Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05.01.2024 01
Exécuté par Bernard (administrateur) sur BERNARD-PC (ASUS All Series) (06-01-2024 20:03:32)
Exécuté depuis C:\Users\Bernard\Desktop\FRST64.exe
Profils chargés: Bernard
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3803 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe
(C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\85.0.34.0\crashpad_handler.exe
(C:\Users\Bernard\Desktop\FRST64.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(C:\Windows\SysWOW64\brsvc01a.exe ->) (Brother Industries, ltd. -> brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(CMedia) [Fichier non signé] C:\Program Files\ASUS Xonar DGX Audio\Customapp\AsusAudioCenter.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) () [Fichier non signé] C:\Windows\System\HsMgr64.exe
(explorer.exe ->) () [Fichier non signé] C:\Windows\SysWOW64\HsMgr.exe
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [Fichier non signé] C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Brother Industries, ltd. -> brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21768.0_x64__8wekyb3d8bbwe\HxCalendarAppImm.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21768.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2310.8.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd [8769536 2011-05-12] (C-Media Corporation) [Fichier non signé]
HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] () [Fichier non signé]
HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] () [Fichier non signé]
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322120 2017-04-19] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11561184 2024-01-04] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595872 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe (Pas de fichier)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [AdBlock VPN] => C:\Program Files (x86)\AdBlock\AdBlock VPN\AdBlock VPN.exe (Pas de fichier)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [MicrosoftEdgeAutoLaunch_F75EA4E96ED4F3651C3E582630628EDB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\MountPoints2: {57319979-fd59-11ea-8b94-40167ea90e3d} - "G:\startme.exe"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKLM\...\Windows x64\Print Processors\BRMFC PRINT: C:\Windows\System32\spool\prtprocs\x64\brmfpp4.dll [41984 2009-05-18] (Brother Industries, ltd. -> Brother Industries ,Ltd)
HKLM\...\Windows x64\Print Processors\TeamViewer_PrintProcessor: C:\Windows\System32\spool\prtprocs\x64\TeamViewer_PrintProcessor.dll [20208 2017-04-25] (TeamViewer GmbH -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\120.0.6099.200\Installer\chrmstp.exe [2024-01-03] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {610495E1-0ACA-4D6D-BED0-7A3DDA0681CA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {33E6CC72-293D-46F1-AC07-D5E15A600F0D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {A91BD5F1-1F75-4FB3-8D72-CED291D06DF2} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C23EF4C9-6EA5-42EB-8602-C7A5C98CCE92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-16] (Google Inc -> Google Inc.)
Task: {ABD99197-C817-4626-9F47-037D87EF1675} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-16] (Google Inc -> Google Inc.)
Task: {EECCCA33-D4B3-43A4-ACA5-4EAB4340E068} - System32\Tasks\HPCustParticipation HP ENVY 5000 series => C:\Program Files\HP\HP ENVY 5000 series\Bin\HPCustPartic.exe [6660744 2018-04-19] (Hewlett Packard -> HP Inc.)
Task: {191D58B6-8516-4566-83AE-5D3E0CFB6FF0} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [817472 2017-11-08] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {F296E29F-C52A-442D-8E4A-B97301F2EA9E} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {AFF9DDEE-CC3B-4D86-8DA9-A964BA966091} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F871827F-E4E6-4927-BC0D-E5ECC4EA47A6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {746D0C1E-F00B-44E0-8249-AB30D3115CC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D3A75BAD-D67F-457B-AA96-D493F46542DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CBC7D763-60D3-4EE2-AA36-251E3A1B3CE9} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2024-01-03] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {1BE0F221-E89D-4EE2-9BFD-E31367033DC1} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-03] (Mozilla Corporation -> Mozilla Foundation)
Task: {6F8FD7FA-A518-4154-8523-6BE39C4229D5} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130208 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {430050D1-6140-4E26-9043-91151C3DFC0A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1917571891-3703816493-1998226089-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130208 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{c8669a2c-3acc-436e-8114-856769b15788}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-06]
Edge HomePage: Default -> hxxps://www.google.com/
Edge StartupUrls: Default -> "hxxps://www.google.com/"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2024-01-03]
Edge Extension: (Google Docs hors connexion) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2023-11-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-13]
Edge Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-12-13]
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2022-10-14]
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5 [2024-01-06]
Edge HomePage: Profile 5 -> edge://newtab/
Edge StartupUrls: Profile 5 -> "hxxps://www.google.fr/"
Edge Extension: (Google Docs hors connexion) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-14]
Edge Extension: (Edge relevant text changes) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM\...\Edge\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
FireFox:
========
FF DefaultProfile: yxmigljg.default-1688563719553
FF ProfilePath: C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ur1vbjhg.default-release [2022-11-14]
FF Extension: (Français Language Pack) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ur1vbjhg.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2022-10-15]
FF ProfilePath: C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 [2024-01-06]
FF Homepage: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> hxxps://www.google.com/
FF Session Restore: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> hxxps://www.geo.fr; hxxps://malakoff.plan-interactif.com
FF Extension: (To Google Translate) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2023-07-05]
FF Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2023-07-05]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-07-05]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.381.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.381.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-01-02] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default [2024-01-06]
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.fr/"
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2023-11-29]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-12-13]
CHR Extension: (EquusAfricanusAsinus) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\knfjjmhhgdednjdnajgikmppfcbghoph [2023-09-10] [UpdateUrl:hxxps://crxupdate.com/crx/updates.php] <==== ATTENTION
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-03-29]
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\System Profile [2024-01-05]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM\...\Chrome\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
CHR HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936456 2015-05-13] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 Brother XP spl Service; C:\WINDOWS\SysWOW64\brsvc01a.exe [57344 2004-06-13] (Brother Industries, ltd. -> brother Industries Ltd)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-01-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.250.1203.0001\FileSyncHelper.exe [3514784 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230360 2023-11-13] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-05] (Malwarebytes Inc. -> Malwarebytes)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.250.1203.0001\OneDriveUpdaterService.exe [3852192 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2018-05-16] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 adblockvpntap; C:\WINDOWS\System32\DriverStore\FileRepository\adblockvpntap.inf_amd64_cccfab86ec82ba84\adblockvpntap.sys [49392 2022-12-15] (Betafish Incorporated -> The OpenVPN Project)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-11-20] (ASUSTeK Computer Inc. -> )
S3 asmthub3; C:\WINDOWS\System32\drivers\asmthub3.sys [140032 2013-08-16] (MCCI Corporation -> ASMedia Technology Inc)
S3 asmtxhci; C:\WINDOWS\System32\drivers\asmtxhci.sys [424192 2013-08-16] (MCCI Corporation -> ASMedia Technology Inc)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 cmudaxp; C:\WINDOWS\system32\drivers\cmudaxp.sys [2735616 2015-10-16] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-06-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-02-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MpKsl3e385fce; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [211208 2023-03-30] (Microsoft Windows -> Microsoft Corporation)
S3 Ser2pl; C:\WINDOWS\System32\drivers\ser2pl64.sys [97280 2010-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Prolific Technology Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2020-09-10] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-10] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-06 20:03 - 2024-01-06 20:04 - 000027543 _____ C:\Users\Bernard\Desktop\FRST.txt
2024-01-06 20:02 - 2024-01-06 20:03 - 000000000 ____D C:\FRST
2024-01-06 19:55 - 2024-01-06 19:55 - 002388992 _____ (Farbar) C:\Users\Bernard\Desktop\FRST64.exe
2024-01-06 18:45 - 2024-01-06 18:45 - 000019926 _____ C:\Users\Bernard\Downloads\identifiants.csv
2024-01-06 18:31 - 2024-01-06 18:31 - 000000188 _____ C:\Users\Bernard\Documents\Mots de passe Chrome.csv
2024-01-06 18:26 - 2024-01-06 18:26 - 000001957 _____ C:\Users\Bernard\Downloads\Capture d’écran dans cette liste extension EquuiAfricacanus SUPPRIMER 2024-01-05 191046.jpg - Raccourci.lnk
2024-01-06 08:38 - 2024-01-06 08:38 - 000001649 _____ C:\Users\Bernard\Downloads\SUPPRIMER UNE EXTENSION Methode .image.txt
2024-01-05 05:53 - 2024-01-05 05:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-01-04 02:33 - 2024-01-04 02:33 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-01-03 10:33 - 2024-01-03 17:28 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-12-13 11:51 - 2023-12-13 11:51 - 000000000 ___HD C:\$WinREAgent
2023-12-10 19:50 - 2023-12-10 19:50 - 000000000 ____D C:\WINDOWS\InboxApps
2023-12-10 19:45 - 2023-12-10 19:45 - 000016707 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-06 20:03 - 2022-02-15 11:55 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-06 20:01 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-06 20:01 - 2015-07-28 14:29 - 000000000 ___SD C:\Users\Bernard\AppData\Roaming\Microsoft\Credentials
2024-01-06 19:54 - 2020-06-12 17:13 - 000004172 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{FC649805-BB17-41A6-9143-2E48431170CA}
2024-01-06 19:11 - 2021-12-16 03:13 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-06 19:11 - 2018-05-16 19:03 - 000000000 ____D C:\Program Files (x86)\Google
2024-01-06 18:25 - 2015-07-29 12:32 - 000000000 ___RD C:\Users\Bernard\Dropbox
2024-01-06 17:00 - 2018-05-16 17:35 - 000000000 ____D C:\Users\Bernard\AppData\Roaming\Dropbox
2024-01-06 17:00 - 2018-05-16 17:33 - 000000000 ____D C:\Users\Bernard\AppData\Local\Dropbox
2024-01-06 16:59 - 2018-05-16 13:15 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2024-01-06 16:59 - 2015-07-28 19:46 - 000000000 __SHD C:\Users\Bernard\IntelGraphicsProfiles
2024-01-06 14:42 - 2020-06-12 17:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-06 13:38 - 2023-05-14 11:18 - 000000000 ____D C:\Users\Bernard\AppData\Local\Malwarebytes
2024-01-06 11:36 - 2022-10-12 13:03 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2024-01-05 18:57 - 2023-02-12 21:56 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-05 15:50 - 2018-11-16 09:48 - 000000000 ____D C:\Users\Bernard\AppData\Roaming\Microsoft\Skype for Desktop
2024-01-05 15:44 - 2020-06-12 17:11 - 001772726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-01-05 15:44 - 2019-12-07 15:49 - 000791762 _____ C:\WINDOWS\system32\perfh00C.dat
2024-01-05 15:44 - 2019-12-07 15:49 - 000149928 _____ C:\WINDOWS\system32\perfc00C.dat
2024-01-05 15:44 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-01-05 15:39 - 2020-06-12 17:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-05 15:39 - 2020-06-12 17:08 - 000008192 ___SH C:\DumpStack.log.tmp
2024-01-05 05:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-05 05:54 - 2018-05-16 17:33 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-01-05 05:51 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-04 22:37 - 2021-09-11 09:18 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000002008 _____ C:\Users\Default\Desktop\Google Slides.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000002008 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000001996 _____ C:\Users\Default\Desktop\Google Docs.lnk
2024-01-03 21:51 - 2022-03-21 17:38 - 000000236 _____ C:\Users\Bernard\Documents\mot de passe et lien depuis FIREFOX via Google chrome...txt
2024-01-03 21:18 - 2019-10-11 20:56 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-01-03 17:28 - 2019-10-09 03:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-01-03 16:09 - 2023-07-03 07:03 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-01-03 10:36 - 2020-06-20 07:39 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-16 14:45 - 2021-04-26 00:24 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-12-15 19:17 - 2021-12-12 11:12 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1917571891-3703816493-1998226089-1000
2023-12-15 19:17 - 2020-06-23 10:18 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-12-15 19:17 - 2020-06-23 10:18 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-12-15 16:28 - 2020-06-12 16:50 - 000000000 ____D C:\Users\Bernard
2023-12-14 16:18 - 2023-08-03 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2023-12-14 10:37 - 2020-06-12 17:08 - 000319480 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-12-14 10:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-12-14 10:37 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-14 10:22 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-12-14 10:20 - 2020-06-12 17:10 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-12-11 20:38 - 2023-07-19 04:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2023-12-11 20:38 - 2023-07-19 04:18 - 000000000 ____D C:\Program Files (x86)\Java
2023-12-10 19:51 - 2018-05-16 13:19 - 000000000 ____D C:\Users\Bernard\AppData\Local\Packages
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-12-10 19:50 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2023-12-10 19:48 - 2019-12-07 15:53 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-12-10 19:48 - 2019-12-07 15:53 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2023-12-10 18:10 - 2018-05-16 15:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-12-10 18:06 - 2020-06-12 17:13 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-12-10 18:06 - 2020-06-12 17:13 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2023-07-05 11:20 - 2023-07-05 11:20 - 000012173 _____ () C:\Users\Bernard\AppData\Local\apps.crx
2019-01-17 19:06 - 2019-11-26 03:54 - 000009216 _____ () C:\Users\Bernard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Bernard (administrateur) sur BERNARD-PC (ASUS All Series) (06-01-2024 20:03:32)
Exécuté depuis C:\Users\Bernard\Desktop\FRST64.exe
Profils chargés: Bernard
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3803 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe
(C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\85.0.34.0\crashpad_handler.exe
(C:\Users\Bernard\Desktop\FRST64.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(C:\Windows\SysWOW64\brsvc01a.exe ->) (Brother Industries, ltd. -> brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(CMedia) [Fichier non signé] C:\Program Files\ASUS Xonar DGX Audio\Customapp\AsusAudioCenter.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) () [Fichier non signé] C:\Windows\System\HsMgr64.exe
(explorer.exe ->) () [Fichier non signé] C:\Windows\SysWOW64\HsMgr.exe
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [Fichier non signé] C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Brother Industries, ltd. -> brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21768.0_x64__8wekyb3d8bbwe\HxCalendarAppImm.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21768.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2310.8.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd [8769536 2011-05-12] (C-Media Corporation) [Fichier non signé]
HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] () [Fichier non signé]
HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] () [Fichier non signé]
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322120 2017-04-19] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11561184 2024-01-04] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595872 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe (Pas de fichier)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [AdBlock VPN] => C:\Program Files (x86)\AdBlock\AdBlock VPN\AdBlock VPN.exe (Pas de fichier)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\Run: [MicrosoftEdgeAutoLaunch_F75EA4E96ED4F3651C3E582630628EDB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\...\MountPoints2: {57319979-fd59-11ea-8b94-40167ea90e3d} - "G:\startme.exe"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\85.0.34.0\GoogleDriveFS.exe [58843424 2024-01-04] (Google LLC -> Google, Inc.)
HKLM\...\Windows x64\Print Processors\BRMFC PRINT: C:\Windows\System32\spool\prtprocs\x64\brmfpp4.dll [41984 2009-05-18] (Brother Industries, ltd. -> Brother Industries ,Ltd)
HKLM\...\Windows x64\Print Processors\TeamViewer_PrintProcessor: C:\Windows\System32\spool\prtprocs\x64\TeamViewer_PrintProcessor.dll [20208 2017-04-25] (TeamViewer GmbH -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\120.0.6099.200\Installer\chrmstp.exe [2024-01-03] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {610495E1-0ACA-4D6D-BED0-7A3DDA0681CA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {33E6CC72-293D-46F1-AC07-D5E15A600F0D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {A91BD5F1-1F75-4FB3-8D72-CED291D06DF2} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C23EF4C9-6EA5-42EB-8602-C7A5C98CCE92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-16] (Google Inc -> Google Inc.)
Task: {ABD99197-C817-4626-9F47-037D87EF1675} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-16] (Google Inc -> Google Inc.)
Task: {EECCCA33-D4B3-43A4-ACA5-4EAB4340E068} - System32\Tasks\HPCustParticipation HP ENVY 5000 series => C:\Program Files\HP\HP ENVY 5000 series\Bin\HPCustPartic.exe [6660744 2018-04-19] (Hewlett Packard -> HP Inc.)
Task: {191D58B6-8516-4566-83AE-5D3E0CFB6FF0} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [817472 2017-11-08] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {F296E29F-C52A-442D-8E4A-B97301F2EA9E} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {AFF9DDEE-CC3B-4D86-8DA9-A964BA966091} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F871827F-E4E6-4927-BC0D-E5ECC4EA47A6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {746D0C1E-F00B-44E0-8249-AB30D3115CC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D3A75BAD-D67F-457B-AA96-D493F46542DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CBC7D763-60D3-4EE2-AA36-251E3A1B3CE9} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2024-01-03] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {1BE0F221-E89D-4EE2-9BFD-E31367033DC1} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-03] (Mozilla Corporation -> Mozilla Foundation)
Task: {6F8FD7FA-A518-4154-8523-6BE39C4229D5} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130208 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {430050D1-6140-4E26-9043-91151C3DFC0A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1917571891-3703816493-1998226089-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130208 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{c8669a2c-3acc-436e-8114-856769b15788}: [DhcpNameServer] 212.27.40.240 212.27.40.241
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-06]
Edge HomePage: Default -> hxxps://www.google.com/
Edge StartupUrls: Default -> "hxxps://www.google.com/"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2024-01-03]
Edge Extension: (Google Docs hors connexion) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2023-11-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-13]
Edge Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-12-13]
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2022-10-14]
Edge Profile: C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5 [2024-01-06]
Edge HomePage: Profile 5 -> edge://newtab/
Edge StartupUrls: Profile 5 -> "hxxps://www.google.fr/"
Edge Extension: (Google Docs hors connexion) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-14]
Edge Extension: (Edge relevant text changes) - C:\Users\Bernard\AppData\Local\Microsoft\Edge\User Data\Profile 5\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM\...\Edge\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
FireFox:
========
FF DefaultProfile: yxmigljg.default-1688563719553
FF ProfilePath: C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ur1vbjhg.default-release [2022-11-14]
FF Extension: (Français Language Pack) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ur1vbjhg.default-release\Extensions\langpack-fr@firefox.mozilla.org.xpi [2022-10-15]
FF ProfilePath: C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 [2024-01-06]
FF Homepage: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> hxxps://www.google.com/
FF Session Restore: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553 -> hxxps://www.geo.fr; hxxps://malakoff.plan-interactif.com
FF Extension: (To Google Translate) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2023-07-05]
FF Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2023-07-05]
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\yxmigljg.default-1688563719553\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-07-05]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.381.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.381.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-01-02] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default [2024-01-06]
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.fr/"
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2023-11-29]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-12-13]
CHR Extension: (EquusAfricanusAsinus) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\knfjjmhhgdednjdnajgikmppfcbghoph [2023-09-10] [UpdateUrl:hxxps://crxupdate.com/crx/updates.php] <==== ATTENTION
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-03-29]
CHR Profile: C:\Users\Bernard\AppData\Local\Google\Chrome\User Data\System Profile [2024-01-05]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM\...\Chrome\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
CHR HKU\S-1-5-21-1917571891-3703816493-1998226089-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [knfjjmhhgdednjdnajgikmppfcbghoph] - C:\\Users\\Bernard\\AppData\\Local\\apps.crx [2023-07-05]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936456 2015-05-13] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 Brother XP spl Service; C:\WINDOWS\SysWOW64\brsvc01a.exe [57344 2004-06-13] (Brother Industries, ltd. -> brother Industries Ltd)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-01-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.250.1203.0001\FileSyncHelper.exe [3514784 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230360 2023-11-13] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-05] (Malwarebytes Inc. -> Malwarebytes)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.250.1203.0001\OneDriveUpdaterService.exe [3852192 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2018-05-16] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 adblockvpntap; C:\WINDOWS\System32\DriverStore\FileRepository\adblockvpntap.inf_amd64_cccfab86ec82ba84\adblockvpntap.sys [49392 2022-12-15] (Betafish Incorporated -> The OpenVPN Project)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-11-20] (ASUSTeK Computer Inc. -> )
S3 asmthub3; C:\WINDOWS\System32\drivers\asmthub3.sys [140032 2013-08-16] (MCCI Corporation -> ASMedia Technology Inc)
S3 asmtxhci; C:\WINDOWS\System32\drivers\asmtxhci.sys [424192 2013-08-16] (MCCI Corporation -> ASMedia Technology Inc)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 cmudaxp; C:\WINDOWS\system32\drivers\cmudaxp.sys [2735616 2015-10-16] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-06-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-02-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MpKsl3e385fce; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [211208 2023-03-30] (Microsoft Windows -> Microsoft Corporation)
S3 Ser2pl; C:\WINDOWS\System32\drivers\ser2pl64.sys [97280 2010-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Prolific Technology Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2020-09-10] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-10] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-06 20:03 - 2024-01-06 20:04 - 000027543 _____ C:\Users\Bernard\Desktop\FRST.txt
2024-01-06 20:02 - 2024-01-06 20:03 - 000000000 ____D C:\FRST
2024-01-06 19:55 - 2024-01-06 19:55 - 002388992 _____ (Farbar) C:\Users\Bernard\Desktop\FRST64.exe
2024-01-06 18:45 - 2024-01-06 18:45 - 000019926 _____ C:\Users\Bernard\Downloads\identifiants.csv
2024-01-06 18:31 - 2024-01-06 18:31 - 000000188 _____ C:\Users\Bernard\Documents\Mots de passe Chrome.csv
2024-01-06 18:26 - 2024-01-06 18:26 - 000001957 _____ C:\Users\Bernard\Downloads\Capture d’écran dans cette liste extension EquuiAfricacanus SUPPRIMER 2024-01-05 191046.jpg - Raccourci.lnk
2024-01-06 08:38 - 2024-01-06 08:38 - 000001649 _____ C:\Users\Bernard\Downloads\SUPPRIMER UNE EXTENSION Methode .image.txt
2024-01-05 05:53 - 2024-01-05 05:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-01-04 02:33 - 2024-01-04 02:33 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-01-03 10:33 - 2024-01-03 17:28 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-12-13 11:51 - 2023-12-13 11:51 - 000000000 ___HD C:\$WinREAgent
2023-12-10 19:50 - 2023-12-10 19:50 - 000000000 ____D C:\WINDOWS\InboxApps
2023-12-10 19:45 - 2023-12-10 19:45 - 000016707 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-01-06 20:03 - 2022-02-15 11:55 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-06 20:01 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-06 20:01 - 2015-07-28 14:29 - 000000000 ___SD C:\Users\Bernard\AppData\Roaming\Microsoft\Credentials
2024-01-06 19:54 - 2020-06-12 17:13 - 000004172 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{FC649805-BB17-41A6-9143-2E48431170CA}
2024-01-06 19:11 - 2021-12-16 03:13 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-06 19:11 - 2018-05-16 19:03 - 000000000 ____D C:\Program Files (x86)\Google
2024-01-06 18:25 - 2015-07-29 12:32 - 000000000 ___RD C:\Users\Bernard\Dropbox
2024-01-06 17:00 - 2018-05-16 17:35 - 000000000 ____D C:\Users\Bernard\AppData\Roaming\Dropbox
2024-01-06 17:00 - 2018-05-16 17:33 - 000000000 ____D C:\Users\Bernard\AppData\Local\Dropbox
2024-01-06 16:59 - 2018-05-16 13:15 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2024-01-06 16:59 - 2015-07-28 19:46 - 000000000 __SHD C:\Users\Bernard\IntelGraphicsProfiles
2024-01-06 14:42 - 2020-06-12 17:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-06 13:38 - 2023-05-14 11:18 - 000000000 ____D C:\Users\Bernard\AppData\Local\Malwarebytes
2024-01-06 11:36 - 2022-10-12 13:03 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2024-01-05 18:57 - 2023-02-12 21:56 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-05 15:50 - 2018-11-16 09:48 - 000000000 ____D C:\Users\Bernard\AppData\Roaming\Microsoft\Skype for Desktop
2024-01-05 15:44 - 2020-06-12 17:11 - 001772726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-01-05 15:44 - 2019-12-07 15:49 - 000791762 _____ C:\WINDOWS\system32\perfh00C.dat
2024-01-05 15:44 - 2019-12-07 15:49 - 000149928 _____ C:\WINDOWS\system32\perfc00C.dat
2024-01-05 15:44 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-01-05 15:39 - 2020-06-12 17:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-05 15:39 - 2020-06-12 17:08 - 000008192 ___SH C:\DumpStack.log.tmp
2024-01-05 05:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-05 05:54 - 2018-05-16 17:33 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-01-05 05:51 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-04 22:37 - 2021-09-11 09:18 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000002008 _____ C:\Users\Default\Desktop\Google Slides.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000002008 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2024-01-04 22:37 - 2021-09-11 09:18 - 000001996 _____ C:\Users\Default\Desktop\Google Docs.lnk
2024-01-03 21:51 - 2022-03-21 17:38 - 000000236 _____ C:\Users\Bernard\Documents\mot de passe et lien depuis FIREFOX via Google chrome...txt
2024-01-03 21:18 - 2019-10-11 20:56 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-01-03 17:28 - 2019-10-09 03:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-01-03 16:09 - 2023-07-03 07:03 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-01-03 10:36 - 2020-06-20 07:39 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-16 14:45 - 2021-04-26 00:24 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-12-15 19:17 - 2021-12-12 11:12 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1917571891-3703816493-1998226089-1000
2023-12-15 19:17 - 2020-06-23 10:18 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-12-15 19:17 - 2020-06-23 10:18 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-12-15 16:28 - 2020-06-12 16:50 - 000000000 ____D C:\Users\Bernard
2023-12-14 16:18 - 2023-08-03 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2023-12-14 10:37 - 2020-06-12 17:08 - 000319480 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-12-14 10:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-12-14 10:37 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-14 10:22 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-12-14 10:20 - 2020-06-12 17:10 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-12-11 20:38 - 2023-07-19 04:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2023-12-11 20:38 - 2023-07-19 04:18 - 000000000 ____D C:\Program Files (x86)\Java
2023-12-10 19:51 - 2018-05-16 13:19 - 000000000 ____D C:\Users\Bernard\AppData\Local\Packages
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2023-12-10 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-12-10 19:50 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2023-12-10 19:48 - 2019-12-07 15:53 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-12-10 19:48 - 2019-12-07 15:53 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2023-12-10 18:10 - 2018-05-16 15:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-12-10 18:06 - 2020-06-12 17:13 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-12-10 18:06 - 2020-06-12 17:13 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2023-07-05 11:20 - 2023-07-05 11:20 - 000012173 _____ () C:\Users\Bernard\AppData\Local\apps.crx
2019-01-17 19:06 - 2019-11-26 03:54 - 000009216 _____ () C:\Users\Bernard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================