Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2024 01
Exécuté par ISMAIL (administrateur) sur DESKTOP-1IFJ95J (ASUSTeK COMPUTER INC. X555LAB) (31-01-2024 12:47:01)
Exécuté depuis C:\Users\ISMAIL\Desktop\FRST64.exe
Profils chargés: ISMAIL
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3930 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Users\ISMAIL\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Temp\vscode-stable-user-x64\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.exe
(C:\Users\ISMAIL\AppData\Local\Temp\vscode-stable-user-x64\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Temp\is-2FEOG.tmp\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.tmp
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Programs\Microsoft VS Code\Code.exe <9>
(Intel Corporation -> ) C:\Windows\System32\igfxTray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <17>
(services.exe ->) (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGiftBoxDesktop.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files (x86)\Kamo\KamoSvc.exe
(services.exe ->) (Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\Realtek Bluetooth Filter ONLY\BTDevMgr.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\ASUSWSLoader.exe [63272 2015-05-31] (ASUS Cloud Corporation -> )
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 8\Dashboard.exe [1388240 2023-07-11] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [MicrosoftEdgeAutoLaunch_82A4185109A82837D6DE62E44803080D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788224 2024-01-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Windows\System32\osk.exe [674304 2023-11-17] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\120.0.6099.225\Installer\chrmstp.exe [2024-01-19] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-11-30]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {D745472C-20FD-4C25-B32A-26D1A71B635D} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {C231986D-68F5-4008-9642-C72A069942E7} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18400 2017-04-11] (ASUSTeK Computer Inc. -> AsusTek)
Task: {44CF5F12-FF40-4CDD-A3C9-A7F93CC052AD} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [55296 2015-08-25] (ASUS) [Fichier non signé]
Task: {E7ACA1C4-A82A-4882-B8AC-AABDF769B043} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19782224 2015-05-25] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {2B87FDF9-B9DF-4CD4-9DF1-50FBE78A69CE} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1618080 2015-05-14] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé]
Task: {ABA9A59C-CB30-4C93-BF57-67E3B07E61FF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {57645A36-47BC-4A30-8C72-A35619882643} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A0CC040B-3FC0-4445-9AAB-F1B118552F66} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1398680 2023-11-17] (Avast Software s.r.o. -> AVAST Software)
Task: {62028A33-44A5-4712-BEC6-97424BA36447} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4845464 2023-11-17] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (l'élément de données a 80 caractères en plus).
Task: {B8467C34-BC53-4162-B546-AC3ADB36FDB7} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-11-06] (Avast Software s.r.o. -> Avast Software)
Task: {2BD657FA-536D-4E4B-A8F8-3F127B566DA3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {DDBEE58C-A13B-46E6-86EA-B12CEB39B95C} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "ed2735fa-82e3-45e3-a767-1e105e9ef35f" --version "6.19.10858" --silent
Task: {8E15CA9A-DDC7-4444-8A1B-6705FB8F9741} - System32\Tasks\CCleanerSkipUAC - ISMAIL => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {0F71139B-44DA-4814-95B3-36544058B19C} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [505200 2015-05-29] (Dropbox, Inc -> )
Task: {7450EB99-F258-463E-807A-9309F5B29BD3} - System32\Tasks\G2MUpdateTask-S-1-5-21-3469735148-2751303216-132763565-1001 => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupdate.exe [33456 2022-05-01] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {FD0D21EC-DABD-45C1-BFBE-78C7E222D9B4} - System32\Tasks\G2MUploadTask-S-1-5-21-3469735148-2751303216-132763565-1001 => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupload.exe [33456 2022-05-01] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {AECD302F-F969-4C4D-8769-755E970FD321} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-12] (Google Inc -> Google Inc.)
Task: {369438CC-FEEC-4178-9B34-321B49D1BBF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-12] (Google Inc -> Google Inc.)
Task: {FA7E0239-5314-4CAD-805E-FCEA53838E50} - System32\Tasks\Kamo\KamoStart => C:\Program Files (x86)\Kamo\Kamo.exe [911776 2023-10-03] (PIRIFORM SOFTWARE LIMITED -> Piriform)
Task: {5253D4BF-3A11-4E70-AA54-14CF88889AF4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {854B1509-D2F5-4FDC-BAAA-84443C19FD83} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {5181767A-3D7F-4010-B188-F22BEB74430B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECD3DD68-29DE-4549-BE7D-4660967D6852} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C2DD248-4264-4E53-A8C0-AC23905CBE1E} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [170048 2024-01-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {C5C59F54-16FB-4C6E-9726-DF54E178A006} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [555616 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {59F9391E-5F6C-4B21-9DCE-48A14EF8E67B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F3EA2136-2FF1-440A-87FD-6E1A3E5BBF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4532893C-B9E3-4B79-A373-68C069E950B7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9596A258-0AAD-4272-88B4-08A371F7A0F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {904A729E-3893-480F-AE37-3EA710D0257A} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [674720 2024-01-20] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {749EC01F-A953-437B-9BAF-130B0CB3BFCD} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {F193118B-019B-4FC6-A38E-CF6CC7984351} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-07-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {27551875-A84B-42FF-A257-8282C43405D4} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16165632 2015-07-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {47B485D9-1AC5-4DE9-BEE0-A56921B2021A} - System32\Tasks\WpsNotifyTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe [461160 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {21A26B44-5DA0-4825-BB30-36134F06CA2A} - System32\Tasks\WpsNotifyTask_ISMAIL => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe [461160 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {16C0F2CB-05FF-42DC-B079-DCDC8E771142} - System32\Tasks\WpsUpdateTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe [427880 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {47F4B8C0-F71B-4E7F-B155-546E6EA65929} - System32\Tasks\WpsUpdateTask_ISMAIL => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe [427880 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3469735148-2751303216-132763565-1001.job => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3469735148-2751303216-132763565-1001.job => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupload.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_ISMAIL.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_ISMAIL.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{47922c0e-d206-473b-95ed-e759795f9597}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}\6427565626F687D2537333642483: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{8cc93be4-8fb0-46d6-b9d5-ecc0f5d4e92c}: [DhcpNameServer] 192.168.42.129
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-31]
Edge Extension: (Google Docs hors connexion) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-18]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-01-27]
Edge Extension: (Edge relevant text changes) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 2hgqb39f.default-1654602866718
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\6cyo7l1i.default-release-1 [2024-01-29]
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\jklviwsd.default-release [2024-01-29]
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718 [2024-01-31]
FF Extension: (uBlock Origin) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\uBlock0@raymondhill.net.xpi [2024-01-10]
FF Extension: (Spacial Blue) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{23a33630-c7f2-4383-a584-798397f8ea8c}.xpi [2022-06-07]
FF Extension: (Union Pacific) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{79d2a527-d4b5-4d7d-b74f-25d42c443d66}.xpi [2022-06-07]
FF Extension: (Galaxy Blue) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{a722dad2-f2cc-4485-9e1d-e5213db643a5}.xpi [2022-06-07]
FF Extension: (Video DownloadHelper) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-01-10]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2024-01-30]
FF Extension: (Pacific Ocean - Kaikoura) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d4475e05-2c14-478d-aef3-5981fb0f7cbe}.xpi [2022-06-07]
FF Extension: (Pacific Ocean Paradise) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d6cae59d-0218-4a22-b293-c2b80afda89b}.xpi [2022-06-07]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] (WildTangent Inc -> )
Chrome:
=======
CHR Profile: C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default [2024-01-30]
CHR Extension: (Lighthouse) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blipmdconlkpinefehnmjammfjpmpbjk [2024-01-30]
CHR Extension: (Sad Panda) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\bohapeiooecafommnlaiccilacgmkaoc [2018-05-14]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-01-30]
CHR Extension: (uBlock Origin) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-01-30]
CHR Extension: (Google Docs hors connexion) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-30]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-01-30]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-05-05]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Brave:
=======
BRA Profile: C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-01-10]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2019-04-22]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2019-04-22]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2019-04-22]
BRA Extension: (PDF Viewer) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\oemmndcbldboiebfnladdacbdfmadadm [2019-04-22]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2019-04-22]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe [71168 2015-05-31] (ASUS Cloud Corporation) [Fichier non signé]
R2 ASUSGiftBoxDekstop; C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe [315704 2015-07-20] (ASUSTeK Computer Inc. -> ASUS)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth Filter ONLY\BTDevMgr.exe [121560 2015-07-20] (Realtek Semiconductor Corp -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1082784 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13777080 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
S2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [69840 2023-07-11] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent Inc -> WildTangent)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 KamoSvc; C:\Program Files (x86)\Kamo\KamoSvc.exe [6709664 2023-10-03] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe [133480 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-30] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe [1418736 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14715824 2022-11-15] (ADLICE -> )
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [11227032 2023-11-17] (Avast Software s.r.o. -> AVAST Software)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [101872 2017-04-11] (ASUSTeK Computer Inc. -> ASUS Corporation)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [76568 2023-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [284672 2021-04-16] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-05-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [114104 2023-10-03] (Piriform Software Ltd -> Windows (R) Win 7 DDK provider)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-11-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-11-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-11-30] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-31 12:47 - 2024-01-31 12:50 - 000032300 _____ C:\Users\ISMAIL\Desktop\FRST.txt
2024-01-31 12:45 - 2024-01-31 12:49 - 000000000 ____D C:\FRST
2024-01-31 12:43 - 2024-01-31 12:43 - 002389504 _____ (Farbar) C:\Users\ISMAIL\Desktop\FRST64.exe
2024-01-31 12:27 - 2024-01-31 12:27 - 000000000 ____D C:\Users\ISMAIL\Downloads\alnos3dLG
2024-01-31 11:52 - 2024-01-31 11:52 - 391186163 _____ C:\Users\ISMAIL\Downloads\HOLOBURG.mp4
2024-01-29 15:24 - 2024-01-29 15:24 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2024-01-28 15:46 - 2024-01-28 15:46 - 001348875 _____ C:\Users\ISMAIL\Downloads\Les Marocains du Monde les plus influents.pdf
2024-01-27 16:21 - 2024-01-27 16:21 - 000105569 _____ C:\Users\ISMAIL\Downloads\ReponseB3_27-01-2024.pdf
2024-01-25 15:02 - 2023-05-18 00:09 - 202585673 _____ C:\Users\ISMAIL\Downloads\ShotaxSilvervaleCommission.mp4
2024-01-25 14:17 - 2024-01-25 14:18 - 015728863 _____ C:\Users\ISMAIL\Downloads\futanami-x-monoko_480p.mp4
2024-01-22 13:24 - 2024-01-22 13:32 - 071430812 _____ C:\Users\ISMAIL\Downloads\Rena Shota Deji-kemo Ojisanto H Gattai.mp4
2024-01-20 23:47 - 2024-01-30 21:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-01-20 14:57 - 2024-01-20 15:01 - 026034772 _____ C:\Users\ISMAIL\Downloads\A Valkyrie's Affair [AlenAbyss][.mp4
2024-01-20 14:55 - 2024-01-20 14:56 - 006733200 _____ C:\Users\ISMAIL\Downloads\For Sale [NYL].mp4
2024-01-15 10:54 - 2024-01-15 10:55 - 000000000 ____D C:\Program Files\DownloadHelper CoApp
2024-01-15 10:50 - 2024-01-15 10:50 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-01-12 14:57 - 2024-01-12 15:14 - 086183572 _____ C:\Users\ISMAIL\Downloads\[Futa-Loli] Silver Wolf X Kafka.mp4
2024-01-12 12:22 - 2024-01-12 12:27 - 073302934 _____ C:\Users\ISMAIL\Downloads\Hanya x Huohuo (Lluanhyperzero).mp4
2024-01-12 12:04 - 2024-01-12 12:07 - 051923106 _____ C:\Users\ISMAIL\Downloads\peh-koi.fb7156174.mp4
2024-01-12 11:34 - 2024-01-12 12:01 - 315486131 _____ C:\Users\ISMAIL\Downloads\Tottemo Ecchi na Okaa-san ni Natte Ageru - Boku to Tomodachi no Okaa-san no Futari dake no Himitsu no Jikan - Part 1.mp4
2024-01-12 11:11 - 2024-01-12 11:30 - 315160064 _____ C:\Users\ISMAIL\Downloads\Tottemo Ecchi na Okaa-san ni Natte Ageru - Boku to Tomodachi no Okaa-san no Futari dake no Himitsu no Jikan - Part 2.mp4
2024-01-11 13:40 - 2024-01-11 13:40 - 038707080 _____ (ACLAP) C:\Users\ISMAIL\Downloads\vdhcoapp-2.0.10-windows-x86_64-installer.exe
2024-01-11 12:33 - 2024-01-11 12:33 - 017980509 _____ C:\Users\ISMAIL\Downloads\Sakura x Tsunade [Hforgods].mp4
2024-01-10 14:33 - 2024-01-10 14:54 - 000000000 ___HD C:\$WinREAgent
2024-01-10 14:25 - 2024-01-10 14:25 - 029960798 _____ C:\Users\ISMAIL\Downloads\After School Bullying [Futa x Female].mp4
2024-01-10 14:23 - 2024-01-10 14:24 - 042360407 _____ C:\Users\ISMAIL\Downloads\More Bullying - After School.mp4
2024-01-10 14:21 - 2024-01-10 14:22 - 030958985 _____ C:\Users\ISMAIL\Downloads\[Koi_S3] Gura x Amelia.mp4
2024-01-10 14:17 - 2024-01-10 14:17 - 051177249 _____ C:\Users\ISMAIL\Downloads\Gura x Marine Collab.mp4
2024-01-10 11:47 - 2024-01-10 11:53 - 000000000 ____D C:\Users\ISMAIL\AppData\LocalLow\IGDump
2024-01-06 13:59 - 2024-01-06 13:59 - 000065070 _____ C:\Users\ISMAIL\Downloads\SKM_C28720042315310.pdf
2024-01-06 13:57 - 2024-01-06 13:57 - 000013955 _____ C:\Users\ISMAIL\Downloads\AttestationHebergement.pdf
2024-01-06 11:55 - 2024-01-06 11:55 - 022007810 _____ C:\Users\ISMAIL\Downloads\A quiet day with Haydee.mp4
2024-01-06 11:49 - 2024-01-06 12:03 - 415281007 _____ C:\Users\ISMAIL\Downloads\The Private Gym - Futanarian Shower [LuckyLynx].mp4
2024-01-05 11:10 - 2020-04-14 08:38 - 000047778 _____ C:\Users\ISMAIL\Documents\3D hentai video and game free download links collection.html
2024-01-04 12:02 - 2024-01-04 12:03 - 022077032 _____ C:\Users\ISMAIL\Downloads\Brigitte getting her present [The Fastest GMan].mp4
2024-01-02 11:29 - 2024-01-02 11:30 - 032843295 _____ C:\Users\ISMAIL\Downloads\Mona Gym Sex.mp4
2024-01-02 11:27 - 2024-01-02 11:27 - 024023336 _____ C:\Users\ISMAIL\Downloads\Nightfall Divination.mp4
2024-01-02 11:24 - 2024-01-02 11:25 - 112079576 _____ C:\Users\ISMAIL\Downloads\Christmas Taker 2023 POV Futa on Female.mp4
2024-01-02 11:21 - 2024-01-02 11:22 - 046733009 _____ C:\Users\ISMAIL\Downloads\Nina and Nae 1 (Female) Standing [Mardonn].mp4
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-31 12:44 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-31 12:39 - 2016-03-01 14:13 - 000000000 ____D C:\Users\ISMAIL\dwhelper
2024-01-31 12:31 - 2016-03-05 17:35 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\vlc
2024-01-31 12:16 - 2021-12-16 03:25 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-31 12:16 - 2016-08-12 11:18 - 000000000 ____D C:\Program Files (x86)\Google
2024-01-31 11:49 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-31 11:45 - 2020-11-03 23:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-30 20:55 - 2023-05-12 11:27 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Malwarebytes
2024-01-30 20:54 - 2022-12-11 02:45 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-30 12:37 - 2022-02-10 21:30 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-29 17:52 - 2021-07-20 06:23 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2024-01-29 17:51 - 2019-03-13 16:49 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Code
2024-01-29 15:39 - 2017-06-14 10:29 - 000001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-01-29 15:39 - 2017-06-14 10:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-01-29 15:34 - 2016-02-19 10:24 - 000000000 ____D C:\Program Files\CCleaner
2024-01-29 15:33 - 2020-11-04 00:19 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2024-01-29 15:32 - 2017-07-21 07:32 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2024-01-29 15:32 - 2017-06-27 04:03 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\CrashDumps
2024-01-29 15:31 - 2020-11-04 00:07 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-01-29 15:31 - 2019-12-07 15:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2024-01-29 15:31 - 2019-12-07 15:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2024-01-29 15:31 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-01-29 15:27 - 2017-08-10 10:28 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2024-01-29 15:27 - 2016-02-19 09:15 - 000000000 __SHD C:\Users\ISMAIL\IntelGraphicsProfiles
2024-01-29 15:25 - 2022-12-27 18:49 - 000004028 _____ C:\WINDOWS\system32\Tasks\Avast SecureLine VPN Update
2024-01-29 15:24 - 2020-11-04 00:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-29 15:24 - 2020-11-03 23:46 - 000008192 ___SH C:\DumpStack.log.tmp
2024-01-29 15:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-01-27 13:28 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-27 12:41 - 2020-06-15 00:11 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-01-27 12:41 - 2020-06-15 00:11 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-01-19 10:58 - 2016-08-12 11:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-01-19 10:58 - 2016-08-12 11:19 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-01-15 10:48 - 2019-12-24 19:54 - 000000000 ____D C:\Program Files\Microsoft Office
2024-01-14 13:08 - 2023-10-17 11:47 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Kamo
2024-01-14 13:08 - 2023-10-03 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\Kamo
2024-01-14 12:54 - 2020-11-03 23:46 - 000459416 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-01-14 12:51 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-01-13 17:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-01-12 11:12 - 2020-01-28 15:01 - 000918944 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2024-01-10 16:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-01-10 13:34 - 2021-04-08 16:52 - 000000000 ____D C:\Users\ISMAIL\Documents\CV
2024-01-10 13:34 - 2019-12-25 01:13 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Word
2024-01-10 13:34 - 2019-12-25 01:13 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Office
2024-01-10 13:21 - 2021-03-30 13:24 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Excel
2024-01-10 13:16 - 2017-12-01 15:09 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Packages
2024-01-10 13:00 - 2016-02-19 10:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-01-10 12:55 - 2016-02-19 10:47 - 189718008 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-01-10 12:00 - 2020-11-03 23:55 - 000000000 ____D C:\Users\ISMAIL
2024-01-10 11:37 - 2016-01-28 09:51 - 000000000 ____D C:\ProgramData\AVAST Software
2024-01-10 11:36 - 2022-10-13 02:48 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2024-01-10 11:36 - 2017-08-10 10:27 - 000000000 ____D C:\ProgramData\Realtek
==================== Fichiers à la racine de certains dossiers ========
2016-02-19 09:15 - 2016-02-22 20:25 - 000000166 _____ () C:\Users\ISMAIL\AppData\Roaming\sp_data.sys
2016-03-30 15:59 - 2020-08-10 00:42 - 000007598 _____ () C:\Users\ISMAIL\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par ISMAIL (administrateur) sur DESKTOP-1IFJ95J (ASUSTeK COMPUTER INC. X555LAB) (31-01-2024 12:47:01)
Exécuté depuis C:\Users\ISMAIL\Desktop\FRST64.exe
Profils chargés: ISMAIL
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3930 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Users\ISMAIL\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Temp\vscode-stable-user-x64\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.exe
(C:\Users\ISMAIL\AppData\Local\Temp\vscode-stable-user-x64\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Temp\is-2FEOG.tmp\CodeSetup-stable-8b3775030ed1a69b13e4f4c628c612102e30a681.tmp
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\ISMAIL\AppData\Local\Programs\Microsoft VS Code\Code.exe <9>
(Intel Corporation -> ) C:\Windows\System32\igfxTray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <17>
(services.exe ->) (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGiftBoxDesktop.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files (x86)\Kamo\KamoSvc.exe
(services.exe ->) (Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\Realtek Bluetooth Filter ONLY\BTDevMgr.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\ASUSWSLoader.exe [63272 2015-05-31] (ASUS Cloud Corporation -> )
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 8\Dashboard.exe [1388240 2023-07-11] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
HKU\S-1-5-21-3469735148-2751303216-132763565-1001\...\Run: [MicrosoftEdgeAutoLaunch_82A4185109A82837D6DE62E44803080D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788224 2024-01-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Windows\System32\osk.exe [674304 2023-11-17] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\120.0.6099.225\Installer\chrmstp.exe [2024-01-19] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-11-30]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {D745472C-20FD-4C25-B32A-26D1A71B635D} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {C231986D-68F5-4008-9642-C72A069942E7} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18400 2017-04-11] (ASUSTeK Computer Inc. -> AsusTek)
Task: {44CF5F12-FF40-4CDD-A3C9-A7F93CC052AD} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [55296 2015-08-25] (ASUS) [Fichier non signé]
Task: {E7ACA1C4-A82A-4882-B8AC-AABDF769B043} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19782224 2015-05-25] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {2B87FDF9-B9DF-4CD4-9DF1-50FBE78A69CE} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1618080 2015-05-14] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé]
Task: {ABA9A59C-CB30-4C93-BF57-67E3B07E61FF} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {57645A36-47BC-4A30-8C72-A35619882643} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A0CC040B-3FC0-4445-9AAB-F1B118552F66} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1398680 2023-11-17] (Avast Software s.r.o. -> AVAST Software)
Task: {62028A33-44A5-4712-BEC6-97424BA36447} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4845464 2023-11-17] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (l'élément de données a 80 caractères en plus).
Task: {B8467C34-BC53-4162-B546-AC3ADB36FDB7} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-11-06] (Avast Software s.r.o. -> Avast Software)
Task: {2BD657FA-536D-4E4B-A8F8-3F127B566DA3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {DDBEE58C-A13B-46E6-86EA-B12CEB39B95C} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "ed2735fa-82e3-45e3-a767-1e105e9ef35f" --version "6.19.10858" --silent
Task: {8E15CA9A-DDC7-4444-8A1B-6705FB8F9741} - System32\Tasks\CCleanerSkipUAC - ISMAIL => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {0F71139B-44DA-4814-95B3-36544058B19C} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [505200 2015-05-29] (Dropbox, Inc -> )
Task: {7450EB99-F258-463E-807A-9309F5B29BD3} - System32\Tasks\G2MUpdateTask-S-1-5-21-3469735148-2751303216-132763565-1001 => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupdate.exe [33456 2022-05-01] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {FD0D21EC-DABD-45C1-BFBE-78C7E222D9B4} - System32\Tasks\G2MUploadTask-S-1-5-21-3469735148-2751303216-132763565-1001 => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupload.exe [33456 2022-05-01] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {AECD302F-F969-4C4D-8769-755E970FD321} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-12] (Google Inc -> Google Inc.)
Task: {369438CC-FEEC-4178-9B34-321B49D1BBF5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-08-12] (Google Inc -> Google Inc.)
Task: {FA7E0239-5314-4CAD-805E-FCEA53838E50} - System32\Tasks\Kamo\KamoStart => C:\Program Files (x86)\Kamo\Kamo.exe [911776 2023-10-03] (PIRIFORM SOFTWARE LIMITED -> Piriform)
Task: {5253D4BF-3A11-4E70-AA54-14CF88889AF4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {854B1509-D2F5-4FDC-BAAA-84443C19FD83} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {5181767A-3D7F-4010-B188-F22BEB74430B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECD3DD68-29DE-4549-BE7D-4660967D6852} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C2DD248-4264-4E53-A8C0-AC23905CBE1E} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [170048 2024-01-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {C5C59F54-16FB-4C6E-9726-DF54E178A006} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [555616 2024-01-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {59F9391E-5F6C-4B21-9DCE-48A14EF8E67B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F3EA2136-2FF1-440A-87FD-6E1A3E5BBF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4532893C-B9E3-4B79-A373-68C069E950B7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9596A258-0AAD-4272-88B4-08A371F7A0F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {904A729E-3893-480F-AE37-3EA710D0257A} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [674720 2024-01-20] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {749EC01F-A953-437B-9BAF-130B0CB3BFCD} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {F193118B-019B-4FC6-A38E-CF6CC7984351} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-07-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {27551875-A84B-42FF-A257-8282C43405D4} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16165632 2015-07-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {47B485D9-1AC5-4DE9-BEE0-A56921B2021A} - System32\Tasks\WpsNotifyTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe [461160 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {21A26B44-5DA0-4825-BB30-36134F06CA2A} - System32\Tasks\WpsNotifyTask_ISMAIL => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe [461160 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {16C0F2CB-05FF-42DC-B079-DCDC8E771142} - System32\Tasks\WpsUpdateTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe [427880 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {47F4B8C0-F71B-4E7F-B155-546E6EA65929} - System32\Tasks\WpsUpdateTask_ISMAIL => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe [427880 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3469735148-2751303216-132763565-1001.job => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3469735148-2751303216-132763565-1001.job => C:\Users\ISMAIL\AppData\Local\GoToMeeting\19950\g2mupload.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_ISMAIL.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_ISMAIL.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{47922c0e-d206-473b-95ed-e759795f9597}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{83cdcf4d-aa7a-4b0e-8075-6deb5292c3b1}\6427565626F687D2537333642483: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{8cc93be4-8fb0-46d6-b9d5-ecc0f5d4e92c}: [DhcpNameServer] 192.168.42.129
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-31]
Edge Extension: (Google Docs hors connexion) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-18]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-01-27]
Edge Extension: (Edge relevant text changes) - C:\Users\ISMAIL\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 2hgqb39f.default-1654602866718
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\6cyo7l1i.default-release-1 [2024-01-29]
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\jklviwsd.default-release [2024-01-29]
FF ProfilePath: C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718 [2024-01-31]
FF Extension: (uBlock Origin) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\uBlock0@raymondhill.net.xpi [2024-01-10]
FF Extension: (Spacial Blue) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{23a33630-c7f2-4383-a584-798397f8ea8c}.xpi [2022-06-07]
FF Extension: (Union Pacific) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{79d2a527-d4b5-4d7d-b74f-25d42c443d66}.xpi [2022-06-07]
FF Extension: (Galaxy Blue) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{a722dad2-f2cc-4485-9e1d-e5213db643a5}.xpi [2022-06-07]
FF Extension: (Video DownloadHelper) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-01-10]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2024-01-30]
FF Extension: (Pacific Ocean - Kaikoura) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d4475e05-2c14-478d-aef3-5981fb0f7cbe}.xpi [2022-06-07]
FF Extension: (Pacific Ocean Paradise) - C:\Users\ISMAIL\AppData\Roaming\Mozilla\Firefox\Profiles\2hgqb39f.default-1654602866718\Extensions\{d6cae59d-0218-4a22-b293-c2b80afda89b}.xpi [2022-06-07]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] (WildTangent Inc -> )
Chrome:
=======
CHR Profile: C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default [2024-01-30]
CHR Extension: (Lighthouse) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blipmdconlkpinefehnmjammfjpmpbjk [2024-01-30]
CHR Extension: (Sad Panda) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\bohapeiooecafommnlaiccilacgmkaoc [2018-05-14]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-01-30]
CHR Extension: (uBlock Origin) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-01-30]
CHR Extension: (Google Docs hors connexion) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-30]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-01-30]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ISMAIL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-05-05]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Brave:
=======
BRA Profile: C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-01-10]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2019-04-22]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2019-04-22]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2019-04-22]
BRA Extension: (PDF Viewer) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\oemmndcbldboiebfnladdacbdfmadadm [2019-04-22]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\ISMAIL\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2019-04-22]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.2.524\AsusWSWinService.exe [71168 2015-05-31] (ASUS Cloud Corporation) [Fichier non signé]
R2 ASUSGiftBoxDekstop; C:\Program Files (x86)\ASUS\ASUS GIFTBOX Desktop\ASUSGIFTBOXDesktop.exe [315704 2015-07-20] (ASUSTeK Computer Inc. -> ASUS)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth Filter ONLY\BTDevMgr.exe [121560 2015-07-20] (Realtek Semiconductor Corp -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1082784 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13777080 2024-01-05] (Microsoft Corporation -> Microsoft Corporation)
S2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [69840 2023-07-11] (CyberGhost S.R.L. -> CyberGhost S.R.L.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent Inc -> WildTangent)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 KamoSvc; C:\Program Files (x86)\Kamo\KamoSvc.exe [6709664 2023-10-03] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.4947\wtoolex\wpsupdatesvr.exe [133480 2015-08-18] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-30] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe [1418736 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14715824 2022-11-15] (ADLICE -> )
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [11227032 2023-11-17] (Avast Software s.r.o. -> AVAST Software)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-11-30] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [101872 2017-04-11] (ASUSTeK Computer Inc. -> ASUS Corporation)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [76568 2023-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [284672 2021-04-16] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-05-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [114104 2023-10-03] (Piriform Software Ltd -> Windows (R) Win 7 DDK provider)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-11-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-11-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-11-30] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-31 12:47 - 2024-01-31 12:50 - 000032300 _____ C:\Users\ISMAIL\Desktop\FRST.txt
2024-01-31 12:45 - 2024-01-31 12:49 - 000000000 ____D C:\FRST
2024-01-31 12:43 - 2024-01-31 12:43 - 002389504 _____ (Farbar) C:\Users\ISMAIL\Desktop\FRST64.exe
2024-01-31 12:27 - 2024-01-31 12:27 - 000000000 ____D C:\Users\ISMAIL\Downloads\alnos3dLG
2024-01-31 11:52 - 2024-01-31 11:52 - 391186163 _____ C:\Users\ISMAIL\Downloads\HOLOBURG.mp4
2024-01-29 15:24 - 2024-01-29 15:24 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2024-01-28 15:46 - 2024-01-28 15:46 - 001348875 _____ C:\Users\ISMAIL\Downloads\Les Marocains du Monde les plus influents.pdf
2024-01-27 16:21 - 2024-01-27 16:21 - 000105569 _____ C:\Users\ISMAIL\Downloads\ReponseB3_27-01-2024.pdf
2024-01-25 15:02 - 2023-05-18 00:09 - 202585673 _____ C:\Users\ISMAIL\Downloads\ShotaxSilvervaleCommission.mp4
2024-01-25 14:17 - 2024-01-25 14:18 - 015728863 _____ C:\Users\ISMAIL\Downloads\futanami-x-monoko_480p.mp4
2024-01-22 13:24 - 2024-01-22 13:32 - 071430812 _____ C:\Users\ISMAIL\Downloads\Rena Shota Deji-kemo Ojisanto H Gattai.mp4
2024-01-20 23:47 - 2024-01-30 21:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-01-20 14:57 - 2024-01-20 15:01 - 026034772 _____ C:\Users\ISMAIL\Downloads\A Valkyrie's Affair [AlenAbyss][.mp4
2024-01-20 14:55 - 2024-01-20 14:56 - 006733200 _____ C:\Users\ISMAIL\Downloads\For Sale [NYL].mp4
2024-01-15 10:54 - 2024-01-15 10:55 - 000000000 ____D C:\Program Files\DownloadHelper CoApp
2024-01-15 10:50 - 2024-01-15 10:50 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-01-12 14:57 - 2024-01-12 15:14 - 086183572 _____ C:\Users\ISMAIL\Downloads\[Futa-Loli] Silver Wolf X Kafka.mp4
2024-01-12 12:22 - 2024-01-12 12:27 - 073302934 _____ C:\Users\ISMAIL\Downloads\Hanya x Huohuo (Lluanhyperzero).mp4
2024-01-12 12:04 - 2024-01-12 12:07 - 051923106 _____ C:\Users\ISMAIL\Downloads\peh-koi.fb7156174.mp4
2024-01-12 11:34 - 2024-01-12 12:01 - 315486131 _____ C:\Users\ISMAIL\Downloads\Tottemo Ecchi na Okaa-san ni Natte Ageru - Boku to Tomodachi no Okaa-san no Futari dake no Himitsu no Jikan - Part 1.mp4
2024-01-12 11:11 - 2024-01-12 11:30 - 315160064 _____ C:\Users\ISMAIL\Downloads\Tottemo Ecchi na Okaa-san ni Natte Ageru - Boku to Tomodachi no Okaa-san no Futari dake no Himitsu no Jikan - Part 2.mp4
2024-01-11 13:40 - 2024-01-11 13:40 - 038707080 _____ (ACLAP) C:\Users\ISMAIL\Downloads\vdhcoapp-2.0.10-windows-x86_64-installer.exe
2024-01-11 12:33 - 2024-01-11 12:33 - 017980509 _____ C:\Users\ISMAIL\Downloads\Sakura x Tsunade [Hforgods].mp4
2024-01-10 14:33 - 2024-01-10 14:54 - 000000000 ___HD C:\$WinREAgent
2024-01-10 14:25 - 2024-01-10 14:25 - 029960798 _____ C:\Users\ISMAIL\Downloads\After School Bullying [Futa x Female].mp4
2024-01-10 14:23 - 2024-01-10 14:24 - 042360407 _____ C:\Users\ISMAIL\Downloads\More Bullying - After School.mp4
2024-01-10 14:21 - 2024-01-10 14:22 - 030958985 _____ C:\Users\ISMAIL\Downloads\[Koi_S3] Gura x Amelia.mp4
2024-01-10 14:17 - 2024-01-10 14:17 - 051177249 _____ C:\Users\ISMAIL\Downloads\Gura x Marine Collab.mp4
2024-01-10 11:47 - 2024-01-10 11:53 - 000000000 ____D C:\Users\ISMAIL\AppData\LocalLow\IGDump
2024-01-06 13:59 - 2024-01-06 13:59 - 000065070 _____ C:\Users\ISMAIL\Downloads\SKM_C28720042315310.pdf
2024-01-06 13:57 - 2024-01-06 13:57 - 000013955 _____ C:\Users\ISMAIL\Downloads\AttestationHebergement.pdf
2024-01-06 11:55 - 2024-01-06 11:55 - 022007810 _____ C:\Users\ISMAIL\Downloads\A quiet day with Haydee.mp4
2024-01-06 11:49 - 2024-01-06 12:03 - 415281007 _____ C:\Users\ISMAIL\Downloads\The Private Gym - Futanarian Shower [LuckyLynx].mp4
2024-01-05 11:10 - 2020-04-14 08:38 - 000047778 _____ C:\Users\ISMAIL\Documents\3D hentai video and game free download links collection.html
2024-01-04 12:02 - 2024-01-04 12:03 - 022077032 _____ C:\Users\ISMAIL\Downloads\Brigitte getting her present [The Fastest GMan].mp4
2024-01-02 11:29 - 2024-01-02 11:30 - 032843295 _____ C:\Users\ISMAIL\Downloads\Mona Gym Sex.mp4
2024-01-02 11:27 - 2024-01-02 11:27 - 024023336 _____ C:\Users\ISMAIL\Downloads\Nightfall Divination.mp4
2024-01-02 11:24 - 2024-01-02 11:25 - 112079576 _____ C:\Users\ISMAIL\Downloads\Christmas Taker 2023 POV Futa on Female.mp4
2024-01-02 11:21 - 2024-01-02 11:22 - 046733009 _____ C:\Users\ISMAIL\Downloads\Nina and Nae 1 (Female) Standing [Mardonn].mp4
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-31 12:44 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-31 12:39 - 2016-03-01 14:13 - 000000000 ____D C:\Users\ISMAIL\dwhelper
2024-01-31 12:31 - 2016-03-05 17:35 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\vlc
2024-01-31 12:16 - 2021-12-16 03:25 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-31 12:16 - 2016-08-12 11:18 - 000000000 ____D C:\Program Files (x86)\Google
2024-01-31 11:49 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-31 11:45 - 2020-11-03 23:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-30 20:55 - 2023-05-12 11:27 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Malwarebytes
2024-01-30 20:54 - 2022-12-11 02:45 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-30 12:37 - 2022-02-10 21:30 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-29 17:52 - 2021-07-20 06:23 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2024-01-29 17:51 - 2019-03-13 16:49 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Code
2024-01-29 15:39 - 2017-06-14 10:29 - 000001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-01-29 15:39 - 2017-06-14 10:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-01-29 15:34 - 2016-02-19 10:24 - 000000000 ____D C:\Program Files\CCleaner
2024-01-29 15:33 - 2020-11-04 00:19 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2024-01-29 15:32 - 2017-07-21 07:32 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2024-01-29 15:32 - 2017-06-27 04:03 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\CrashDumps
2024-01-29 15:31 - 2020-11-04 00:07 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-01-29 15:31 - 2019-12-07 15:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2024-01-29 15:31 - 2019-12-07 15:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2024-01-29 15:31 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-01-29 15:27 - 2017-08-10 10:28 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2024-01-29 15:27 - 2016-02-19 09:15 - 000000000 __SHD C:\Users\ISMAIL\IntelGraphicsProfiles
2024-01-29 15:25 - 2022-12-27 18:49 - 000004028 _____ C:\WINDOWS\system32\Tasks\Avast SecureLine VPN Update
2024-01-29 15:24 - 2020-11-04 00:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-29 15:24 - 2020-11-03 23:46 - 000008192 ___SH C:\DumpStack.log.tmp
2024-01-29 15:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-01-27 13:28 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-27 12:41 - 2020-06-15 00:11 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-01-27 12:41 - 2020-06-15 00:11 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-01-19 10:58 - 2016-08-12 11:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-01-19 10:58 - 2016-08-12 11:19 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-01-15 10:48 - 2019-12-24 19:54 - 000000000 ____D C:\Program Files\Microsoft Office
2024-01-14 13:08 - 2023-10-17 11:47 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Kamo
2024-01-14 13:08 - 2023-10-03 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\Kamo
2024-01-14 12:54 - 2020-11-03 23:46 - 000459416 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-01-14 12:51 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-01-14 12:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-01-13 17:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-01-12 11:12 - 2020-01-28 15:01 - 000918944 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2024-01-10 16:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-01-10 13:34 - 2021-04-08 16:52 - 000000000 ____D C:\Users\ISMAIL\Documents\CV
2024-01-10 13:34 - 2019-12-25 01:13 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Word
2024-01-10 13:34 - 2019-12-25 01:13 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Office
2024-01-10 13:21 - 2021-03-30 13:24 - 000000000 ____D C:\Users\ISMAIL\AppData\Roaming\Microsoft\Excel
2024-01-10 13:16 - 2017-12-01 15:09 - 000000000 ____D C:\Users\ISMAIL\AppData\Local\Packages
2024-01-10 13:00 - 2016-02-19 10:47 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-01-10 12:55 - 2016-02-19 10:47 - 189718008 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-01-10 12:00 - 2020-11-03 23:55 - 000000000 ____D C:\Users\ISMAIL
2024-01-10 11:37 - 2016-01-28 09:51 - 000000000 ____D C:\ProgramData\AVAST Software
2024-01-10 11:36 - 2022-10-13 02:48 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2024-01-10 11:36 - 2017-08-10 10:27 - 000000000 ____D C:\ProgramData\Realtek
==================== Fichiers à la racine de certains dossiers ========
2016-02-19 09:15 - 2016-02-22 20:25 - 000000166 _____ () C:\Users\ISMAIL\AppData\Roaming\sp_data.sys
2016-03-30 15:59 - 2020-08-10 00:42 - 000007598 _____ () C:\Users\ISMAIL\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================