Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30.05.2024
Exécuté par choub (administrateur) sur PC_ALEX (HP HP Laptop 17-cp0xxx) (01-06-2024 08:48:04)
Exécuté depuis C:\Users\choub\Desktop\FRST64.exe
Profils chargés: choub
Plate-forme: Microsoft Windows 11 Famille Version 23H2 22631.3672 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <27>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\BridgeCommunication.exe <2>
(DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkWiFiManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_917a88f607017da2\RtkAudUService64.exe <3>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (Greatis Software LLC -> Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.13200.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_917a88f607017da2\RtkAudUService64.exe [1651040 2023-04-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [mo_global] => C:\Program Files (x86)\FunPlus\Sea of Conquest\Launcher.exe [482576 2024-05-20] (FunPlus International AG -> FunPlus, Inc.)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [539152 2024-05-09] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [MicrosoftEdgeAutoLaunch_08FA50F5854DE55588086845F24E5110] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4136896 2024-05-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4382056 2024-05-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2202904 2024-05-23] (Wargaming Group Limited -> Wargaming.net)
BootExecute: autocheck autochk * Partizan
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {F21F51CC-7BB9-4FE8-A4B5-D69EC69DF07E} - \HP\Consent Manager Launcher -> Pas de fichier <==== ATTENTION
Task: {CC6AB0E1-7D67-46AE-9B96-41EEA1BD1325} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-05-13] (HP Inc. -> HP Inc.)
Task: {344C6F1A-8E21-42E1-833D-844353A81D3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-05-13] (HP Inc. -> HP Inc.)
Task: {41A811E1-04D7-439E-A91A-3D36CEB9CF3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-05-13] (HP Inc. -> HP Inc.)
Task: {6C242064-7952-4DC1-B710-DE2CB4A133A5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {C8D1BFEB-E3BF-43FB-8764-F3DF978CF589} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8FF3D6B5-70D2-44C0-90EC-F97C73B48079} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {60B90C5B-FA6F-427A-86FA-D991832AAB1A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {76E129F6-47B1-490D-9E43-ABE101F810EC} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168928 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {68B1B1A1-0044-49C1-A7DB-D9E46A06714D} - System32\Tasks\Microsoft\Windows\Application Experience\PcaWallpaperAppDetect => C:\windows\system32\rundll32.exe [73728 2024-05-06] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\PcaSvc.dll,PcaWallpaperAppDetect
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {6EB1D713-0DAD-427E-9E2E-DB1F2B5D3857} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0BA10924-E9AC-41B3-BDCC-CD81C7675505} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {65F8A1FB-A18C-4C60-BD2D-0D8D4A4A8109} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CB4265E9-33C0-4415-8EA7-DB6C4FADB71D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {754DC641-D3C2-457C-A953-377DE4077FFD} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [5384600 2024-05-21] (Greatis Software LLC -> Greatis Software)
Task: {B8FAB558-5233-4842-976B-838490F542B2} - System32\Tasks\WDNA => C:\Users\choub\AppData\Local\TegSda\rhc.exe [1536 2023-07-26] () [Fichier non signé] -> C:\Users\choub\AppData\Local\TegSda\php.exe index.php
Task: {EC9A3C41-F8BF-48BD-BB06-2EEA554E9F88} - System32\Tasks\WDNA_LG => Command(1): rhc.exe -> C:\Users\choub\AppData\Local\TegSda\php.exe include.php <==== ATTENTION
Task: {EC9A3C41-F8BF-48BD-BB06-2EEA554E9F88} - System32\Tasks\WDNA_LG => Command(2): rhc.exe -> C:\Users\choub\AppData\Local\TegSda\php.exe index.php <==== ATTENTION
Task: {C33C7BC2-5430-451E-98DE-0B48C171D95B} - System32\Tasks\YT ZSync Logon => C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\rhc.exe [1536 2024-05-20] () [Fichier non signé] -> C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
AutoConfigURL: [{9EF57B2A-66EC-404D-8D0D-855B17D77DE8}] => http;//autoproxy.idcn.mil.intra/proxy.pac <==== ATTENTION
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8e529acb-b1e9-4a67-8515-416e4dabcfd1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fdf33e24-077e-495f-b613-ba13e8d963f7}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-01]
Edge Extension: (Google Docs hors connexion) - C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-26]
Edge Extension: (Edge relevant text changes) - C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-26]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-05-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-05-04] (Microsoft Corporation -> Microsoft Corporation)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14248016 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
S3 GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [220464 2023-04-11] (Gamigo Inc. -> )
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [475680 2023-04-14] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe [569008 2024-05-07] (HP Inc. -> HP Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [879456 2024-05-20] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe [1489000 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 RtkWiFiManServ; C:\windows\RtkWiFiManServ.exe [821624 2023-07-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe [3236840 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe [133704 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [35344 2023-06-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\amdkmdag.sys [94633320 2023-06-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 amdwirelessbutton; C:\windows\System32\drivers\amdwirelessbutton.sys [42768 2023-06-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
S3 BthA2dp; C:\windows\System32\drivers\BthA2dp.sys [544768 2023-12-04] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\windows\System32\drivers\bthhfenum.sys [188416 2023-12-04] (Microsoft Corporation) [Fichier non signé]
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
R3 rtucx22x64; C:\windows\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_a6eb3abe5befec7d\rtucx22x64.sys [1876424 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 rtux64w10; C:\windows\System32\DriverStore\FileRepository\rtux64w10.inf_amd64_03831aeaaa2c730e\rtux64w10.sys [683520 2022-05-07] (Microsoft Windows -> Realtek Corporation)
R0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [21056 2024-05-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [601496 2024-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105880 2024-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\windows\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
U0 Partizan; system32\drivers\Partizan.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-01 08:48 - 2024-06-01 08:48 - 000019774 _____ C:\Users\choub\Desktop\FRST.txt
2024-06-01 08:47 - 2024-06-01 08:48 - 000000000 ____D C:\FRST
2024-06-01 08:47 - 2024-06-01 08:45 - 002395136 _____ (Farbar) C:\Users\choub\Desktop\FRST64.exe
2024-06-01 08:45 - 2024-06-01 08:45 - 002395136 _____ (Farbar) C:\Users\choub\Downloads\FRST64.exe
2024-06-01 08:43 - 2024-06-01 08:43 - 000844018 _____ C:\windows\system32\perfh00C.dat
2024-06-01 08:43 - 2024-06-01 08:43 - 000172498 _____ C:\windows\system32\perfc00C.dat
2024-05-31 23:54 - 2024-06-01 08:41 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Digit Game Studios Ltd_
2024-05-31 23:54 - 2024-05-31 23:54 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Unity
2024-05-31 23:47 - 2024-06-01 08:39 - 000000000 ____D C:\Users\choub\AppData\Local\Crash
2024-05-31 23:46 - 2024-05-31 23:46 - 000000000 ____D C:\Users\choub\AppData\Local\cache
2024-05-31 23:44 - 2024-05-31 23:44 - 001185992 _____ C:\Users\choub\Downloads\STFC_installer.exe
2024-05-31 17:19 - 2024-05-31 17:19 - 000024821 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-05-31 17:18 - 2024-05-31 17:18 - 000024821 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-05-31 17:07 - 2024-05-31 17:14 - 000000000 ___HD C:\$WinREAgent
2024-05-27 17:52 - 2024-05-27 18:12 - 000001087 _____ C:\Users\choub\Desktop\UnHackMe.lnk
2024-05-27 17:52 - 2024-05-27 17:52 - 000003404 _____ C:\windows\system32\Tasks\UnHackMe Task Scheduler
2024-05-27 17:52 - 2024-05-27 17:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2024-05-27 17:52 - 2022-12-27 12:20 - 000017936 _____ (Greatis Software, LLC.) C:\windows\SysWOW64\Drivers\UnHackMeDrv.sys
2024-05-27 17:51 - 2024-06-01 08:39 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2024-05-27 17:48 - 2024-05-27 17:49 - 045878393 _____ C:\Users\choub\Downloads\unhackme.zip
2024-05-27 17:27 - 2024-05-27 17:27 - 000000000 ____D C:\@RestoreQuarantine
2024-05-27 17:25 - 2024-05-27 17:27 - 000000207 _____ C:\windows\SysWOW64\Partizan.RRI
2024-05-27 17:22 - 2024-06-01 08:40 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo
2024-05-27 17:21 - 2024-06-01 08:37 - 000000000 ____D C:\Users\choub\AppData\Local\UnHackMe
2024-05-27 17:21 - 2024-05-27 17:21 - 000001237 _____ C:\Users\choub\Desktop\Reanimator.lnk
2024-05-27 17:21 - 2024-05-27 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reanimator
2024-05-27 17:21 - 2024-05-27 17:21 - 000000000 ____D C:\Program Files (x86)\Greatis
2024-05-27 17:21 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\windows\system32\partizan.exe
2024-05-27 17:20 - 2024-05-27 17:20 - 036981368 _____ C:\Users\choub\Downloads\reanimator.zip
2024-05-23 16:59 - 2024-05-23 16:59 - 000000000 ____D C:\Program Files\Common Files\DynamicAppDownloader
2024-05-22 16:48 - 2024-05-22 16:48 - 000001086 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2024-05-22 16:48 - 2024-05-22 16:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2024-05-22 16:48 - 2024-05-22 16:48 - 000000000 ____D C:\Program Files\VS Revo Group
2024-05-22 16:47 - 2024-05-22 16:47 - 006970144 _____ (VS Revo Group ) C:\Users\choub\Downloads\Revo-Uninstaller-Windows-2-4-5-fr.exe
2024-05-22 16:43 - 2024-05-22 16:43 - 000178800 _____ (Sony DADC Austria AG.) C:\windows\SysWOW64\CmdLineExt_x64.dll
2024-05-22 16:38 - 2024-05-22 16:38 - 001886042 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\windows\SysWOW64\XPSViewer
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files\MSBuild
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-22 16:23 - 2024-05-22 16:23 - 000000000 ____D C:\windows\SysWOW64\xlive
2024-05-20 13:41 - 2024-05-20 13:41 - 000003606 _____ C:\windows\system32\Tasks\YT ZSync Logon
2024-05-20 13:40 - 2024-05-20 13:41 - 000000000 ____D C:\Users\choub\AppData\Local\yzsx_zsync_1716205210
2024-05-20 12:39 - 2024-05-31 17:13 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Kingsgroup
2024-05-20 12:39 - 2024-05-20 12:39 - 000001168 _____ C:\Users\choub\Desktop\Sea of Conquest.lnk
2024-05-20 12:39 - 2024-05-20 12:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FunPlus
2024-05-20 12:39 - 2024-05-20 12:39 - 000000000 ____D C:\Program Files (x86)\FunPlus
2024-05-20 12:37 - 2024-05-20 12:37 - 002303760 _____ C:\Users\choub\Downloads\Sea.of.Conquest.PC.V1.0_454e184bbd.exe
2024-05-20 12:09 - 2024-06-01 08:36 - 000003772 _____ C:\windows\system32\Tasks\WDNA
2024-05-20 12:08 - 2024-05-20 13:41 - 000000000 ____D C:\Users\choub\AppData\Local\TegSda
2024-05-20 12:08 - 2024-05-20 12:08 - 000003730 _____ C:\windows\system32\Tasks\WDNA_LG
2024-05-13 16:30 - 2024-05-13 16:43 - 000000000 ____D C:\Temp
2024-05-12 17:36 - 2024-05-12 17:36 - 000000223 _____ C:\Users\choub\Desktop\Aliens Dark Descent.url
2024-05-09 10:03 - 2024-05-09 10:03 - 000000000 ___HD C:\OneDriveTemp
2024-05-09 09:21 - 2024-05-31 23:47 - 000000000 ____D C:\Games
2024-05-09 09:21 - 2024-05-09 12:36 - 000000000 ____D C:\Users\choub\AppData\Roaming\Wargaming.net
2024-05-09 09:21 - 2024-05-09 09:21 - 000001899 _____ C:\Users\choub\Desktop\Game Center.lnk
2024-05-09 09:21 - 2024-05-09 09:21 - 000001664 _____ C:\Users\choub\Desktop\World of Tanks EU.lnk
2024-05-09 09:21 - 2024-05-09 09:21 - 000000000 ____D C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2024-05-09 09:19 - 2024-05-09 09:19 - 006559064 _____ (Wargaming.net ) C:\Users\choub\Downloads\world_of_tanks_install_eu_d14x9d3akaf7.exe
2024-05-09 09:19 - 2024-05-09 09:19 - 000000000 ____D C:\ProgramData\Wargaming.net
2024-05-06 18:20 - 2024-05-06 18:20 - 000000000 ____D C:\Users\choub\Documents\My Games
2024-05-06 17:49 - 2024-05-06 17:49 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Mandragora
2024-05-06 17:45 - 2024-05-06 17:45 - 000000000 ____D C:\Users\choub\AppData\Local\Backup
2024-05-04 11:20 - 2024-05-04 11:20 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-05-04 10:56 - 2024-06-01 08:35 - 000001607 _____ C:\windows\system32\config\VSMIDK
2024-05-04 10:52 - 2024-05-04 10:52 - 000000000 ____D C:\Users\choub\AppData\Local\OneDrive
2024-05-04 10:44 - 2024-05-04 10:45 - 000000000 ____D C:\windows\SysWOW64\DDFs
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-01 08:46 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-06-01 08:43 - 2022-11-03 06:39 - 001949526 _____ C:\windows\system32\PerfStringBackup.INI
2024-06-01 08:43 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-06-01 08:39 - 2024-04-26 12:00 - 000000000 ____D C:\Users\choub\AppData\Local\D3DSCache
2024-06-01 08:37 - 2022-11-03 06:32 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-06-01 08:37 - 2022-11-03 06:32 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-06-01 08:37 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-06-01 08:37 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-06-01 08:36 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-06-01 08:35 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-06-01 08:35 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-06-01 08:35 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-06-01 00:50 - 2022-05-07 07:17 - 001048576 _____ C:\windows\system32\config\BBI
2024-06-01 00:48 - 2022-11-03 06:32 - 000592376 _____ C:\windows\system32\FNTCACHE.DAT
2024-06-01 00:47 - 2024-04-26 11:55 - 000000000 ____D C:\windows\InboxApps
2024-06-01 00:47 - 2023-12-04 01:43 - 000000000 ____D C:\windows\TextInput
2024-06-01 00:47 - 2023-12-04 01:43 - 000000000 ____D C:\windows\HoloShell
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\UNP
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\PrintDialog
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\UUS
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\setup
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Dism
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\setup
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\migwiz
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Dism
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\appraiser
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellExperiences
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\BrowserCore
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-06-01 00:47 - 2022-05-07 07:17 - 000000000 ____D C:\windows\servicing
2024-05-31 17:24 - 2022-05-07 08:10 - 000036864 _____ (Microsoft Corporation) C:\windows\system32\OEMDefaultAssociations.dll
2024-05-31 17:24 - 2022-05-07 08:10 - 000024383 _____ C:\windows\system32\OEMDefaultAssociations.xml
2024-05-31 17:24 - 2022-05-07 07:25 - 000077312 _____ (Khronos Group) C:\windows\SysWOW64\opencl.dll
2024-05-31 17:24 - 2022-05-07 07:24 - 000118784 _____ (Khronos Group) C:\windows\system32\opencl.dll
2024-05-31 17:24 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-05-31 17:19 - 2022-11-03 06:34 - 003216384 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-05-29 16:40 - 2024-04-26 12:19 - 000000000 ____D C:\Users\choub\AppData\Local\HP
2024-05-28 15:52 - 2022-11-03 06:32 - 000003690 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-05-28 15:52 - 2022-11-03 06:32 - 000003566 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-05-27 17:35 - 2024-04-26 12:02 - 000000000 ___RD C:\Users\choub\OneDrive
2024-05-27 17:27 - 2023-12-03 16:12 - 000000000 ____D C:\windows\system32\Tasks\HP
2024-05-27 17:14 - 2024-04-26 12:40 - 000000000 ____D C:\Program Files (x86)\Steam
2024-05-27 16:46 - 2023-12-03 16:19 - 000000000 ____D C:\Program Files\McAfee
2024-05-27 16:45 - 2023-12-03 16:18 - 000000000 ____D C:\ProgramData\McAfee
2024-05-27 16:45 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-05-26 17:40 - 2024-04-26 12:02 - 000003592 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2400194991-3559985651-2638221648-1001
2024-05-26 17:40 - 2024-04-26 12:02 - 000003364 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2400194991-3559985651-2638221648-1001
2024-05-26 17:40 - 2024-04-26 12:02 - 000002428 _____ C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-26 17:40 - 2024-04-26 12:02 - 000000000 ____D C:\Users\choub\AppData\Local\CrashDumps
2024-05-23 17:09 - 2023-07-21 09:36 - 000000000 ____D C:\Program Files\Microsoft Office
2024-05-22 16:51 - 2023-07-21 09:35 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-05-22 16:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\MUI
2024-05-22 16:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\MUI
2024-05-21 21:39 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-05-21 21:22 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-05-21 21:22 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\winrm
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\WCN
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\slmgr
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\Printing_Admin_Scripts
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\winrm
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\WCN
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\slmgr
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\Printing_Admin_Scripts
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\F12
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\DiagSvcs
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\F12
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\dsc
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\DiagSvcs
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\oobe
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Com
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sysprep
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Com
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\PolicyDefinitions
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\IME
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-05-21 17:48 - 2024-04-26 16:19 - 000000000 ____D C:\windows\system32\MRT
2024-05-21 17:46 - 2024-04-26 16:19 - 196465576 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-05-21 17:31 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ServiceState
2024-05-21 00:38 - 2024-04-26 12:18 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-05-21 00:37 - 2023-12-04 01:56 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-05-20 13:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\OCR
2024-05-20 13:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Globalization
2024-05-20 12:10 - 2024-04-26 11:33 - 000000000 ____D C:\Users\choub\AppData\Local\Packages
2024-05-20 10:46 - 2023-07-21 09:33 - 000000000 ____D C:\ProgramData\HP
2024-05-20 10:34 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\Drivers\wd
2024-05-12 17:36 - 2024-04-26 12:46 - 000000000 ____D C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-05-12 14:19 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-05-09 12:21 - 2024-04-26 12:13 - 000000000 ____D C:\Users\choub\AppData\Local\Publishers
2024-05-09 09:08 - 2024-04-26 12:42 - 000000000 ____D C:\Users\choub\AppData\Local\Steam
2024-05-08 08:40 - 2024-04-26 11:33 - 000000000 ____D C:\Users\choub
2024-05-08 08:34 - 2023-12-03 16:08 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\PerceptionSimulation
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemApps
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-05-06 18:34 - 2022-05-07 07:20 - 000520192 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000400896 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnet.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000228352 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplayx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000090112 _____ (Microsoft Corporation) C:\windows\system32\dpnathlp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnathlp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000049152 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpwsockx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000049152 _____ (Microsoft Corporation) C:\windows\system32\dpnsvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnlobby.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnhupnp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnhpast.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpmodemx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnsvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplaysvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhupnp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhpast.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnlobby.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnaddr.dll
2024-05-06 17:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\appcompat
2024-05-04 11:23 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-05-04 11:01 - 2024-04-26 12:01 - 000000000 ____D C:\Users\choub\AppData\Local\PlaceholderTileLogoFolder
2024-05-04 10:46 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par choub (administrateur) sur PC_ALEX (HP HP Laptop 17-cp0xxx) (01-06-2024 08:48:04)
Exécuté depuis C:\Users\choub\Desktop\FRST64.exe
Profils chargés: choub
Plate-forme: Microsoft Windows 11 Famille Version 23H2 22631.3672 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <27>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\BridgeCommunication.exe <2>
(DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.5.10.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkWiFiManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_917a88f607017da2\RtkAudUService64.exe <3>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_32.52414.341.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (Greatis Software LLC -> Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.13200.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_917a88f607017da2\RtkAudUService64.exe [1651040 2023-04-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [mo_global] => C:\Program Files (x86)\FunPlus\Sea of Conquest\Launcher.exe [482576 2024-05-20] (FunPlus International AG -> FunPlus, Inc.)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [539152 2024-05-09] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [MicrosoftEdgeAutoLaunch_08FA50F5854DE55588086845F24E5110] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4136896 2024-05-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4382056 2024-05-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2400194991-3559985651-2638221648-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2202904 2024-05-23] (Wargaming Group Limited -> Wargaming.net)
BootExecute: autocheck autochk * Partizan
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {F21F51CC-7BB9-4FE8-A4B5-D69EC69DF07E} - \HP\Consent Manager Launcher -> Pas de fichier <==== ATTENTION
Task: {CC6AB0E1-7D67-46AE-9B96-41EEA1BD1325} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-05-13] (HP Inc. -> HP Inc.)
Task: {344C6F1A-8E21-42E1-833D-844353A81D3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-05-13] (HP Inc. -> HP Inc.)
Task: {41A811E1-04D7-439E-A91A-3D36CEB9CF3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161744 2024-05-13] (HP Inc. -> HP Inc.)
Task: {6C242064-7952-4DC1-B710-DE2CB4A133A5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {C8D1BFEB-E3BF-43FB-8764-F3DF978CF589} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8FF3D6B5-70D2-44C0-90EC-F97C73B48079} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {60B90C5B-FA6F-427A-86FA-D991832AAB1A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {76E129F6-47B1-490D-9E43-ABE101F810EC} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168928 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {68B1B1A1-0044-49C1-A7DB-D9E46A06714D} - System32\Tasks\Microsoft\Windows\Application Experience\PcaWallpaperAppDetect => C:\windows\system32\rundll32.exe [73728 2024-05-06] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\PcaSvc.dll,PcaWallpaperAppDetect
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {6EB1D713-0DAD-427E-9E2E-DB1F2B5D3857} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0BA10924-E9AC-41B3-BDCC-CD81C7675505} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {65F8A1FB-A18C-4C60-BD2D-0D8D4A4A8109} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CB4265E9-33C0-4415-8EA7-DB6C4FADB71D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {754DC641-D3C2-457C-A953-377DE4077FFD} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [5384600 2024-05-21] (Greatis Software LLC -> Greatis Software)
Task: {B8FAB558-5233-4842-976B-838490F542B2} - System32\Tasks\WDNA => C:\Users\choub\AppData\Local\TegSda\rhc.exe [1536 2023-07-26] () [Fichier non signé] -> C:\Users\choub\AppData\Local\TegSda\php.exe index.php
Task: {EC9A3C41-F8BF-48BD-BB06-2EEA554E9F88} - System32\Tasks\WDNA_LG => Command(1): rhc.exe -> C:\Users\choub\AppData\Local\TegSda\php.exe include.php <==== ATTENTION
Task: {EC9A3C41-F8BF-48BD-BB06-2EEA554E9F88} - System32\Tasks\WDNA_LG => Command(2): rhc.exe -> C:\Users\choub\AppData\Local\TegSda\php.exe index.php <==== ATTENTION
Task: {C33C7BC2-5430-451E-98DE-0B48C171D95B} - System32\Tasks\YT ZSync Logon => C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\rhc.exe [1536 2024-05-20] () [Fichier non signé] -> C:\Users\choub\AppData\Local\yzsx_zsync_1716205210\zbrain_desktop.exe
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
AutoConfigURL: [{9EF57B2A-66EC-404D-8D0D-855B17D77DE8}] => http;//autoproxy.idcn.mil.intra/proxy.pac <==== ATTENTION
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8e529acb-b1e9-4a67-8515-416e4dabcfd1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fdf33e24-077e-495f-b613-ba13e8d963f7}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-01]
Edge Extension: (Google Docs hors connexion) - C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-26]
Edge Extension: (Edge relevant text changes) - C:\Users\choub\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-26]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-05-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-05-04] (Microsoft Corporation -> Microsoft Corporation)
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14248016 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
S3 GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [220464 2023-04-11] (Gamigo Inc. -> )
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [475680 2023-04-14] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\AppHelperCap.exe [895536 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\DiagsCap.exe [894400 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\NetworkCap.exe [890928 2024-03-04] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_6666c94b7ce92349\x64\SysInfoCap.exe [894912 2024-03-04] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_7dcf4ebd9d1b4772\x64\TouchpointAnalyticsClientService.exe [569008 2024-05-07] (HP Inc. -> HP Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [879456 2024-05-20] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe [1489000 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 RtkWiFiManServ; C:\windows\RtkWiFiManServ.exe [821624 2023-07-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe [3236840 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe [133704 2024-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\windows\System32\drivers\amdfendrmgr.sys [35344 2023-06-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\windows\System32\DriverStore\FileRepository\u0389648.inf_amd64_00a4b5829b82c480\B385477\amdkmdag.sys [94633320 2023-06-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 amdwirelessbutton; C:\windows\System32\drivers\amdwirelessbutton.sys [42768 2023-06-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
S3 BthA2dp; C:\windows\System32\drivers\BthA2dp.sys [544768 2023-12-04] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\windows\System32\drivers\bthhfenum.sys [188416 2023-12-04] (Microsoft Corporation) [Fichier non signé]
R3 HPCustomCapDriver; C:\windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [26648 2022-06-24] (HP Inc. -> HP Inc.)
R3 rtucx22x64; C:\windows\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_a6eb3abe5befec7d\rtucx22x64.sys [1876424 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 rtux64w10; C:\windows\System32\DriverStore\FileRepository\rtux64w10.inf_amd64_03831aeaaa2c730e\rtux64w10.sys [683520 2022-05-07] (Microsoft Windows -> Realtek Corporation)
R0 WdBoot; C:\windows\System32\drivers\wd\WdBoot.sys [21056 2024-05-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\wd\WdFilter.sys [601496 2024-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [105880 2024-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\windows\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
U0 Partizan; system32\drivers\Partizan.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-01 08:48 - 2024-06-01 08:48 - 000019774 _____ C:\Users\choub\Desktop\FRST.txt
2024-06-01 08:47 - 2024-06-01 08:48 - 000000000 ____D C:\FRST
2024-06-01 08:47 - 2024-06-01 08:45 - 002395136 _____ (Farbar) C:\Users\choub\Desktop\FRST64.exe
2024-06-01 08:45 - 2024-06-01 08:45 - 002395136 _____ (Farbar) C:\Users\choub\Downloads\FRST64.exe
2024-06-01 08:43 - 2024-06-01 08:43 - 000844018 _____ C:\windows\system32\perfh00C.dat
2024-06-01 08:43 - 2024-06-01 08:43 - 000172498 _____ C:\windows\system32\perfc00C.dat
2024-05-31 23:54 - 2024-06-01 08:41 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Digit Game Studios Ltd_
2024-05-31 23:54 - 2024-05-31 23:54 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Unity
2024-05-31 23:47 - 2024-06-01 08:39 - 000000000 ____D C:\Users\choub\AppData\Local\Crash
2024-05-31 23:46 - 2024-05-31 23:46 - 000000000 ____D C:\Users\choub\AppData\Local\cache
2024-05-31 23:44 - 2024-05-31 23:44 - 001185992 _____ C:\Users\choub\Downloads\STFC_installer.exe
2024-05-31 17:19 - 2024-05-31 17:19 - 000024821 _____ C:\windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-05-31 17:18 - 2024-05-31 17:18 - 000024821 _____ C:\windows\system32\IntegratedServicesRegionPolicySet.json
2024-05-31 17:07 - 2024-05-31 17:14 - 000000000 ___HD C:\$WinREAgent
2024-05-27 17:52 - 2024-05-27 18:12 - 000001087 _____ C:\Users\choub\Desktop\UnHackMe.lnk
2024-05-27 17:52 - 2024-05-27 17:52 - 000003404 _____ C:\windows\system32\Tasks\UnHackMe Task Scheduler
2024-05-27 17:52 - 2024-05-27 17:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2024-05-27 17:52 - 2022-12-27 12:20 - 000017936 _____ (Greatis Software, LLC.) C:\windows\SysWOW64\Drivers\UnHackMeDrv.sys
2024-05-27 17:51 - 2024-06-01 08:39 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2024-05-27 17:48 - 2024-05-27 17:49 - 045878393 _____ C:\Users\choub\Downloads\unhackme.zip
2024-05-27 17:27 - 2024-05-27 17:27 - 000000000 ____D C:\@RestoreQuarantine
2024-05-27 17:25 - 2024-05-27 17:27 - 000000207 _____ C:\windows\SysWOW64\Partizan.RRI
2024-05-27 17:22 - 2024-06-01 08:40 - 000000000 ____D C:\Users\Public\Documents\RegRunInfo
2024-05-27 17:21 - 2024-06-01 08:37 - 000000000 ____D C:\Users\choub\AppData\Local\UnHackMe
2024-05-27 17:21 - 2024-05-27 17:21 - 000001237 _____ C:\Users\choub\Desktop\Reanimator.lnk
2024-05-27 17:21 - 2024-05-27 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reanimator
2024-05-27 17:21 - 2024-05-27 17:21 - 000000000 ____D C:\Program Files (x86)\Greatis
2024-05-27 17:21 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\windows\system32\partizan.exe
2024-05-27 17:20 - 2024-05-27 17:20 - 036981368 _____ C:\Users\choub\Downloads\reanimator.zip
2024-05-23 16:59 - 2024-05-23 16:59 - 000000000 ____D C:\Program Files\Common Files\DynamicAppDownloader
2024-05-22 16:48 - 2024-05-22 16:48 - 000001086 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2024-05-22 16:48 - 2024-05-22 16:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2024-05-22 16:48 - 2024-05-22 16:48 - 000000000 ____D C:\Program Files\VS Revo Group
2024-05-22 16:47 - 2024-05-22 16:47 - 006970144 _____ (VS Revo Group ) C:\Users\choub\Downloads\Revo-Uninstaller-Windows-2-4-5-fr.exe
2024-05-22 16:43 - 2024-05-22 16:43 - 000178800 _____ (Sony DADC Austria AG.) C:\windows\SysWOW64\CmdLineExt_x64.dll
2024-05-22 16:38 - 2024-05-22 16:38 - 001886042 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\windows\SysWOW64\XPSViewer
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files\MSBuild
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-22 16:38 - 2024-05-22 16:38 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-22 16:23 - 2024-05-22 16:23 - 000000000 ____D C:\windows\SysWOW64\xlive
2024-05-20 13:41 - 2024-05-20 13:41 - 000003606 _____ C:\windows\system32\Tasks\YT ZSync Logon
2024-05-20 13:40 - 2024-05-20 13:41 - 000000000 ____D C:\Users\choub\AppData\Local\yzsx_zsync_1716205210
2024-05-20 12:39 - 2024-05-31 17:13 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Kingsgroup
2024-05-20 12:39 - 2024-05-20 12:39 - 000001168 _____ C:\Users\choub\Desktop\Sea of Conquest.lnk
2024-05-20 12:39 - 2024-05-20 12:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FunPlus
2024-05-20 12:39 - 2024-05-20 12:39 - 000000000 ____D C:\Program Files (x86)\FunPlus
2024-05-20 12:37 - 2024-05-20 12:37 - 002303760 _____ C:\Users\choub\Downloads\Sea.of.Conquest.PC.V1.0_454e184bbd.exe
2024-05-20 12:09 - 2024-06-01 08:36 - 000003772 _____ C:\windows\system32\Tasks\WDNA
2024-05-20 12:08 - 2024-05-20 13:41 - 000000000 ____D C:\Users\choub\AppData\Local\TegSda
2024-05-20 12:08 - 2024-05-20 12:08 - 000003730 _____ C:\windows\system32\Tasks\WDNA_LG
2024-05-13 16:30 - 2024-05-13 16:43 - 000000000 ____D C:\Temp
2024-05-12 17:36 - 2024-05-12 17:36 - 000000223 _____ C:\Users\choub\Desktop\Aliens Dark Descent.url
2024-05-09 10:03 - 2024-05-09 10:03 - 000000000 ___HD C:\OneDriveTemp
2024-05-09 09:21 - 2024-05-31 23:47 - 000000000 ____D C:\Games
2024-05-09 09:21 - 2024-05-09 12:36 - 000000000 ____D C:\Users\choub\AppData\Roaming\Wargaming.net
2024-05-09 09:21 - 2024-05-09 09:21 - 000001899 _____ C:\Users\choub\Desktop\Game Center.lnk
2024-05-09 09:21 - 2024-05-09 09:21 - 000001664 _____ C:\Users\choub\Desktop\World of Tanks EU.lnk
2024-05-09 09:21 - 2024-05-09 09:21 - 000000000 ____D C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2024-05-09 09:19 - 2024-05-09 09:19 - 006559064 _____ (Wargaming.net ) C:\Users\choub\Downloads\world_of_tanks_install_eu_d14x9d3akaf7.exe
2024-05-09 09:19 - 2024-05-09 09:19 - 000000000 ____D C:\ProgramData\Wargaming.net
2024-05-06 18:20 - 2024-05-06 18:20 - 000000000 ____D C:\Users\choub\Documents\My Games
2024-05-06 17:49 - 2024-05-06 17:49 - 000000000 ____D C:\Users\choub\AppData\LocalLow\Mandragora
2024-05-06 17:45 - 2024-05-06 17:45 - 000000000 ____D C:\Users\choub\AppData\Local\Backup
2024-05-04 11:20 - 2024-05-04 11:20 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-05-04 10:56 - 2024-06-01 08:35 - 000001607 _____ C:\windows\system32\config\VSMIDK
2024-05-04 10:52 - 2024-05-04 10:52 - 000000000 ____D C:\Users\choub\AppData\Local\OneDrive
2024-05-04 10:44 - 2024-05-04 10:45 - 000000000 ____D C:\windows\SysWOW64\DDFs
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-01 08:46 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemTemp
2024-06-01 08:43 - 2022-11-03 06:39 - 001949526 _____ C:\windows\system32\PerfStringBackup.INI
2024-06-01 08:43 - 2022-05-07 07:22 - 000000000 ____D C:\windows\INF
2024-06-01 08:39 - 2024-04-26 12:00 - 000000000 ____D C:\Users\choub\AppData\Local\D3DSCache
2024-06-01 08:37 - 2022-11-03 06:32 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-06-01 08:37 - 2022-11-03 06:32 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-06-01 08:37 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-06-01 08:37 - 2022-05-07 07:24 - 000000000 ____D C:\windows\AppReadiness
2024-06-01 08:36 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-06-01 08:35 - 2022-11-03 06:32 - 000012288 ___SH C:\DumpStack.log.tmp
2024-06-01 08:35 - 2022-11-03 06:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-06-01 08:35 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\SleepStudy
2024-06-01 00:50 - 2022-05-07 07:17 - 001048576 _____ C:\windows\system32\config\BBI
2024-06-01 00:48 - 2022-11-03 06:32 - 000592376 _____ C:\windows\system32\FNTCACHE.DAT
2024-06-01 00:47 - 2024-04-26 11:55 - 000000000 ____D C:\windows\InboxApps
2024-06-01 00:47 - 2023-12-04 01:43 - 000000000 ____D C:\windows\TextInput
2024-06-01 00:47 - 2023-12-04 01:43 - 000000000 ____D C:\windows\HoloShell
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\UNP
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\PrintDialog
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ___RD C:\windows\ImmersiveControlPanel
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\UUS
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\WinMetadata
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\setup
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Dism
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemResources
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinMetadata
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\WinBioPlugIns
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\ShellExperiences
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sgrm
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\setup
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\PerceptionSimulation
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\oobe
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\migwiz
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Dism
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\appraiser
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellExperiences
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ShellComponents
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\BrowserCore
2024-06-01 00:47 - 2022-05-07 07:24 - 000000000 ____D C:\windows\bcastdvr
2024-06-01 00:47 - 2022-05-07 07:17 - 000000000 ____D C:\windows\servicing
2024-05-31 17:24 - 2022-05-07 08:10 - 000036864 _____ (Microsoft Corporation) C:\windows\system32\OEMDefaultAssociations.dll
2024-05-31 17:24 - 2022-05-07 08:10 - 000024383 _____ C:\windows\system32\OEMDefaultAssociations.xml
2024-05-31 17:24 - 2022-05-07 07:25 - 000077312 _____ (Khronos Group) C:\windows\SysWOW64\opencl.dll
2024-05-31 17:24 - 2022-05-07 07:24 - 000118784 _____ (Khronos Group) C:\windows\system32\opencl.dll
2024-05-31 17:24 - 2022-05-07 07:17 - 000000000 ____D C:\windows\CbsTemp
2024-05-31 17:19 - 2022-11-03 06:34 - 003216384 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintConfig.dll
2024-05-29 16:40 - 2024-04-26 12:19 - 000000000 ____D C:\Users\choub\AppData\Local\HP
2024-05-28 15:52 - 2022-11-03 06:32 - 000003690 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-05-28 15:52 - 2022-11-03 06:32 - 000003566 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-05-27 17:35 - 2024-04-26 12:02 - 000000000 ___RD C:\Users\choub\OneDrive
2024-05-27 17:27 - 2023-12-03 16:12 - 000000000 ____D C:\windows\system32\Tasks\HP
2024-05-27 17:14 - 2024-04-26 12:40 - 000000000 ____D C:\Program Files (x86)\Steam
2024-05-27 16:46 - 2023-12-03 16:19 - 000000000 ____D C:\Program Files\McAfee
2024-05-27 16:45 - 2023-12-03 16:18 - 000000000 ____D C:\ProgramData\McAfee
2024-05-27 16:45 - 2022-05-07 07:24 - 000000000 ___HD C:\windows\ELAMBKUP
2024-05-26 17:40 - 2024-04-26 12:02 - 000003592 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2400194991-3559985651-2638221648-1001
2024-05-26 17:40 - 2024-04-26 12:02 - 000003364 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2400194991-3559985651-2638221648-1001
2024-05-26 17:40 - 2024-04-26 12:02 - 000002428 _____ C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-26 17:40 - 2024-04-26 12:02 - 000000000 ____D C:\Users\choub\AppData\Local\CrashDumps
2024-05-23 17:09 - 2023-07-21 09:36 - 000000000 ____D C:\Program Files\Microsoft Office
2024-05-22 16:51 - 2023-07-21 09:35 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-05-22 16:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\MUI
2024-05-22 16:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\MUI
2024-05-21 21:39 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-05-21 21:22 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-05-21 21:22 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\winrm
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\WCN
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\slmgr
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\SysWOW64\Printing_Admin_Scripts
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\winrm
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\WCN
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\slmgr
2024-05-21 21:22 - 2022-05-07 08:01 - 000000000 ____D C:\windows\system32\Printing_Admin_Scripts
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\F12
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\SysWOW64\DiagSvcs
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\F12
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\dsc
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ___SD C:\windows\system32\DiagSvcs
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\oobe
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\Com
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SystemResetPlatform
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Sysprep
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\Com
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\PolicyDefinitions
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\windows\IME
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System
2024-05-21 21:22 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-05-21 17:48 - 2024-04-26 16:19 - 000000000 ____D C:\windows\system32\MRT
2024-05-21 17:46 - 2024-04-26 16:19 - 196465576 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2024-05-21 17:31 - 2022-05-07 07:24 - 000000000 ____D C:\windows\ServiceState
2024-05-21 00:38 - 2024-04-26 12:18 - 000000000 ____D C:\windows\system32\Tasks\Hewlett-Packard
2024-05-21 00:37 - 2023-12-04 01:56 - 000000000 ____D C:\windows\system32\Microsoft-Edge-WebView
2024-05-20 13:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\OCR
2024-05-20 13:04 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Globalization
2024-05-20 12:10 - 2024-04-26 11:33 - 000000000 ____D C:\Users\choub\AppData\Local\Packages
2024-05-20 10:46 - 2023-07-21 09:33 - 000000000 ____D C:\ProgramData\HP
2024-05-20 10:34 - 2022-11-03 06:32 - 000000000 ____D C:\windows\system32\Drivers\wd
2024-05-12 17:36 - 2024-04-26 12:46 - 000000000 ____D C:\Users\choub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-05-12 14:19 - 2022-11-03 06:35 - 000000000 ____D C:\ProgramData\Packages
2024-05-09 12:21 - 2024-04-26 12:13 - 000000000 ____D C:\Users\choub\AppData\Local\Publishers
2024-05-09 09:08 - 2024-04-26 12:42 - 000000000 ____D C:\Users\choub\AppData\Local\Steam
2024-05-08 08:40 - 2024-04-26 11:33 - 000000000 ____D C:\Users\choub
2024-05-08 08:34 - 2023-12-03 16:08 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SysWOW64\PerceptionSimulation
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\SystemApps
2024-05-06 19:08 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\HealthAttestationClient
2024-05-06 18:34 - 2022-05-07 07:20 - 000520192 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000400896 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnet.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000228352 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplayx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000090112 _____ (Microsoft Corporation) C:\windows\system32\dpnathlp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000063488 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnathlp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000049152 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpwsockx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000049152 _____ (Microsoft Corporation) C:\windows\system32\dpnsvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnlobby.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnhupnp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnhpast.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000032768 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpmodemx.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnsvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplaysvr.exe
2024-05-06 18:34 - 2022-05-07 07:20 - 000010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhupnp.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhpast.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnlobby.dll
2024-05-06 18:34 - 2022-05-07 07:20 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnaddr.dll
2024-05-06 17:38 - 2022-05-07 07:24 - 000000000 ____D C:\windows\appcompat
2024-05-04 11:23 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-05-04 11:01 - 2024-04-26 12:01 - 000000000 ____D C:\Users\choub\AppData\Local\PlaceholderTileLogoFolder
2024-05-04 10:46 - 2022-11-03 07:29 - 000000000 ____D C:\windows\Panther
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\SecureBootUpdates
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\system32\DDFs
2024-05-04 10:44 - 2022-05-07 07:24 - 000000000 ____D C:\windows\Provisioning
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================