Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16.02.2024
Exécuté par Mathieu (administrateur) sur MATHIEU-PC (LENOVO 30AH000VCA) (17-02-2024 12:30:21)
Exécuté depuis C:\Users\Mathieu\Downloads\FRST64.exe
Profils chargés: Mathieu
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3930 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() <==== ATTENTION [zéro octet? (Erreur=2)] C:\Windows\Installer\Razer Central\1705629593b57DFLdeRazerChromaBroadcasterSetup_v3.9.0131.011908.exe
(C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\121.0.6167.185_121.0.6167.140_chrome_updater.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\CR_C38AB.tmp\setup.exe
(C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\CR_C38AB.tmp\setup.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WerFault.exe <4>
(C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ai.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\121.0.2277.98\identity_helper.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\MicrosoftEdge_X64_121.0.2277.128_121.0.2277.98.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\EDGEMITMP_D7E23.tmp\setup.exe
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzDiagnostic
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager
(C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer Inc.) [Accès refusé] C:\Windows\Temp\ceaotimx.yxq\Razer Updater.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
(C:\Program Files\NordUpdater\NordUpdateService.exe ->) (nordvpn s.a. -> Nord Security) C:\ProgramData\NordUpdater\updates\wiinjfqq.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe ->) (AVG Technologies USA, LLC -> AVG Technologies) C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\Install\{EDFC73F2-5439-47A9-B36A-39C0EE11586D}\AVGBrowserInstallerIncremental-120.0.23745.268.exe
(cmd.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe <2>
(explorer.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <15>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(explorer.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordVPN.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\121.0.6167.185_121.0.6167.140_chrome_updater.exe
(Microsoft Corporation -> Microsoft Corporation) [Fichier non signé] C:\Windows\Temp\MUBSTemp\BingChatInstaller.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1B408518-C6FA-487C-B42B-529196414243}\MicrosoftEdge_X64_121.0.2277.112_120.0.2210.144.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\MicrosoftEdge_X64_121.0.2277.128_121.0.2277.98.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(services.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(services.exe ->) (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe
(services.exe ->) (NewTech Infosystems, Inc.) [Fichier non signé] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (pdfforge GmbH -> © pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(svchost.exe ->) (AVG Technologies USA, LLC -> AVG Technologies) C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
Impossible d'accéder au processus -> AVGBrowserInstallerIncremental-120.0.23745.268.exe
Impossible d'accéder au processus -> mbupdatrV5.exe
Impossible d'accéder au processus -> setup.exe
Impossible d'accéder au processus -> setup.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18388936 2018-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [860192 2010-02-05] (Acer Incorporated -> Acer Incorporated)
HKLM\...\Run: [ALU] => C:\Program Files\Acer\Acer Updater\ALU.exe -r (Pas de fichier)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1852352 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3022640 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [644552 2019-07-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 3.1 eXtensible Host Controller Driver\Application\iusb3mon.exe [299520 2017-05-11] (Intel(R) USB eXtensible Host Controller Drivers -> Intel Corporation)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIPME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-530 Series" /EF "HKCU" (Pas de fichier)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4386664 2023-12-07] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2024-01-10] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [7559560 2023-11-30] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2671208 2023-08-08] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Opera Stable] => C:\Users\Mathieu\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [BakkesMod] => D:\Jeux\BakkesMod\BakkesMod.exe [15850496 2023-01-23] () [Fichier non signé]
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37277648 2024-01-29] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [AVG Browser] => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\AVGBrowserUpdateCore.exe [525304 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [AVGBrowserAutoLaunch_BFE793874878C5C1527BEE79EBB9AC88] => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowser.exe [3058000 2024-01-24] (AVG Technologies USA, LLC -> AVG Technologies)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [70918144 2023-12-16] () [Fichier non signé]
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [MicrosoftEdgeAutoLaunch_61419B7458AEE6F6B0DD12773255135E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788840 2024-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\RunOnce: [!BCILauncher] => C:\Windows\Temp\MUBSTemp\BCILauncher.exe [18368 2024-02-17] (Microsoft Corporation -> ) <==== ATTENTION
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Policies\Explorer: [NoThumbnailCache.] 1
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-530 Series" (Pas de fichier)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2024-01-10] (Razer USA Ltd. -> Razer Inc.)
HKLM\...\Print\Monitors\EPSON XP-510 Series 64MonitorBE: C:\Windows\system32\E_ILMBLRE.DLL [179712 2013-06-07] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON XP-530 Series 64MonitorBE: C:\Windows\system32\E_YLMBPME.DLL [180224 2014-03-05] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\121.0.6167.140\Installer\chrmstp.exe [2024-02-01] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {9A76BB0A-284F-4465-8EFF-91B8A0747FF3} - \Microsoft\Windows\Setup\EOSNotify -> Pas de fichier <==== ATTENTION
Task: {F037C489-CF30-49E8-AF59-C12E5F1FEF5A} - System32\Tasks\{04869E81-FA14-4365-91D9-C564FE029AE5} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\Alwil Software\Avast5\aswRunDll.exe" -c "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Task: {C4482464-15B1-426B-889D-BAE5FFACDD2E} - System32\Tasks\{1B533D52-3CEC-4DB2-BCFD-488E6835ED34} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {E398E5B6-D822-4D6F-9AE6-CDDC7AC7CA2E} - System32\Tasks\{C396C115-97BE-493A-A44E-DCBF835116E2} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Mathieu\AppData\Local\Temp\jre-8u251-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {6C705663-4CE3-494A-8B38-90FB31687100} - System32\Tasks\{CA2668E1-820A-489F-916E-2CA29FB2A93D} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Mathieu\Downloads\Activate_Autodesk_Products_2014_X_FORCE_Keygen_Full_Windows_MAC_OSX_Free.exe -d C:\Users\Mathieu\Downloads
Task: {A470420E-1896-454F-BD8F-7989CFEF8C05} - System32\Tasks\4MmvqVetGLbW => 4mmvqvetglbw.exe /Scheduled (Pas de fichier) <==== ATTENTION
Task: {2962809E-5D0F-4379-B482-1457B69CA76B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1183256 2018-02-09] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {9AA71244-7548-48A2-9158-121A8E1E6F3D} - System32\Tasks\AVG Secure Browser Heartbeat Task (Hourly) S-1-5-21-1154795195-1963078744-4212490491-1000 => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowser.exe [3058000 2024-01-24] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {98DEB9C2-A754-40B5-95F4-195A0768CDBC} - System32\Tasks\AVGBrowserProtectS-1-5-21-1154795195-1963078744-4212490491-1000 => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowserProtect.exe [1658808 2023-06-27] (AVG Technologies USA, LLC -> AVG Technologies) <==== ATTENTION
Task: {DBCDF6EE-C424-4174-B38E-59D1EF7D9E1D} - System32\Tasks\AVGUpdateTaskUserS-1-5-21-1154795195-1963078744-4212490491-1000Core => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe [209224 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {61072BE7-B3A4-47F5-BBEE-7F795B94BD1D} - System32\Tasks\AVGUpdateTaskUserS-1-5-21-1154795195-1963078744-4212490491-1000UA => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe [209224 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {1C5ABCC8-D29E-46C5-A5CC-857EE3036AE0} - System32\Tasks\EPSON XP-530 Series Update {39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE /EXE:"{39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333}" /F:"Update" (Pas de fichier)
Task: {2FBAF9A0-325A-4191-A2DA-C2CDE7AFF08A} - System32\Tasks\EPSON XP-530 Series Update {CFD550B2-7B9F-4B85-9FF3-7405BF244236} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE /EXE:"{CFD550B2-7B9F-4B85-9FF3-7405BF244236}" /F:"Update" (Pas de fichier)
Task: {DAF07130-3B10-4CEE-BB8D-35B004564B16} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-14] (Google Inc -> Google Inc.)
Task: {11EE3431-4E39-4E55-9C69-D07433794DB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-14] (Google Inc -> Google Inc.)
Task: {6D3EE977-F831-40E5-A4FF-54CC04353E63} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28371568 2024-01-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {11040922-5C57-45C5-9829-3907BA10ED68} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28371568 2024-01-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {1892F47F-B198-4C42-AA66-DE383CC18EAA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218672 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE87037E-41C2-4D33-B145-086193742432} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218672 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CC4C1D2-B7D5-4EE7-9818-1A50AB781AC8} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4436272 2024-01-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {42156BCC-F85D-4B9E-93A4-AFACB5D764B0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [362080 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {19EC934D-816F-4A02-9654-6F55CB67A23A} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {4DB474E2-C105-4DF0-AEAA-47BDE1CA8756} - System32\Tasks\Microsoft\Windows\EnterpriseMgmtNonCritical\19B9DD02-49F6-4A4D-A826-FF1A428EE3F4\Queued Schedule created for queued alerts => C:\WINDOWS\system32\deviceenroller.exe [473600 2023-11-14] (Microsoft Windows -> Microsoft Corporation)
Task: {9FA6C408-168C-4107-911B-63F597D0C4F2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Pas de fichier)
Task: {4268192D-657D-44C0-8AB9-AB842264E22D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {4FFE201F-6BA5-4228-95B0-A76758ED44C4} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Pas de fichier)
Task: {61ADD222-8CBE-4562-A50C-7F5914B4FCF8} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe /DRMInit (Pas de fichier)
Task: {D0473FF2-9C10-4C22-818A-B0D07946C0E8} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Pas de fichier)
Task: {088A755B-44C7-40A0-86F6-1636DD2FEE50} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate $(Arg0) (Pas de fichier)
Task: {59B205BA-C985-4A4A-9977-5BE49007C357} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15 (Pas de fichier)
Task: {E1D81947-FB84-41A4-A9DA-857DDC6DAB36} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {2BEFA491-65F8-40CB-BD22-9AF029BB0103} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Pas de fichier)
Task: {B21B0DE0-A8C8-4252-92DC-6D9C9D67E4CB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate (Pas de fichier)
Task: {E2E7F901-B794-43AC-99E0-CF3CB7340CBB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Pas de fichier)
Task: {5DCA53CF-30ED-4922-A9C4-2EB92D608ECB} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery (Pas de fichier)
Task: {F54DF43C-327E-4C2A-9022-9E7566B69B34} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Pas de fichier)
Task: {1622A368-E35D-43EC-9099-61CD050736FF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {0F3463C2-8F45-4345-AAF8-B5E94DDEF61B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe -pscn 0 (Pas de fichier)
Task: {A2C5EF2F-8887-4714-968E-3311000E01ED} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask (Pas de fichier)
Task: {64E61DF1-745B-4D78-AFCF-104FD1C79515} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe -PvrSchedule (Pas de fichier)
Task: {00ECFEE1-E07A-4109-821F-BE941D120C87} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec /RestartRecording (Pas de fichier)
Task: {A11437E0-FEAC-409F-A9F8-560CE7A4D959} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Pas de fichier)
Task: {217DA17D-F25F-45A9-A360-87D939FDAF5D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {9F75E7C6-B1C6-443F-B014-91133079B4F6} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask (Pas de fichier)
Task: {4E684E0E-8742-4696-9F67-9EDE35D664CA} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec /StartRecording (Pas de fichier)
Task: {B71D39FE-DEAE-4A2C-9311-D906F617865D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Pas de fichier)
Task: {8C5D2990-6B3F-41F2-8286-09D1F915C299} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {C3CBBA65-7C59-4502-AF92-88B2270334BC} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {D99425B6-4A4D-4918-90C3-DACB40DBEBB8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {E7ED42B3-4F55-4112-B98F-566EC6931466} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {AEFBB4A9-BB47-4257-9E9B-09D4602BF8BC} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {E0A524F4-E0AB-4F07-84FE-B7365AE2AC40} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [781248 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {96594A8F-1442-4031-A252-947ACD28B4D2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [628672 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B948C006-A184-4F9D-8958-C07A94FB3D24} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [628672 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7F1114B1-C24E-4B3A-BA9E-71843AB1B325} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C1503159-C6E6-4E21-8779-1849AE11A054} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [704960 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {24911C12-A418-41C7-AE78-ECBCCF436770} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [704960 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E1761EBC-0ED2-46EA-BD7B-D5E2666368F9} - System32\Tasks\Opera scheduled Autoupdate 1675546421 => C:\Users\Mathieu\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
Task: {35C087E1-90A5-434F-BDD0-8BB83F1C55FA} - System32\Tasks\RazerCortexScheduleClean => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
Task: {92E1104E-BD55-4C90-AABD-A06842D455E2} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1501120 2018-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-530 Series Update {39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE:/EXE:{39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-530 Series Update {CFD550B2-7B9F-4B85-9FF3-7405BF244236}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE:/EXE:{CFD550B2-7B9F-4B85-9FF3-7405BF244236} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{6B7A69E9-F708-433F-A3A6-3D63F01E6BBA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6B7A69E9-F708-433F-A3A6-3D63F01E6BBA}: [DhcpNameServer] 192.168.0.1 24.200.243.189 24.200.210.241
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}: [DhcpDomain] home
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\0596562727F647: [DhcpNameServer] 192.168.92.103
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\2454C4C4335303: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\2454C4C4335303: [DhcpDomain] home
Tcpip\..\Interfaces\{B6266BE5-FB76-4686-9132-E29374BE6B92}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B64FBCF3-7030-4C27-B6B9-3CD82AFF9BD0}: [DhcpNameServer] 192.168.0.1 24.200.243.189 24.200.210.241
Tcpip\..\Interfaces\{E670BD49-59B3-4A71-BE93-3AF7DA152363}: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{E670BD49-59B3-4A71-BE93-3AF7DA152363}: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default [2024-02-17]
Edge Notifications: Default -> hxxps://teams.live.com
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-01-15]
Edge Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fphgeikpdcdcheaochkhldmnfblfogla [2023-01-23]
Edge HKLM-x32\...\Edge\Extension: [fphgeikpdcdcheaochkhldmnfblfogla]
FireFox:
========
FF DefaultProfile: h61l0f4p.default
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default [2020-04-20]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default\Extensions\sp@avast.com.xpi [2019-02-23]
FF Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default\Extensions\wrc@avast.com.xpi [2018-07-17]
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release [2020-11-06]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release\Extensions\sp@avast.com.xpi [2019-02-23]
FF Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release\Extensions\wrc@avast.com.xpi [2018-07-17]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-09-19] [] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => non trouvé(e)
FF Plugin: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-22] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1154795195-1963078744-4212490491-1000: @update.avgbrowser.com/AVG Browser;version=3 -> C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\npAvgBrowserUpdate3.dll [2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
FF Plugin HKU\S-1-5-21-1154795195-1963078744-4212490491-1000: @update.avgbrowser.com/AVG Browser;version=9 -> C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\npAvgBrowserUpdate3.dll [2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault [2019-06-27] <==== ATTENTION
CHR HomePage: BackupDefault -> hxxp://www.google.ca/
CHR StartupUrls: BackupDefault -> "hxxps://www.google.fr/"
CHR NewTab: BackupDefault -> "active": false,
"entry": "chrome-extension://dgldcllfgcheelimlbmilnkilnamlhbd/newtab.html"
CHR Extension: (Google Drive) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-14]
CHR Extension: (YouTube) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-14]
CHR Extension: (Chrome Cleaner Pro) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\ccjleegmemocfpghkhpjmiccjcacackp [2018-01-22]
CHR Extension: (FlashBlock) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\cdngiadmnkhgemkimkhiilgffbjijcie [2017-07-16]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-09-27]
CHR Extension: (Avast SafePrice) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-25]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-01-21]
CHR Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-25]
CHR Extension: (Ocean) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2017-08-02]
CHR Extension: (Gmail) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-14]
CHR Extension: (Chrome Media Router) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-07-30]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-02-17]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-02-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-21]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2023-01-13]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-02-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-23]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-30]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984 2018-02-09] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2010-12-08] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15772456 2024-01-25] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14045768 2024-01-29] (Microsoft Corporation -> Microsoft Corporation)
R2 CortexLauncherService; C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe [588712 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [11513448 2023-08-08] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-07-22] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [955816 2023-10-13] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-27] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe [1418736 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 nordsec-threatprotection-service; C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe [320088 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2022-11-21] (nordvpn s.a. -> nordvpn S.A.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-08] (NewTech Infosystems, Inc.) [Fichier non signé]
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (pdfforge GmbH -> © pdfforge GmbH.)
S2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2170800 2024-01-11] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [306096 2024-01-11] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1361360 2023-03-06] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc)
R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362760 2023-06-14] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [297736 2024-01-09] (Razer USA Ltd. -> Razer Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [538424 2023-11-09] (Razer USA Ltd. -> Razer Inc.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9623432 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc /rpcserver [X]
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService"
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2336008 2023-02-08] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-05-21] (Activision Publishing Inc -> Activision Blizzard, Inc.)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-01-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 LBAI; C:\WINDOWS\System32\Drivers\LBAI.sys [23208 2017-11-13] (WDKTestCert Win10P64US,131547553407012624 -> Lenovo)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-01-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [200104 2024-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2024-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188784 2024-02-02] (Malwarebytes Inc. -> Malwarebytes)
S3 mshield; C:\WINDOWS\System32\DRIVERS\mshield.sys [43112 2024-01-10] (nordvpn s.a. -> Nordvpn S.A.)
R2 NDivert; C:\Program Files\NordVPN\7.18.5.0\Drivers\NDivert.sys [131472 2023-08-04] (nordvpn s.a. -> Nordvpn S.A.)
R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [44928 2022-02-22] (nordvpn s.a. -> TEFINCOM S.A.)
R1 RtlvVga; C:\WINDOWS\System32\drivers\RtlvVga.sys [11920 2014-03-18] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_008a; C:\WINDOWS\System32\drivers\RzDev_008a.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_023f; C:\WINDOWS\System32\drivers\RzDev_023f.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2022-06-29] (nordvpn s.a. -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [22035200 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [48144 2022-07-26] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2023-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2023-12-21] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-21] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2023-01-15] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-12-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
U3 idsvc; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-02-17 12:31 - 2024-02-17 12:31 - 000131072 ___HT C:\Users\Mathieu\OneDrive\Documents\~Mon fichier de données Outlook(1).pst.tmp
2024-02-17 12:30 - 2024-02-17 12:31 - 000052579 _____ C:\Users\Mathieu\Downloads\FRST.txt
2024-02-17 12:28 - 2024-02-17 12:31 - 000000000 ____D C:\FRST
2024-02-17 12:28 - 2024-02-17 12:28 - 002390016 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2024-02-02 09:27 - 2024-02-02 09:27 - 000188784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2024-02-01 13:59 - 2024-01-10 10:37 - 000043112 _____ (Nordvpn S.A.) C:\WINDOWS\system32\Drivers\mshield.sys
2024-01-30 18:11 - 2024-01-30 18:11 - 000027376 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_1124808575578696.dll
2024-01-29 10:25 - 2024-01-29 10:25 - 000003794 _____ C:\WINDOWS\system32\Tasks\AVGBrowserProtectS-1-5-21-1154795195-1963078744-4212490491-1000
2024-01-28 20:41 - 2024-01-28 20:43 - 118894440 _____ (Voicemod S.L. ) C:\Users\Mathieu\Downloads\VoicemodSetup_2.47.0.0 (1).exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-02-17 12:31 - 2020-11-08 09:03 - 000271360 _____ C:\Users\Mathieu\OneDrive\Documents\Mon fichier de données Outlook(1).pst
2024-02-17 12:29 - 2022-06-09 18:59 - 000000000 ____D C:\Program Files (x86)\Razer Chroma SDK
2024-02-17 12:28 - 2022-06-09 19:18 - 000003972 _____ C:\WINDOWS\system32\Tasks\RazerCortexScheduleClean
2024-02-17 12:27 - 2017-07-14 19:12 - 000000000 ___SD C:\Users\Mathieu\AppData\Roaming\Microsoft\Credentials
2024-02-17 12:26 - 2023-05-12 07:21 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Malwarebytes
2024-02-17 12:26 - 2021-12-22 16:43 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Comms
2024-02-17 12:25 - 2021-12-27 18:14 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-02-17 12:25 - 2021-12-22 16:22 - 000000000 ____D C:\Users\Mathieu
2024-02-17 12:25 - 2021-12-19 18:53 - 000000000 ____D C:\ProgramData\NVIDIA
2024-02-17 12:25 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-02-17 12:25 - 2010-04-11 23:36 - 000000000 ____D C:\Program Files (x86)\Google
2024-02-17 11:06 - 2021-12-22 16:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-02-17 10:40 - 2021-12-22 16:22 - 001978906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-02-17 10:40 - 2019-12-07 10:49 - 000866332 _____ C:\WINDOWS\system32\perfh00C.dat
2024-02-17 10:40 - 2019-12-07 10:49 - 000183126 _____ C:\WINDOWS\system32\perfc00C.dat
2024-02-17 10:40 - 2019-12-07 05:13 - 000000000 ____D C:\WINDOWS\INF
2024-02-17 10:37 - 2022-07-02 09:09 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2024-02-17 10:35 - 2021-12-22 16:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-02-17 10:35 - 2021-12-22 16:19 - 000008192 ___SH C:\DumpStack.log.tmp
2024-02-17 10:35 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-02-03 06:27 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-02-03 06:27 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-02-03 06:13 - 2021-12-22 16:19 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-02-03 01:34 - 2017-07-30 22:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-02-02 20:07 - 2021-12-22 16:27 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-02-02 20:07 - 2021-12-22 16:27 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7f771417b7ba8
2024-02-02 19:33 - 2021-12-22 16:22 - 000002471 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-02-02 18:36 - 2022-01-03 10:14 - 000000000 ____D C:\Users\Mathieu\AppData\Roaming\EasyAntiCheat
2024-02-02 09:28 - 2023-01-15 14:36 - 000000000 ____D C:\Users\Mathieu\AppData\Local\NordVPN
2024-02-02 00:00 - 2019-12-07 05:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-02-01 23:22 - 2022-06-17 17:36 - 000000000 ____D C:\Users\Mathieu\AppData\Local\CrashDumps
2024-02-01 19:09 - 2017-08-02 20:27 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-02-01 13:59 - 2023-01-15 14:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec
2024-02-01 13:59 - 2023-01-15 14:36 - 000000000 ____D C:\Program Files\NordVPN
2024-01-31 19:37 - 2020-08-17 11:15 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Spotify
2024-01-31 19:37 - 2020-08-17 11:14 - 000000000 ____D C:\Users\Mathieu\AppData\Roaming\Spotify
2024-01-30 19:02 - 2021-12-22 16:26 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2024-01-30 19:02 - 2021-12-22 16:26 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2024-01-29 18:19 - 2023-02-04 17:33 - 000004222 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1675546421
2024-01-29 18:19 - 2023-02-04 17:33 - 000001459 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-01-28 20:44 - 2022-12-15 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod
2024-01-28 20:44 - 2022-12-15 17:28 - 000000000 ____D C:\Program Files\Voicemod Desktop
2024-01-28 20:43 - 2022-12-15 17:28 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Voicemod
2024-01-27 21:03 - 2023-01-15 14:53 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-26 13:27 - 2023-07-04 18:23 - 000002628 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVG Secure Browser.lnk
2024-01-25 10:00 - 2022-01-03 15:54 - 000000000 ____D C:\Users\Mathieu\AppData\Local\BattlEye
2024-01-21 10:57 - 2021-12-25 10:55 - 000000000 ____D C:\Users\Mathieu\AppData\Local\D3DSCache
2024-01-19 08:52 - 2023-09-15 19:20 - 000263672 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 002754152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 000095736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2024-01-19 08:52 - 2022-12-03 10:13 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2024-01-19 08:51 - 2022-12-03 10:13 - 000644600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2024-01-19 08:51 - 2022-12-03 10:13 - 000214632 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2024-01-19 08:51 - 2022-12-03 10:13 - 000194040 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
==================== Fichiers à la racine de certains dossiers ========
2018-03-07 12:03 - 2018-03-07 12:03 - 000001142 _____ () C:\Users\Mathieu\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-06-01 10:01 - 2019-07-19 08:29 - 000022837 _____ () C:\Users\Mathieu\AppData\Roaming\downloads.json
2022-07-01 15:45 - 2022-07-01 15:45 - 000000015 _____ () C:\Users\Mathieu\AppData\Roaming\obs-virtualcam.txt
2017-07-14 20:23 - 2020-10-10 17:11 - 000005390 _____ () C:\Users\Mathieu\AppData\Roaming\wklnhst.dat
2020-09-09 13:46 - 2020-09-09 13:46 - 000003584 _____ () C:\Users\Mathieu\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-11-11 17:19 - 2023-01-12 19:04 - 000011252 _____ () C:\Users\Mathieu\AppData\Local\PlariumPlay.log
2017-12-17 21:59 - 2017-12-17 21:59 - 000007607 _____ () C:\Users\Mathieu\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par Mathieu (administrateur) sur MATHIEU-PC (LENOVO 30AH000VCA) (17-02-2024 12:30:21)
Exécuté depuis C:\Users\Mathieu\Downloads\FRST64.exe
Profils chargés: Mathieu
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3930 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() <==== ATTENTION [zéro octet? (Erreur=2)] C:\Windows\Installer\Razer Central\1705629593b57DFLdeRazerChromaBroadcasterSetup_v3.9.0131.011908.exe
(C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\121.0.6167.185_121.0.6167.140_chrome_updater.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\CR_C38AB.tmp\setup.exe
(C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\CR_C38AB.tmp\setup.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WerFault.exe <4>
(C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ai.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\121.0.2277.98\identity_helper.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\MicrosoftEdge_X64_121.0.2277.128_121.0.2277.98.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\EDGEMITMP_D7E23.tmp\setup.exe
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzDiagnostic
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager
(C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer Inc.) [Accès refusé] C:\Windows\Temp\ceaotimx.yxq\Razer Updater.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
(C:\Program Files\NordUpdater\NordUpdateService.exe ->) (nordvpn s.a. -> Nord Security) C:\ProgramData\NordUpdater\updates\wiinjfqq.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe ->) (AVG Technologies USA, LLC -> AVG Technologies) C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\Install\{EDFC73F2-5439-47A9-B36A-39C0EE11586D}\AVGBrowserInstallerIncremental-120.0.23745.268.exe
(cmd.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe <2>
(explorer.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <15>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(explorer.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordVPN.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\Install\{846B4935-93CA-4CF8-8D7E-0BD82ACF4424}\121.0.6167.185_121.0.6167.140_chrome_updater.exe
(Microsoft Corporation -> Microsoft Corporation) [Fichier non signé] C:\Windows\Temp\MUBSTemp\BingChatInstaller.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1B408518-C6FA-487C-B42B-529196414243}\MicrosoftEdge_X64_121.0.2277.112_120.0.2210.144.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{86CAB0A0-9792-4EA9-A7F9-9D602FD90A82}\MicrosoftEdge_X64_121.0.2277.128_121.0.2277.98.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(services.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(services.exe ->) (Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe
(services.exe ->) (NewTech Infosystems, Inc.) [Fichier non signé] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (pdfforge GmbH -> © pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(svchost.exe ->) (AVG Technologies USA, LLC -> AVG Technologies) C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
Impossible d'accéder au processus -> AVGBrowserInstallerIncremental-120.0.23745.268.exe
Impossible d'accéder au processus -> mbupdatrV5.exe
Impossible d'accéder au processus -> setup.exe
Impossible d'accéder au processus -> setup.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18388936 2018-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [860192 2010-02-05] (Acer Incorporated -> Acer Incorporated)
HKLM\...\Run: [ALU] => C:\Program Files\Acer\Acer Updater\ALU.exe -r (Pas de fichier)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1852352 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3022640 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [644552 2019-07-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 3.1 eXtensible Host Controller Driver\Application\iusb3mon.exe [299520 2017-05-11] (Intel(R) USB eXtensible Host Controller Drivers -> Intel Corporation)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIPME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-530 Series" /EF "HKCU" (Pas de fichier)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4386664 2023-12-07] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2024-01-10] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [7559560 2023-11-30] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2671208 2023-08-08] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [Opera Stable] => C:\Users\Mathieu\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [BakkesMod] => D:\Jeux\BakkesMod\BakkesMod.exe [15850496 2023-01-23] () [Fichier non signé]
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37277648 2024-01-29] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [AVG Browser] => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\AVGBrowserUpdateCore.exe [525304 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [AVGBrowserAutoLaunch_BFE793874878C5C1527BEE79EBB9AC88] => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowser.exe [3058000 2024-01-24] (AVG Technologies USA, LLC -> AVG Technologies)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [70918144 2023-12-16] () [Fichier non signé]
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Run: [MicrosoftEdgeAutoLaunch_61419B7458AEE6F6B0DD12773255135E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788840 2024-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\RunOnce: [!BCILauncher] => C:\Windows\Temp\MUBSTemp\BCILauncher.exe [18368 2024-02-17] (Microsoft Corporation -> ) <==== ATTENTION
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Policies\Explorer: [NoThumbnailCache.] 1
HKU\S-1-5-21-1154795195-1963078744-4212490491-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-530 Series" (Pas de fichier)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2024-01-10] (Razer USA Ltd. -> Razer Inc.)
HKLM\...\Print\Monitors\EPSON XP-510 Series 64MonitorBE: C:\Windows\system32\E_ILMBLRE.DLL [179712 2013-06-07] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\...\Print\Monitors\EPSON XP-530 Series 64MonitorBE: C:\Windows\system32\E_YLMBPME.DLL [180224 2014-03-05] (SEIKO EPSON CORPORATION) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\121.0.6167.140\Installer\chrmstp.exe [2024-02-01] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {9A76BB0A-284F-4465-8EFF-91B8A0747FF3} - \Microsoft\Windows\Setup\EOSNotify -> Pas de fichier <==== ATTENTION
Task: {F037C489-CF30-49E8-AF59-C12E5F1FEF5A} - System32\Tasks\{04869E81-FA14-4365-91D9-C564FE029AE5} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\Alwil Software\Avast5\aswRunDll.exe" -c "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Task: {C4482464-15B1-426B-889D-BAE5FFACDD2E} - System32\Tasks\{1B533D52-3CEC-4DB2-BCFD-488E6835ED34} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {E398E5B6-D822-4D6F-9AE6-CDDC7AC7CA2E} - System32\Tasks\{C396C115-97BE-493A-A44E-DCBF835116E2} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Mathieu\AppData\Local\Temp\jre-8u251-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {6C705663-4CE3-494A-8B38-90FB31687100} - System32\Tasks\{CA2668E1-820A-489F-916E-2CA29FB2A93D} => C:\Windows\system32\pcalua.exe [53760 2023-11-14] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Mathieu\Downloads\Activate_Autodesk_Products_2014_X_FORCE_Keygen_Full_Windows_MAC_OSX_Free.exe -d C:\Users\Mathieu\Downloads
Task: {A470420E-1896-454F-BD8F-7989CFEF8C05} - System32\Tasks\4MmvqVetGLbW => 4mmvqvetglbw.exe /Scheduled (Pas de fichier) <==== ATTENTION
Task: {2962809E-5D0F-4379-B482-1457B69CA76B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1183256 2018-02-09] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {9AA71244-7548-48A2-9158-121A8E1E6F3D} - System32\Tasks\AVG Secure Browser Heartbeat Task (Hourly) S-1-5-21-1154795195-1963078744-4212490491-1000 => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowser.exe [3058000 2024-01-24] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {98DEB9C2-A754-40B5-95F4-195A0768CDBC} - System32\Tasks\AVGBrowserProtectS-1-5-21-1154795195-1963078744-4212490491-1000 => C:\Users\Mathieu\AppData\Local\AVG\Browser\Application\AVGBrowserProtect.exe [1658808 2023-06-27] (AVG Technologies USA, LLC -> AVG Technologies) <==== ATTENTION
Task: {DBCDF6EE-C424-4174-B38E-59D1EF7D9E1D} - System32\Tasks\AVGUpdateTaskUserS-1-5-21-1154795195-1963078744-4212490491-1000Core => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe [209224 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {61072BE7-B3A4-47F5-BBEE-7F795B94BD1D} - System32\Tasks\AVGUpdateTaskUserS-1-5-21-1154795195-1963078744-4212490491-1000UA => C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\AVGBrowserUpdate.exe [209224 2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {1C5ABCC8-D29E-46C5-A5CC-857EE3036AE0} - System32\Tasks\EPSON XP-530 Series Update {39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE /EXE:"{39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333}" /F:"Update" (Pas de fichier)
Task: {2FBAF9A0-325A-4191-A2DA-C2CDE7AFF08A} - System32\Tasks\EPSON XP-530 Series Update {CFD550B2-7B9F-4B85-9FF3-7405BF244236} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE /EXE:"{CFD550B2-7B9F-4B85-9FF3-7405BF244236}" /F:"Update" (Pas de fichier)
Task: {DAF07130-3B10-4CEE-BB8D-35B004564B16} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-14] (Google Inc -> Google Inc.)
Task: {11EE3431-4E39-4E55-9C69-D07433794DB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-14] (Google Inc -> Google Inc.)
Task: {6D3EE977-F831-40E5-A4FF-54CC04353E63} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28371568 2024-01-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {11040922-5C57-45C5-9829-3907BA10ED68} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28371568 2024-01-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {1892F47F-B198-4C42-AA66-DE383CC18EAA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218672 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE87037E-41C2-4D33-B145-086193742432} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [218672 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CC4C1D2-B7D5-4EE7-9818-1A50AB781AC8} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4436272 2024-01-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {42156BCC-F85D-4B9E-93A4-AFACB5D764B0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [362080 2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {19EC934D-816F-4A02-9654-6F55CB67A23A} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {4DB474E2-C105-4DF0-AEAA-47BDE1CA8756} - System32\Tasks\Microsoft\Windows\EnterpriseMgmtNonCritical\19B9DD02-49F6-4A4D-A826-FF1A428EE3F4\Queued Schedule created for queued alerts => C:\WINDOWS\system32\deviceenroller.exe [473600 2023-11-14] (Microsoft Windows -> Microsoft Corporation)
Task: {9FA6C408-168C-4107-911B-63F597D0C4F2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Pas de fichier)
Task: {4268192D-657D-44C0-8AB9-AB842264E22D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {4FFE201F-6BA5-4228-95B0-A76758ED44C4} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Pas de fichier)
Task: {61ADD222-8CBE-4562-A50C-7F5914B4FCF8} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe /DRMInit (Pas de fichier)
Task: {D0473FF2-9C10-4C22-818A-B0D07946C0E8} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Pas de fichier)
Task: {088A755B-44C7-40A0-86F6-1636DD2FEE50} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate $(Arg0) (Pas de fichier)
Task: {59B205BA-C985-4A4A-9977-5BE49007C357} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15 (Pas de fichier)
Task: {E1D81947-FB84-41A4-A9DA-857DDC6DAB36} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {2BEFA491-65F8-40CB-BD22-9AF029BB0103} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Pas de fichier)
Task: {B21B0DE0-A8C8-4252-92DC-6D9C9D67E4CB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate (Pas de fichier)
Task: {E2E7F901-B794-43AC-99E0-CF3CB7340CBB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Pas de fichier)
Task: {5DCA53CF-30ED-4922-A9C4-2EB92D608ECB} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery (Pas de fichier)
Task: {F54DF43C-327E-4C2A-9022-9E7566B69B34} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Pas de fichier)
Task: {1622A368-E35D-43EC-9099-61CD050736FF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {0F3463C2-8F45-4345-AAF8-B5E94DDEF61B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe -pscn 0 (Pas de fichier)
Task: {A2C5EF2F-8887-4714-968E-3311000E01ED} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask (Pas de fichier)
Task: {64E61DF1-745B-4D78-AFCF-104FD1C79515} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe -PvrSchedule (Pas de fichier)
Task: {00ECFEE1-E07A-4109-821F-BE941D120C87} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec /RestartRecording (Pas de fichier)
Task: {A11437E0-FEAC-409F-A9F8-560CE7A4D959} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Pas de fichier)
Task: {217DA17D-F25F-45A9-A360-87D939FDAF5D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {9F75E7C6-B1C6-443F-B014-91133079B4F6} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask (Pas de fichier)
Task: {4E684E0E-8742-4696-9F67-9EDE35D664CA} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec /StartRecording (Pas de fichier)
Task: {B71D39FE-DEAE-4A2C-9311-D906F617865D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Pas de fichier)
Task: {8C5D2990-6B3F-41F2-8286-09D1F915C299} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {C3CBBA65-7C59-4502-AF92-88B2270334BC} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {D99425B6-4A4D-4918-90C3-DACB40DBEBB8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {E7ED42B3-4F55-4112-B98F-566EC6931466} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {AEFBB4A9-BB47-4257-9E9B-09D4602BF8BC} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {E0A524F4-E0AB-4F07-84FE-B7365AE2AC40} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [781248 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {96594A8F-1442-4031-A252-947ACD28B4D2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [628672 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B948C006-A184-4F9D-8958-C07A94FB3D24} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [628672 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7F1114B1-C24E-4B3A-BA9E-71843AB1B325} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C1503159-C6E6-4E21-8779-1849AE11A054} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [704960 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {24911C12-A418-41C7-AE78-ECBCCF436770} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [704960 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E1761EBC-0ED2-46EA-BD7B-D5E2666368F9} - System32\Tasks\Opera scheduled Autoupdate 1675546421 => C:\Users\Mathieu\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
Task: {35C087E1-90A5-434F-BDD0-8BB83F1C55FA} - System32\Tasks\RazerCortexScheduleClean => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
Task: {92E1104E-BD55-4C90-AABD-A06842D455E2} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1501120 2018-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\EPSON XP-530 Series Update {39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE:/EXE:{39E2A9F2-26D9-4E3C-84EA-91D6D8FDD333} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-530 Series Update {CFD550B2-7B9F-4B85-9FF3-7405BF244236}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPME.EXE:/EXE:{CFD550B2-7B9F-4B85-9FF3-7405BF244236} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{6B7A69E9-F708-433F-A3A6-3D63F01E6BBA}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{6B7A69E9-F708-433F-A3A6-3D63F01E6BBA}: [DhcpNameServer] 192.168.0.1 24.200.243.189 24.200.210.241
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}: [DhcpDomain] home
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\0596562727F647: [DhcpNameServer] 192.168.92.103
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\2454C4C4335303: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{868496FC-CE6A-4E46-81F7-044D07B4823B}\2454C4C4335303: [DhcpDomain] home
Tcpip\..\Interfaces\{B6266BE5-FB76-4686-9132-E29374BE6B92}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{B64FBCF3-7030-4C27-B6B9-3CD82AFF9BD0}: [DhcpNameServer] 192.168.0.1 24.200.243.189 24.200.210.241
Tcpip\..\Interfaces\{E670BD49-59B3-4A71-BE93-3AF7DA152363}: [DhcpNameServer] 192.168.2.1 207.164.234.193
Tcpip\..\Interfaces\{E670BD49-59B3-4A71-BE93-3AF7DA152363}: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default [2024-02-17]
Edge Notifications: Default -> hxxps://teams.live.com
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-01-15]
Edge Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\Mathieu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fphgeikpdcdcheaochkhldmnfblfogla [2023-01-23]
Edge HKLM-x32\...\Edge\Extension: [fphgeikpdcdcheaochkhldmnfblfogla]
FireFox:
========
FF DefaultProfile: h61l0f4p.default
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default [2020-04-20]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default\Extensions\sp@avast.com.xpi [2019-02-23]
FF Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\h61l0f4p.default\Extensions\wrc@avast.com.xpi [2018-07-17]
FF ProfilePath: C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release [2020-11-06]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release\Extensions\sp@avast.com.xpi [2019-02-23]
FF Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Roaming\Mozilla\Firefox\Profiles\08vdghnt.default-release\Extensions\wrc@avast.com.xpi [2018-07-17]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-09-19] [] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => non trouvé(e)
FF Plugin: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-22] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1154795195-1963078744-4212490491-1000: @update.avgbrowser.com/AVG Browser;version=3 -> C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\npAvgBrowserUpdate3.dll [2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
FF Plugin HKU\S-1-5-21-1154795195-1963078744-4212490491-1000: @update.avgbrowser.com/AVG Browser;version=9 -> C:\Users\Mathieu\AppData\Local\AVG\Browser\Update\1.8.1634.4\npAvgBrowserUpdate3.dll [2023-07-04] (AVG Technologies USA, LLC -> AVG Technologies)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault [2019-06-27] <==== ATTENTION
CHR HomePage: BackupDefault -> hxxp://www.google.ca/
CHR StartupUrls: BackupDefault -> "hxxps://www.google.fr/"
CHR NewTab: BackupDefault -> "active": false,
"entry": "chrome-extension://dgldcllfgcheelimlbmilnkilnamlhbd/newtab.html"
CHR Extension: (Google Drive) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-14]
CHR Extension: (YouTube) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-14]
CHR Extension: (Chrome Cleaner Pro) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\ccjleegmemocfpghkhpjmiccjcacackp [2018-01-22]
CHR Extension: (FlashBlock) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\cdngiadmnkhgemkimkhiilgffbjijcie [2017-07-16]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-09-27]
CHR Extension: (Avast SafePrice) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-25]
CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-01-21]
CHR Extension: (Avast Online Security) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-25]
CHR Extension: (Ocean) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pgedigcdbemilinbicidhplhebjoafpl [2017-08-02]
CHR Extension: (Gmail) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-14]
CHR Extension: (Chrome Media Router) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\BackupDefault\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-10]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-07-30]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-02-17]
CHR Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-02-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-21]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2023-01-13]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-02-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-23]
CHR Profile: C:\Users\Mathieu\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-30]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984 2018-02-09] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2010-12-08] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15772456 2024-01-25] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14045768 2024-01-29] (Microsoft Corporation -> Microsoft Corporation)
R2 CortexLauncherService; C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe [588712 2024-01-08] (Razer USA Ltd. -> Razer Inc.)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [11513448 2023-08-08] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-07-22] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [955816 2023-10-13] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-27] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpDefenderCoreService.exe [1418736 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 nordsec-threatprotection-service; C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe [320088 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2022-11-21] (nordvpn s.a. -> nordvpn S.A.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-08] (NewTech Infosystems, Inc.) [Fichier non signé]
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (pdfforge GmbH -> © pdfforge GmbH.)
S2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2170800 2024-01-11] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [306096 2024-01-11] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1361360 2023-03-06] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc)
R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362760 2023-06-14] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [297736 2024-01-09] (Razer USA Ltd. -> Razer Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [538424 2023-11-09] (Razer USA Ltd. -> Razer Inc.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9623432 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc /rpcserver [X]
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem"
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService"
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2336008 2023-02-08] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-05-21] (Activision Publishing Inc -> Activision Blizzard, Inc.)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-01-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 LBAI; C:\WINDOWS\System32\Drivers\LBAI.sys [23208 2017-11-13] (WDKTestCert Win10P64US,131547553407012624 -> Lenovo)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-01-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [200104 2024-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2024-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188784 2024-02-02] (Malwarebytes Inc. -> Malwarebytes)
S3 mshield; C:\WINDOWS\System32\DRIVERS\mshield.sys [43112 2024-01-10] (nordvpn s.a. -> Nordvpn S.A.)
R2 NDivert; C:\Program Files\NordVPN\7.18.5.0\Drivers\NDivert.sys [131472 2023-08-04] (nordvpn s.a. -> Nordvpn S.A.)
R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [44928 2022-02-22] (nordvpn s.a. -> TEFINCOM S.A.)
R1 RtlvVga; C:\WINDOWS\System32\drivers\RtlvVga.sys [11920 2014-03-18] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_008a; C:\WINDOWS\System32\drivers\RzDev_008a.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_023f; C:\WINDOWS\System32\drivers\RzDev_023f.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2022-06-29] (nordvpn s.a. -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [22035200 2023-11-27] (Riot Games, Inc. -> Riot Games, Inc.)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [48144 2022-07-26] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2023-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2023-12-21] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-21] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2023-01-15] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-12-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
U3 idsvc; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-02-17 12:31 - 2024-02-17 12:31 - 000131072 ___HT C:\Users\Mathieu\OneDrive\Documents\~Mon fichier de données Outlook(1).pst.tmp
2024-02-17 12:30 - 2024-02-17 12:31 - 000052579 _____ C:\Users\Mathieu\Downloads\FRST.txt
2024-02-17 12:28 - 2024-02-17 12:31 - 000000000 ____D C:\FRST
2024-02-17 12:28 - 2024-02-17 12:28 - 002390016 _____ (Farbar) C:\Users\Mathieu\Downloads\FRST64.exe
2024-02-02 09:27 - 2024-02-02 09:27 - 000188784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2024-02-01 13:59 - 2024-01-10 10:37 - 000043112 _____ (Nordvpn S.A.) C:\WINDOWS\system32\Drivers\mshield.sys
2024-01-30 18:11 - 2024-01-30 18:11 - 000027376 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_1124808575578696.dll
2024-01-29 10:25 - 2024-01-29 10:25 - 000003794 _____ C:\WINDOWS\system32\Tasks\AVGBrowserProtectS-1-5-21-1154795195-1963078744-4212490491-1000
2024-01-28 20:41 - 2024-01-28 20:43 - 118894440 _____ (Voicemod S.L. ) C:\Users\Mathieu\Downloads\VoicemodSetup_2.47.0.0 (1).exe
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-02-17 12:31 - 2020-11-08 09:03 - 000271360 _____ C:\Users\Mathieu\OneDrive\Documents\Mon fichier de données Outlook(1).pst
2024-02-17 12:29 - 2022-06-09 18:59 - 000000000 ____D C:\Program Files (x86)\Razer Chroma SDK
2024-02-17 12:28 - 2022-06-09 19:18 - 000003972 _____ C:\WINDOWS\system32\Tasks\RazerCortexScheduleClean
2024-02-17 12:27 - 2017-07-14 19:12 - 000000000 ___SD C:\Users\Mathieu\AppData\Roaming\Microsoft\Credentials
2024-02-17 12:26 - 2023-05-12 07:21 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Malwarebytes
2024-02-17 12:26 - 2021-12-22 16:43 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Comms
2024-02-17 12:25 - 2021-12-27 18:14 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-02-17 12:25 - 2021-12-22 16:22 - 000000000 ____D C:\Users\Mathieu
2024-02-17 12:25 - 2021-12-19 18:53 - 000000000 ____D C:\ProgramData\NVIDIA
2024-02-17 12:25 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-02-17 12:25 - 2010-04-11 23:36 - 000000000 ____D C:\Program Files (x86)\Google
2024-02-17 11:06 - 2021-12-22 16:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-02-17 10:40 - 2021-12-22 16:22 - 001978906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-02-17 10:40 - 2019-12-07 10:49 - 000866332 _____ C:\WINDOWS\system32\perfh00C.dat
2024-02-17 10:40 - 2019-12-07 10:49 - 000183126 _____ C:\WINDOWS\system32\perfc00C.dat
2024-02-17 10:40 - 2019-12-07 05:13 - 000000000 ____D C:\WINDOWS\INF
2024-02-17 10:37 - 2022-07-02 09:09 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2024-02-17 10:35 - 2021-12-22 16:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-02-17 10:35 - 2021-12-22 16:19 - 000008192 ___SH C:\DumpStack.log.tmp
2024-02-17 10:35 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-02-03 06:27 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-02-03 06:27 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-02-03 06:13 - 2021-12-22 16:19 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-02-03 01:34 - 2017-07-30 22:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-02-02 20:07 - 2021-12-22 16:27 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-02-02 20:07 - 2021-12-22 16:27 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7f771417b7ba8
2024-02-02 19:33 - 2021-12-22 16:22 - 000002471 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-02-02 18:36 - 2022-01-03 10:14 - 000000000 ____D C:\Users\Mathieu\AppData\Roaming\EasyAntiCheat
2024-02-02 09:28 - 2023-01-15 14:36 - 000000000 ____D C:\Users\Mathieu\AppData\Local\NordVPN
2024-02-02 00:00 - 2019-12-07 05:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-02-01 23:22 - 2022-06-17 17:36 - 000000000 ____D C:\Users\Mathieu\AppData\Local\CrashDumps
2024-02-01 19:09 - 2017-08-02 20:27 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-02-01 13:59 - 2023-01-15 14:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec
2024-02-01 13:59 - 2023-01-15 14:36 - 000000000 ____D C:\Program Files\NordVPN
2024-01-31 19:37 - 2020-08-17 11:15 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Spotify
2024-01-31 19:37 - 2020-08-17 11:14 - 000000000 ____D C:\Users\Mathieu\AppData\Roaming\Spotify
2024-01-30 19:02 - 2021-12-22 16:26 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2024-01-30 19:02 - 2021-12-22 16:26 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2024-01-29 18:19 - 2023-02-04 17:33 - 000004222 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1675546421
2024-01-29 18:19 - 2023-02-04 17:33 - 000001459 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-01-28 20:44 - 2022-12-15 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod
2024-01-28 20:44 - 2022-12-15 17:28 - 000000000 ____D C:\Program Files\Voicemod Desktop
2024-01-28 20:43 - 2022-12-15 17:28 - 000000000 ____D C:\Users\Mathieu\AppData\Local\Voicemod
2024-01-27 21:03 - 2023-01-15 14:53 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-26 13:27 - 2023-07-04 18:23 - 000002628 _____ C:\Users\Mathieu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVG Secure Browser.lnk
2024-01-25 10:00 - 2022-01-03 15:54 - 000000000 ____D C:\Users\Mathieu\AppData\Local\BattlEye
2024-01-21 10:57 - 2021-12-25 10:55 - 000000000 ____D C:\Users\Mathieu\AppData\Local\D3DSCache
2024-01-19 08:52 - 2023-09-15 19:20 - 000263672 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 002754152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2024-01-19 08:52 - 2022-12-03 10:13 - 000095736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2024-01-19 08:52 - 2022-12-03 10:13 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2024-01-19 08:51 - 2022-12-03 10:13 - 000644600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2024-01-19 08:51 - 2022-12-03 10:13 - 000214632 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2024-01-19 08:51 - 2022-12-03 10:13 - 000194040 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
==================== Fichiers à la racine de certains dossiers ========
2018-03-07 12:03 - 2018-03-07 12:03 - 000001142 _____ () C:\Users\Mathieu\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-06-01 10:01 - 2019-07-19 08:29 - 000022837 _____ () C:\Users\Mathieu\AppData\Roaming\downloads.json
2022-07-01 15:45 - 2022-07-01 15:45 - 000000015 _____ () C:\Users\Mathieu\AppData\Roaming\obs-virtualcam.txt
2017-07-14 20:23 - 2020-10-10 17:11 - 000005390 _____ () C:\Users\Mathieu\AppData\Roaming\wklnhst.dat
2020-09-09 13:46 - 2020-09-09 13:46 - 000003584 _____ () C:\Users\Mathieu\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-11-11 17:19 - 2023-01-12 19:04 - 000011252 _____ () C:\Users\Mathieu\AppData\Local\PlariumPlay.log
2017-12-17 21:59 - 2017-12-17 21:59 - 000007607 _____ () C:\Users\Mathieu\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================