 09:59 - 000000000 ___RD C:\Program Files\iZotope
2023-10-30 16:05 - 2022-10-22 09:59 - 000000000 ____D C:\Program Files\Steinberg
2023-10-27 08:56 - 2023-02-21 23:50 - 000003688 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-27 08:56 - 2023-02-21 23:50 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-10-26 11:47 - 2023-07-23 19:21 - 000000000 ____D C:\Program Files\REAPER (x64)
2023-10-26 08:29 - 2023-10-12 18:30 - 000000000 ____D C:\Users\theo-\AppData\Local\AMD_Common
2023-10-23 13:30 - 2020-04-29 15:24 - 000000000 ____D C:\ProgramData\Package Cache
2023-10-23 12:45 - 2020-01-08 15:47 - 000000000 ____D C:\Users\theo-\AppData\Local\AMD
2023-10-20 19:38 - 2023-10-12 17:19 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-10-20 19:38 - 2023-10-12 17:19 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-10-20 10:21 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-10-20 10:09 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
==================== Fichiers à la racine de certains dossiers ========
2020-05-13 10:13 - 2022-03-10 11:59 - 000000033 _____ () C:\Users\theo-\AppData\Roaming\AdobeWLCMCache.dat
2021-04-20 20:35 - 2021-04-20 20:35 - 000003584 _____ () C:\Users\theo-\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-10-05 15:46 - 2022-11-01 13:07 - 000000205 _____ () C:\Users\theo-\AppData\Local\oobelibMkey.log
2022-03-14 16:51 - 2022-03-14 16:51 - 000012336 _____ () C:\Users\theo-\AppData\Local\recently-used.xbel
2021-10-25 13:04 - 2021-10-25 13:04 - 000007602 _____ () C:\Users\theo-\AppData\Local\Resmon.ResmonCfg
2021-01-09 10:32 - 2021-01-09 10:33 - 000000000 _____ () C:\Users\theo-\AppData\Local\{B00886FE-F4BD-4259-9F3D-98CD21C83F58}
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par theo- (administrateur) sur LAPTOP-JS4V87MC (HUAWEI BOHK-WAX9X) (15-11-2023 10:13:55)
Exécuté depuis C:\Users\theo-\OneDrive\Bureau\FRST64.exe
Profils chargés: theo-
Plate-forme: Microsoft Windows 11 Famille Version 22H2 22621.2428 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) D:\AMD\CNext\CNext\RadeonSoftware.exe
(D:\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) D:\AMD\CNext\CNext\cncmd.exe
(DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atieclxx.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0355756.inf_amd64_5146fc3a012e7afa\B354291\atiesrxx.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2342.8.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files (x86)\McAfee Security Scan\4.1.385\McUpdaterModule.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.29700.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.2423_none_e946dbb842dfcc3f\TiWorker.exe
(SystemSettingsAdminFlows.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Dism\DismHost.exe
(Western Digital Technologies, Inc.) [Fichier non signé] C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_18c775e07a6aaafd\RtkAudUService64.exe [1257032 2021-04-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2253824 2022-04-22] (Western Digital Technologies, Inc.) [Fichier non signé]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [708840 2022-04-25] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [ut] => C:\Users\theo-\AppData\Roaming\uTorrent\uTorrent.exe [2257928 2023-11-08] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [MicrosoftEdgeAutoLaunch_3585A091B9C934786EF5DF22B480513A] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3894824 2023-11-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [Steam] => D:\steam\steam.exe [4377448 2023-10-31] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKU\S-1-5-21-821717747-1728088732-3174729382-1001\...\MountPoints2: {7c129fdd-b57f-11ea-9b77-a37db32989f7} - "F:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MX360 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAK.DLL [29696 2010-09-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP a211 Status Monitor: C:\WINDOWS\system32\hpinkstsa211LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3070 B611 series): C:\WINDOWS\system32\HPDiscoPMa211.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2023-10-12]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe (McAfee, LLC -> McAfee, LLC)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {BC0A6097-F752-4DF9-A567-0D788B2215D2} - \Microsoft\Windows\Bluetooth\UninstallDeviceTask -> Pas de fichier <==== ATTENTION
Task: {9EB381F7-724D-435C-9A10-EF0BB81126A8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {E76131B7-C11C-4B60-A261-7D09302A08BD} - System32\Tasks\AMDInstallLauncher => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {C11DD0EF-B85A-4985-8ED3-BF4AE508C5D2} - System32\Tasks\AMDLinkUpdate => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {385E3CF9-9391-487A-A281-C2ECD5AAD204} - System32\Tasks\AMDRyzenMasterSDKTask => D:\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {49FEB6E1-82F5-4623-9250-67436AEB3AFD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [617096 2022-02-25] (Apple Inc. -> Apple Inc.)
Task: {7F5C217E-773F-4D8B-8390-F9AB846BCB7E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Pas de fichier)
Task: {C9A88254-AEEC-4034-8931-C33E7DE72590} - System32\Tasks\CCleanerSkipUAC => "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) (Pas de fichier)
Task: {B91FF6F5-83AA-438F-8F04-4C260C71991A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\EXPLORER.EXE [5261576 2023-10-12] (Microsoft Windows -> Microsoft Corporation)
Task: {5B679B83-A143-41F1-B651-4F9151EB3E97} - System32\Tasks\McUpdaterModuleTask => C:\Program Files (x86)\McAfee Security Scan\4.1.385\McUpdaterModule.exe [2094368 2023-08-22] (McAfee, LLC -> McAfee, LLC)
Task: {83F8EA17-8073-4426-B13A-730DF989BBF3} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy RefresheIt9qX => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\2203.tmp\2204.tmp.ps1" <==== ATTENTION
Task: {5410C6AD-0EB1-4E91-84EF-8A578762B08E} - System32\Tasks\Microsoft\Windows\License Manager\TempSignedLicenseExchangeKbhYOwk => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\986C.tmp\986D.tmp.ps1" <==== ATTENTION
Task: {C3AC2219-CD76-42C3-9274-C1F973EC7CEF} - System32\Tasks\Microsoft\Windows\Maintenance\WinSAT4zzXx6 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\728.tmp\729.tmp.ps1" <==== ATTENTION
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {3C264CB4-5855-4A6A-8319-FA8965CAF0F3} - System32\Tasks\Microsoft\Windows\RestartManager\Gm3Ige => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\60D3.tmp\60D4.tmp.ps1" <==== ATTENTION
Task: {134CC06A-EFBD-40A9-9B62-2FF41883B85D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (Pas de fichier)
Task: {7C1DAA9A-3E57-42F8-84C4-86199A1943E1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {77880370-7C25-4E04-B1CA-927DCBD26818} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (Pas de fichier)
Task: {78B6F2BD-0B32-4D65-93CB-A031794EF830} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {C16DD160-7C19-4ED8-BA55-C9300FDD81A6} - System32\Tasks\Microsoft\Windows\WaaSMedic\DeferredWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {4F6CF0E2-B096-4F55-9E9B-0209A5E7D0C9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7F8A6A2-A6B1-479C-BDA7-DA57FD7CCE39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DE6720FA-2644-4D0A-8FCF-8033107207D8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FE80EEC5-CCA6-4218-A09D-DE80851409B9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8EFE3E3E-25DB-40C2-B195-D59792AB2BCD} - System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration LoaderGS7Qp6E => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [491520 2023-10-12] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\CA10.tmp\CA20.tmp.ps1" <==== ATTENTION
Task: {CBE9CF38-A07A-4EA1-AE94-860AAD55D1C6} - System32\Tasks\ModifyLinkUpdate => D:\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-09-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {48646DAC-B4D8-4BD6-A4E9-47CACFC55301} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-10-09] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {DDB969CB-6825-4B9A-9D98-686DD2C48B0F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-10-09] (Mozilla Corporation -> Mozilla Foundation)
Task: {D08B7B31-10C2-4C40-AE7B-BA47B0242A96} - System32\Tasks\Opera scheduled assistant Autoupdate 1667388390 => C:\Users\theo-\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\theo-\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {FAD6ED5F-C4B9-46B2-8207-F3E34B2CA922} - System32\Tasks\Opera scheduled Autoupdate 1667388388 => C:\Users\theo-\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {13E4E025-0360-42F5-87D5-2DDCEB4C1A14} - System32\Tasks\SecurityScannerScheduler => C:\Program Files (x86)\McAfee Security Scan\4.1.385\SSScheduler.exe [817352 2023-08-22] (McAfee, LLC -> McAfee, LLC)
Task: {145B4213-BD9D-4BB4-8655-CB4292F9B21E} - System32\Tasks\StartCN => D:\AMD\CNext\CNext\cncmd.exe [60344 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {AEC8C360-A58A-4C8C-B05A-AA24387D9550} - System32\Tasks\StartDVR => D:\AMD\CNext\CNext\RSServCmd.exe [324024 2023-08-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {C7FDE7AB-DAC6-45AE-BE78-F9C8CFA2258D} - System32\Tasks\Toolbox.exe_{38E406AF-D12B-4CE6-8DF1-D42C600F3D90} => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\Toolbox.exe [3985512 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{4f301fd8-e382-4983-9ea0-efaa5d14e4f7}: [DhcpNameServer] 40.40.1.12
Tcpip\..\Interfaces\{7a2f0a97-0fb4-45d0-8b73-5ee6784947b5}: [NameServer] 77.88.8.8,77.88.8.1
Tcpip\..\Interfaces\{7a2f0a97-0fb4-45d0-8b73-5ee6784947b5}: [DhcpNameServer] 192.168.43.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-13]
Edge Extension: (Google Docs hors connexion) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-03]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2023-11-13]
Edge Extension: (Edge relevant text changes) - C:\Users\theo-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]
FireFox:
========
FF DefaultProfile: 46awi8or.default
FF ProfilePath: C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\46awi8or.default [2023-10-24]
FF ProfilePath: C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\zlcjsx03.default-release [2023-11-15]
FF Notifications: Mozilla\Firefox\Profiles\zlcjsx03.default-release -> hxxps://mon-guide-pc.com; hxxps://www.instagram.com; hxxps://floridaman.com; hxxps://www.salaire-brut-en-net.fr; hxxps://cuisine-addict.com; hxxps://www.e-snes.org; hxxps://www.opensubtitles.org; hxxps://www.ldlc.com
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Roaming\Mozilla\Firefox\Profiles\zlcjsx03.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-22]
FF Plugin: @java.com/DTPlugin,version=11.333.2 -> C:\Program Files\Java\jre1.8.0_333\bin\dtplugin\npDeployJava1.dll [2022-06-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.333.2 -> C:\Program Files\Java\jre1.8.0_333\bin\plugin2\npjp2.dll [2022-06-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.14 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> D:\vlc\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-10-09] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default [2023-10-14]
CHR Extension: (Torrent Scanner) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2023-06-04]
CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2020-05-01]
CHR Extension: (HP SimplePass) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\fidikogfgleiaefnjbmnjaplmgknppkg [2020-05-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-04]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-06-04]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\theo-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-04]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
Opera:
=======
OPR Profile: C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable [2023-10-14]
OPR Notifications: Opera Stable -> hxxps://download-alert.com; hxxps://fr.aliexpress.com; hxxps://mail.yandex.ru; hxxps://ourhotstories.com; hxxps://tinder.com; hxxps://totalcoolblog.com; hxxps://twitter.com; hxxps://www.capital.fr; hxxps://www.facebook.com; hxxps://www.instagram.com; hxxps://www.lesnumeriques.com; hxxps://www.oui.sncf; hxxps://www.youtube.com
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-11-02]
OPR Extension: (Opera Wallet) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-11-02]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-09-04]
OPR Extension: (Installer des extensions Chrome) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2021-01-21]
OPR Extension: (Google Traduction) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2022-11-02]
OPR Extension: (Amazon Assistant pour Opera) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2022-03-22]
OPR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\theo-\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2022-11-02]
Brave:
=======
BRA Profile: C:\Users\theo-\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-10-14]
BRA Extension: (Safe Torrent Scanner) - C:\Users\theo-\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-08-03]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103264 2023-03-01] (Apple Inc. -> Apple Inc.)
S3 CloudBackupRestoreSvc; C:\WINDOWS\System32\CloudRestoreLauncher.dll [1261568 2023-10-12] (Microsoft Windows -> Microsoft Corporation)
S4 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [1641416 2019-05-07] (Dolby Laboratories, Inc. -> )
S4 FMAPOService; C:\WINDOWS\System32\FMService64.exe [360320 2019-09-05] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
S4 HiviewService; C:\Program Files\Huawei\Hiview\HiviewService.exe [5127064 2022-12-05] (Huawei Technologies Co., Ltd. -> Huawei Device Co., Ltd.)
S4 HMSCoreService; C:\Program Files\Huawei\HMS Core\HMSCoreService.exe [178760 2022-10-28] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-08-10] (HP Inc. -> HP Inc.)
S4 Huawei_OSDServer; C:\Windows\system32\RPC\OSD\osdservice.exe [217072 2019-08-16] (Huawei Technologies Co., Ltd. -> )
S4 HwPCCoreService; C:\Program Files\Huawei\BasicService\BasicService.exe [629640 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S4 LCD_Service; C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe [44424 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S4 MBAMainService; C:\Program Files\Huawei\PCManager\MateBookService.exe [589192 2022-10-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\4.1.385\McCHSvc.exe [330208 2023-08-22] (McAfee, LLC -> McAfee, LLC)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [367616 2022-04-22] (Western Digital Technologies, Inc.) [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WUCSProxy; C:\Program Files\Huawei\wucs\WUCSProxyService.exe [7303752 2022-10-13] (Huawei Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.)
S2 ShieldVPNService; "C:\Program Files (x86)\ShieldVPN\shieldsvc.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66a9fa5d80327844\amdsafd.sys [113080 2022-06-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
S3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0396538.inf_amd64_5079b158caf50d08\B395672\amdkmdag.sys [106388096 2023-10-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [105168 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsb; C:\WINDOWS\System32\drivers\FocusriteUsb.sys [169680 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbAudio; C:\WINDOWS\System32\drivers\FocusriteUsbAudio.sys [106192 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\WINDOWS\System32\drivers\FocusriteUsbSwRoot.sys [111824 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 MpKslc43e2c91; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C8D37ED7-726A-47AE-B69D-FFCCF75590F1}\MpKslDrv.sys [263560 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [90704 2021-05-06] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\WINDOWS\System32\drivers\secnvmeF.sys [30512 2021-05-06] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 stdcfltn; C:\WINDOWS\System32\drivers\stdcfltn.sys [31504 2019-09-26] ("STMicroelectronics Srl" -> STMicroelectronics)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2018-08-29] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R1 UCPD; C:\WINDOWS\System32\drivers\UCPD.sys [29184 2023-09-15] (Microsoft Windows -> Microsoft Corporation)
R3 virtbus; C:\WINDOWS\System32\drivers\virtbus.sys [42968 2022-10-23] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-09] (Microsoft Windows -> Microsoft Corporation)
R2 WUCS; C:\WINDOWS\system32\drivers\WUCSDriver.sys [968640 2022-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-14 16:04 - 2023-11-14 16:04 - 000011182 _____ C:\Users\theo-\Downloads\note-dintention-Les-ateliers-2.pdf
2023-11-14 16:03 - 2023-11-14 16:03 - 000440884 _____ C:\Users\theo-\Downloads\2f0bc2b6-1f12-4eb6-a362-ecc47f9b5ec6.html
2023-11-14 14:31 - 2023-11-14 14:31 - 001039370 _____ C:\Users\theo-\Downloads\CP_LA TRAVERSE_ESACM-Fondation_Ricard.pdf
2023-11-13 16:17 - 2023-11-15 09:35 - 000003090 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2023-11-13 14:52 - 2023-11-13 14:52 - 000809482 _____ C:\WINDOWS\system32\perfh00C.dat
2023-11-13 14:52 - 2023-11-13 14:52 - 000156934 _____ C:\WINDOWS\system32\perfc00C.dat
2023-11-04 22:55 - 2023-11-15 09:35 - 000003082 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-11-02 19:50 - 2023-11-02 19:50 - 000000000 ____D C:\Users\theo-\AppData\Roaming\Celemony Software GmbH
2023-11-02 19:50 - 2023-11-02 19:50 - 000000000 ____D C:\ProgramData\Celemony Software GmbH
2023-10-30 16:31 - 2023-10-30 16:31 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\iZotope
2023-10-30 16:31 - 2023-10-30 16:31 - 000000000 ____D C:\Program Files\Celemony
2023-10-30 16:30 - 2023-10-30 16:30 - 000000000 ____D C:\Program Files\Common Files\Celemony
2023-10-30 16:29 - 2023-10-30 16:29 - 000000000 ____D C:\Program Files (x86)\iZotope
2023-10-26 08:53 - 2023-10-26 08:53 - 000000000 ____D C:\ProgramData\Focusrite
2023-10-23 13:30 - 2023-10-23 13:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite Drivers
2023-10-23 13:30 - 2023-10-23 13:30 - 000000000 ____D C:\Program Files\Focusrite
2023-10-23 13:30 - 2023-08-23 09:25 - 000169680 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsb.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000111824 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsbSwRoot.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000106192 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusriteUsbAudio.sys
2023-10-23 13:30 - 2023-08-23 09:25 - 000105168 _____ (Focusrite Audio Engineering Ltd.) C:\WINDOWS\system32\Drivers\FocusritePCIeSwRoot.sys
2023-10-23 13:30 - 2023-08-23 09:01 - 000097880 _____ C:\WINDOWS\SysWOW64\FocusritePal32.dll
2023-10-23 13:30 - 2023-08-23 09:00 - 000109144 _____ C:\WINDOWS\system32\FocusritePal64.dll
2023-10-17 18:53 - 2023-10-17 18:53 - 000000000 ____D C:\Users\theo-\AppData\Local\ATI
2023-10-17 11:41 - 2023-10-17 11:41 - 000000000 ____D C:\Users\theo-\AppData\Roaming\FabFilter
2023-10-17 11:34 - 2023-10-17 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FabFilter
2023-10-17 11:33 - 2023-10-17 11:34 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\FabFilter
2023-10-16 11:03 - 2023-10-16 11:03 - 000000000 ____D C:\Users\theo-\AppData\Local\Backup
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-11-15 10:14 - 2023-10-14 10:36 - 000000000 ____D C:\FRST
2023-11-15 10:13 - 2020-01-08 15:02 - 000000000 ____D C:\ProgramData\Goodix
2023-11-15 10:03 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-11-15 09:41 - 2023-02-21 23:50 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{49C60F47-217F-48F4-AEFA-9D19425598C2}
2023-11-15 09:41 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-11-15 09:40 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-11-15 09:40 - 2020-01-08 15:50 - 000000000 ____D C:\Users\theo-\AppData\Local\Publishers
2023-11-15 09:39 - 2022-05-10 22:08 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-11-14 23:15 - 2020-04-28 18:41 - 000000000 ____D C:\Users\theo-\AppData\Roaming\vlc
2023-11-14 23:14 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-11-14 19:25 - 2020-06-07 20:21 - 000000000 ____D C:\Users\theo-\AppData\Roaming\dvdcss
2023-11-14 19:10 - 2023-02-21 23:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-11-14 14:39 - 2020-04-29 12:51 - 000000000 ____D C:\Users\theo-\AppData\Local\CrashDumps
2023-11-13 22:32 - 2023-02-22 10:30 - 000000000 ____D C:\Users\theo-\AppData\Local\D3DSCache
2023-11-13 21:45 - 2020-09-17 15:49 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\REAPER Media
2023-11-13 17:33 - 2022-10-22 10:20 - 000000000 ____D C:\Users\theo-\AppData\Roaming\iZotope
2023-11-13 14:54 - 2020-06-25 12:06 - 000000529 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2023-11-13 14:52 - 2023-02-21 23:49 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-13 14:52 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-11-12 22:32 - 2020-04-28 18:32 - 000000000 ____D C:\Users\theo-\AppData\Roaming\uTorrent
2023-11-12 13:08 - 2020-04-28 18:33 - 000000000 ____D C:\Users\theo-\AppData\Local\BitTorrentHelper
2023-11-12 12:54 - 2023-09-13 18:19 - 000263784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 002758248 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000210536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000190056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-11-12 12:54 - 2022-11-01 15:33 - 000095848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-11-12 12:54 - 2022-11-01 15:33 - 000075368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-11-11 19:02 - 2023-07-23 00:01 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-11-10 10:13 - 2023-02-21 23:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-10 10:13 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-11-10 10:13 - 2021-07-12 17:56 - 000012288 ___SH C:\DumpStack.log.tmp
2023-11-10 10:12 - 2023-10-12 09:41 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-11-10 10:11 - 2022-05-07 06:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-11-09 15:22 - 2023-02-21 23:42 - 000000000 ____D C:\Users\theo-
2023-11-09 10:39 - 2019-12-11 01:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-11-06 14:01 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-11-05 16:58 - 2020-01-08 15:47 - 000000000 ____D C:\Users\theo-\AppData\Local\Packages
2023-11-05 16:35 - 2020-10-02 15:53 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-02 19:50 - 2022-10-22 10:20 - 000000000 ____D C:\Users\theo-\AppData\Local\iZotope
2023-10-30 16:31 - 2022-10-22 09:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope
2023-10-30 16:29 - 2022-10-22 09:59 - 000000000 ____D C:\Program Files\Common Files\VST3
2023-10-30 16:22 - 2023-08-31 08:26 - 000000000 ____D C:\Users\theo-\OneDrive\Documents\My Games
2023-10-30 16:08 - 2022-10-22 09:59 - 000000000 ___RD C:\Program Files\iZotope
2023-10-30 16:05 - 2022-10-22 09:59 - 000000000 ____D C:\Program Files\Steinberg
2023-10-27 08:56 - 2023-02-21 23:50 - 000003688 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-27 08:56 - 2023-02-21 23:50 - 000003564 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-10-26 11:47 - 2023-07-23 19:21 - 000000000 ____D C:\Program Files\REAPER (x64)
2023-10-26 08:29 - 2023-10-12 18:30 - 000000000 ____D C:\Users\theo-\AppData\Local\AMD_Common
2023-10-23 13:30 - 2020-04-29 15:24 - 000000000 ____D C:\ProgramData\Package Cache
2023-10-23 12:45 - 2020-01-08 15:47 - 000000000 ____D C:\Users\theo-\AppData\Local\AMD
2023-10-20 19:38 - 2023-10-12 17:19 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-10-20 19:38 - 2023-10-12 17:19 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-10-20 10:21 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-10-20 10:09 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
==================== Fichiers à la racine de certains dossiers ========
2020-05-13 10:13 - 2022-03-10 11:59 - 000000033 _____ () C:\Users\theo-\AppData\Roaming\AdobeWLCMCache.dat
2021-04-20 20:35 - 2021-04-20 20:35 - 000003584 _____ () C:\Users\theo-\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-10-05 15:46 - 2022-11-01 13:07 - 000000205 _____ () C:\Users\theo-\AppData\Local\oobelibMkey.log
2022-03-14 16:51 - 2022-03-14 16:51 - 000012336 _____ () C:\Users\theo-\AppData\Local\recently-used.xbel
2021-10-25 13:04 - 2021-10-25 13:04 - 000007602 _____ () C:\Users\theo-\AppData\Local\Resmon.ResmonCfg
2021-01-09 10:32 - 2021-01-09 10:33 - 000000000 _____ () C:\Users\theo-\AppData\Local\{B00886FE-F4BD-4259-9F3D-98CD21C83F58}
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================