Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01.07.2024
Exécuté par ASUS (administrateur) sur DESKTOP-23VTF3H (ASUSTeK COMPUTER INC. UX305UA) (06-07-2024 15:16:28)
Exécuté depuis C:\Users\ASUS\Desktop\FRST64.exe
Profils chargés: ASUS
Plate-forme: Microsoft Windows 10 Entreprise Version 22H2 19045.4529 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <11>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe
(OpenVPN Inc. -> OpenVPN) C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe <4>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1701448571088.exe
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe
(services.exe ->) (pdfforge GmbH -> © pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Popcorn Time) [Fichier non signé] C:\Program Files (x86)\Popcorn Time\Updater.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2405.8.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [keyboard] => "ctfmon"="CTFMON.EXE" (Pas de fichier)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27250144 2016-12-20] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [49958368 2022-02-01] (Google LLC -> )
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5674496 2021-12-09] (Tonec Inc.) [Fichier non signé]
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [org.openvpn.client] => C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe [157689448 2023-12-01] (OpenVPN Inc. -> OpenVPN)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [809984 2024-05-18] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKLM\...\Print\Monitors\HP 9311 Status Monitor: C:\WINDOWS\system32\hpinksts9311LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3050 J610 series): C:\WINDOWS\system32\HPDiscoPM9311.dll [741536 2021-12-06] (HP Inc. -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [120072 2016-06-28] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\126.0.6478.127\Installer\chrmstp.exe [2024-06-28] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\65.2.491.181\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02E53ACC-F614-4DD5-81B6-C36BDD062386} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {89ABFAE5-10B6-4D08-810C-6C99DF45B719} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
Task: {4DD707DC-F3A3-4274-9604-C15C4D4524B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1558984 2024-06-25] (Adobe Inc. -> Adobe Inc.)
Task: {FB3D84F2-4539-4739-AC7B-BFB7CE464FFC} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6537.0{6D5C7F2E-F993-4EC8-9ED8-74B9F6185E3D} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe [4623976 2024-06-13] (Google LLC -> Google LLC)
Task: {E7F162EB-A3FB-43C0-9722-F61E98AA7F21} - System32\Tasks\Keyboard => C:\Windows\System32\ctfmon.exe [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {24565F84-2422-4C78-A2EB-B5574AEF3050} - System32\Tasks\KMSpico Automatic Update Scheduler => C:\Program Files\KMSpico\KMSUPD.exe [89272 2021-02-11] (KMSpico ByELDI LTD -> @ByELDI)
Task: {12C32413-59BD-4298-823A-18F9BF2C1095} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {633310C2-D9B0-42A1-9CFF-E22E62E5C6CE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42ACB7C6-05E4-49BE-9DCC-D9B8FAFDBF2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D791648B-7BD7-4169-A0A1-7EFFEEB210BE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {404F5772-3EE4-4214-9E15-6194E6099326} - System32\Tasks\Optimize Thumbnail Cache => C:\Program Files (x86)\Common Files\installshield\engine\8\intel 32\isupdate.exe [61104 2020-09-26] (Flexera Software LLC -> InstallShield®) [Fichier non signé]
Task: {720603FD-5682-40E5-95C4-31470FEABC6E} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2092358576-1393696132-1650822473-1001 => C:\Users\ASUS\AppData\Roaming\Zoom\bin\Zoom.exe [406344 2024-07-02] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
AutoConfigURL: [HKLM] => hxxp://127.0.0.1:86/ <==== ATTENTION
AutoConfigURL: [HKLM-x32] => hxxp://127.0.0.1:86/ <==== ATTENTION
Tcpip\..\Interfaces\{50f89378-7f44-4d69-9fa5-15887b3581e9}: [NameServer] 172.16.0.18
Tcpip\..\Interfaces\{7ec17406-1795-4ee1-9830-606f34c56a58}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}: [DhcpNameServer] 192.168.121.249
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\027416C616879702142323: [DhcpNameServer] 192.168.167.69
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\45F405E454451353640313547344: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\7416C616879702143313022716E69616: [DhcpNameServer] 192.168.76.137
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\75946494D2C41424F413: [DhcpNameServer] 10.0.60.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\75946494D2C41424F413: [DhcpDomain] crmn.rnrt
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\D4970226162697: [DhcpNameServer] 192.168.1.1 192.168.1.1
ManualProxies: 0hxxp://127.0.0.1:86/ <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-04]
Edge Extension: (Google Docs hors connexion) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-29]
Edge Extension: (Edge relevant text changes) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26]
Edge Extension: (IBM Security Rapport) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kajikgogckeajjplomldcempamhidmcc [2023-11-21]
Edge Extension: (IDM Integration Module) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2024-04-25]
Edge HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2021-12-09]
Edge HKLM-x32\...\Edge\Extension: [kajikgogckeajjplomldcempamhidmcc]
FireFox:
========
FF DefaultProfile: 7sr3zg9w.default
FF ProfilePath: C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default [2024-01-18]
FF Extension: (IBM Security Rapport) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\rapportext@trusteer.com.xpi [2021-03-08] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\sp@avast.com.xpi [2019-02-19]
FF Extension: (Avast Online Security) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\wrc@avast.com.xpi [2018-06-23]
FF Extension: (Telemetry coverage) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\features\{88f82596-a322-4c56-b98f-ca095d2f323b}\telemetry-coverage-bug1487578@mozilla.org.xpi [2019-01-07] []
FF ProfilePath: C:\Users\ASUS\AppData\Roaming\AMozilla\AFirefox\Profiles\2ux5hbke.default [2021-12-17] <==== ATTENTION
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-06-28] [] [non signé]
FF HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ASUS\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\ASUS\AppData\Roaming\IDM\idmmzcc5 [2021-12-23] [] [non signé]
FF HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-11-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-11-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default [2024-07-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-05]
CHR Extension: (Dolce&Gabbana Light Blue) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdgndohmehggibeplnmggdefcjphmbfa [2016-09-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-02]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2024-06-28]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-28]
CHR Extension: (Search Manager) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [2019-11-26]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-12]
CHR Extension: (Google Docs) - C:\ProgramData\GoogleDriveAdvodrs [2022-04-22]
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-01-07]
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\System Profile [2019-01-07]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-12-09]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-12-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-06-25] (Adobe Inc. -> Adobe Inc.)
R2 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1701448571088.exe [4698216 2023-12-01] (OpenVPN Inc. -> )
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ovpnhelper_service; C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe [4534888 2023-12-01] (OpenVPN Inc. -> )
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438368 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (pdfforge GmbH -> © pdfforge GmbH.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-05-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [84480 2015-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Alcor Micro, Corp.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusSGDrv; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [141304 2015-12-19] (ASUSTeK Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-03] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 MpKsl556b6564; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9BFC2F8F-FC24-401C-BC83-8CFAE7CC00E4}\MpKslDrv.sys [271648 2024-07-06] (Microsoft Windows -> Microsoft Corporation)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [90568 2023-03-31] (WDKTestCert lev,132435948852968539 -> OpenVPN, Inc)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap_ovpnconnect; C:\WINDOWS\System32\drivers\tap_ovpnconnect.sys [40448 2023-12-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-07-06 15:16 - 2024-07-06 15:17 - 000027065 ____C C:\Users\ASUS\Desktop\FRST.txt
2024-07-06 15:15 - 2024-07-06 15:17 - 000000000 ____D C:\FRST
2024-07-06 15:13 - 2024-07-06 15:13 - 002395648 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64 (1).exe
2024-07-06 15:12 - 2024-07-06 15:12 - 002395648 _____ (Farbar) C:\Users\ASUS\Desktop\FRST64.exe
2024-07-02 09:04 - 2024-07-02 09:04 - 000000000 ___DC C:\Users\ASUS\Documents\Zoom
2024-07-02 09:02 - 2024-07-02 09:02 - 000004266 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2092358576-1393696132-1650822473-1001
2024-07-02 09:02 - 2024-07-02 09:02 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2024-07-02 09:02 - 2024-07-02 09:02 - 000000000 ____D C:\Users\ASUS\AppData\Local\Zoom
2024-06-19 14:12 - 2024-06-19 14:19 - 579037917 _____ C:\Users\ASUS\Downloads\Photos-001 (6).zip
2024-06-19 14:07 - 2024-06-19 14:11 - 566693288 _____ C:\Users\ASUS\Downloads\Photos-001 (5).zip
2024-06-19 14:03 - 2024-06-19 14:06 - 507795104 _____ C:\Users\ASUS\Downloads\Photos-001 (4).zip
2024-06-19 13:56 - 2024-06-19 14:01 - 535444530 _____ C:\Users\ASUS\Downloads\Photos-001 (3).zip
2024-06-19 13:50 - 2024-06-19 13:54 - 502954057 _____ C:\Users\ASUS\Downloads\Photos-001 (2).zip
2024-06-19 13:46 - 2024-06-19 13:47 - 236303773 _____ C:\Users\ASUS\Downloads\Photos-001 (1).zip
2024-06-19 13:36 - 2024-06-19 13:37 - 135843206 _____ C:\Users\ASUS\Downloads\Photos-001.zip
2024-06-19 13:34 - 2024-06-19 13:35 - 005867417 _____ C:\Users\ASUS\Downloads\20210823_122551.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005866456 _____ C:\Users\ASUS\Downloads\20211112_133046.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005832728 _____ C:\Users\ASUS\Downloads\20210826_081230.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005801753 _____ C:\Users\ASUS\Downloads\20211119_110431.mp4
2024-06-19 13:33 - 2024-06-19 13:33 - 005739606 _____ C:\Users\ASUS\Downloads\20211206_131723.mp4
2024-06-19 13:33 - 2024-06-19 13:33 - 005653824 _____ C:\Users\ASUS\Downloads\20211010_180308.mp4
2024-06-19 13:32 - 2024-06-19 13:32 - 005611389 _____ C:\Users\ASUS\Downloads\20211206_131750.mp4
2024-06-19 13:32 - 2024-06-19 13:32 - 005591888 _____ C:\Users\ASUS\Downloads\20211025_072646.mp4
2024-06-19 13:30 - 2024-06-19 13:30 - 005335733 _____ C:\Users\ASUS\Downloads\20211013_173448.mp4
2024-06-19 13:30 - 2024-06-19 13:30 - 005335580 _____ C:\Users\ASUS\Downloads\20211028_130732.mp4
2024-06-19 10:21 - 2024-06-19 10:24 - 030625757 ____C C:\Users\ASUS\Desktop\these_A_VANOTTI_Meddy_2015.pdf
2024-06-19 10:14 - 2024-06-19 10:14 - 000000000 ___HD C:\$WinREAgent
2024-06-13 10:01 - 2024-06-13 10:04 - 000000000 ___DC C:\Users\ASUS\Desktop\famille
2024-06-13 09:59 - 2024-06-13 09:59 - 000000000 ___DC C:\Users\ASUS\Desktop\Recherche
2024-06-07 09:55 - 2024-06-07 09:55 - 000000165 ___HC C:\Users\ASUS\Desktop\~$Présentation1 Mois.pptx
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-07-06 15:12 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-06 15:09 - 2024-01-13 09:43 - 000000000 ____D C:\Users\ASUS\AppData\Roaming\OpenVPN Connect
2024-07-06 15:09 - 2019-01-23 11:53 - 000000446 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2024-07-06 14:46 - 2016-03-22 09:50 - 000000000 __SHD C:\Users\ASUS\IntelGraphicsProfiles
2024-07-05 15:20 - 2016-06-28 14:59 - 000000000 ___DC C:\Users\ASUS\Documents\Origin User Files
2024-07-05 14:23 - 2016-11-24 15:15 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Excel
2024-07-05 13:49 - 2024-05-07 14:39 - 000000000 ___DC C:\Users\ASUS\Desktop\CRMN
2024-07-05 13:00 - 2016-03-22 10:17 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Word
2024-07-05 11:51 - 2023-02-13 11:37 - 001681374 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-07-05 11:51 - 2019-12-07 15:50 - 000758068 _____ C:\WINDOWS\system32\perfh00C.dat
2024-07-05 11:51 - 2019-12-07 15:50 - 000142822 _____ C:\WINDOWS\system32\perfc00C.dat
2024-07-05 11:51 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-07-05 11:43 - 2023-02-13 11:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-07-05 11:43 - 2021-04-15 12:39 - 000008192 ___SH C:\DumpStack.log.tmp
2024-07-05 11:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-07-05 11:43 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-07-04 13:22 - 2023-02-13 11:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-07-04 10:26 - 2020-09-05 09:51 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-04 10:26 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-04 10:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-07-02 11:21 - 2023-02-13 11:37 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-07-02 11:21 - 2022-10-26 12:15 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-07-02 11:21 - 2022-10-26 12:15 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-07-02 09:02 - 2021-07-12 17:42 - 000000000 ____D C:\Users\ASUS\AppData\Roaming\Zoom
2024-06-30 14:54 - 2023-02-13 11:29 - 000000000 ____D C:\Users\ASUS
2024-06-28 09:49 - 2023-02-13 11:18 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-06-28 09:49 - 2016-06-28 10:07 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002010 _____ C:\Users\Default\Desktop\Google Slides.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002010 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000001998 _____ C:\Users\Default\Desktop\Google Docs.lnk
2024-06-26 17:01 - 2020-09-13 20:17 - 000002050 ____C C:\Users\ASUS\Desktop\Google Drive.lnk
2024-06-19 16:14 - 2023-02-13 11:26 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK
2024-06-19 14:23 - 2023-02-13 11:26 - 000460064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-06-19 14:22 - 2023-02-13 11:04 - 000000000 ____D C:\WINDOWS\en-GB
2024-06-19 14:22 - 2023-02-13 10:59 - 000000000 ____D C:\Program Files\Hyper-V
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-06-19 14:21 - 2016-03-22 10:44 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\DMCache
2024-06-19 13:15 - 2022-04-04 14:55 - 000000000 ___DC C:\Users\ASUS\Desktop\yassine trie
2024-06-19 13:12 - 2024-01-26 16:48 - 000000000 ___DC C:\Users\ASUS\Desktop\Nouveau dossier
2024-06-19 13:07 - 2022-03-07 14:32 - 000000000 ___DC C:\Users\ASUS\Desktop\Nouveau dossier trie
2024-06-19 12:51 - 2024-01-28 15:47 - 000000000 ___DC C:\Users\ASUS\Desktop\ryma
2024-06-19 11:54 - 2023-12-06 17:03 - 000000000 ___DC C:\Users\ASUS\Desktop\souad
2024-06-19 11:39 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-06-19 11:38 - 2021-12-07 18:04 - 000000000 ___DC C:\Users\ASUS\Desktop\album yassine
2024-06-19 11:26 - 2020-09-07 20:28 - 000000000 ___DC C:\Users\ASUS\Desktop\salma 2020
2024-06-19 11:04 - 2023-02-13 11:27 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-06-19 10:12 - 2017-12-01 16:56 - 000000000 ___DC C:\Users\ASUS\AppData\Local\Packages
2024-06-13 10:12 - 2016-06-30 02:45 - 199048176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-06-13 10:12 - 2016-06-30 02:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-06-10 10:04 - 2023-02-13 11:37 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-06-10 10:04 - 2023-02-13 11:37 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d731ecf12e77b4
==================== Fichiers à la racine de certains dossiers ========
2021-10-21 13:48 - 2021-10-21 13:48 - 000334288 _____ (Mozilla Foundation) C:\ProgramData\freebl3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000137168 _____ (Mozilla Foundation) C:\ProgramData\mozglue.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000440120 _____ (Microsoft Corporation) C:\ProgramData\msvcp140.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 001246160 _____ (Mozilla Foundation) C:\ProgramData\nss3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000144848 _____ (Mozilla Foundation) C:\ProgramData\softokn3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000083784 _____ (Microsoft Corporation) C:\ProgramData\vcruntime140.dll
2018-05-17 22:10 - 2021-04-15 11:01 - 000000184 ____C () C:\Users\ASUS\AppData\Roaming\sp_data.sys
2021-12-17 12:27 - 2018-08-07 01:30 - 000399224 _____ (BitTorrent, Inc.) C:\Users\ASUS\AppData\Roaming\utorrent_2.2.1.exe
2017-04-20 00:24 - 2017-04-20 00:24 - 000000043 ____C () C:\Users\ASUS\AppData\Roaming\WB.CFG
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par ASUS (administrateur) sur DESKTOP-23VTF3H (ASUSTeK COMPUTER INC. UX305UA) (06-07-2024 15:16:28)
Exécuté depuis C:\Users\ASUS\Desktop\FRST64.exe
Profils chargés: ASUS
Plate-forme: Microsoft Windows 10 Entreprise Version 22H2 19045.4529 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <11>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe
(OpenVPN Inc. -> OpenVPN) C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe <4>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\x40plmwa.inf_amd64_0fe274d0aafd5420\ICEsoundService64.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1701448571088.exe
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe
(services.exe ->) (pdfforge GmbH -> © pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(services.exe ->) (Popcorn Time) [Fichier non signé] C:\Program Files (x86)\Popcorn Time\Updater.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2405.8.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [keyboard] => "ctfmon"="CTFMON.EXE" (Pas de fichier)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27250144 2016-12-20] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [49958368 2022-02-01] (Google LLC -> )
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5674496 2021-12-09] (Tonec Inc.) [Fichier non signé]
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\Run: [org.openvpn.client] => C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe [157689448 2023-12-01] (OpenVPN Inc. -> OpenVPN)
HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [809984 2024-05-18] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\92.0.1.0\GoogleDriveFS.exe [61245728 2024-06-26] (Google LLC -> Google, Inc.)
HKLM\...\Print\Monitors\HP 9311 Status Monitor: C:\WINDOWS\system32\hpinksts9311LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3050 J610 series): C:\WINDOWS\system32\HPDiscoPM9311.dll [741536 2021-12-06] (HP Inc. -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [120072 2016-06-28] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\126.0.6478.127\Installer\chrmstp.exe [2024-06-28] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\65.2.491.181\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02E53ACC-F614-4DD5-81B6-C36BDD062386} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {89ABFAE5-10B6-4D08-810C-6C99DF45B719} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
Task: {4DD707DC-F3A3-4274-9604-C15C4D4524B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1558984 2024-06-25] (Adobe Inc. -> Adobe Inc.)
Task: {FB3D84F2-4539-4739-AC7B-BFB7CE464FFC} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6537.0{6D5C7F2E-F993-4EC8-9ED8-74B9F6185E3D} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe [4623976 2024-06-13] (Google LLC -> Google LLC)
Task: {E7F162EB-A3FB-43C0-9722-F61E98AA7F21} - System32\Tasks\Keyboard => C:\Windows\System32\ctfmon.exe [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {24565F84-2422-4C78-A2EB-B5574AEF3050} - System32\Tasks\KMSpico Automatic Update Scheduler => C:\Program Files\KMSpico\KMSUPD.exe [89272 2021-02-11] (KMSpico ByELDI LTD -> @ByELDI)
Task: {12C32413-59BD-4298-823A-18F9BF2C1095} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {633310C2-D9B0-42A1-9CFF-E22E62E5C6CE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42ACB7C6-05E4-49BE-9DCC-D9B8FAFDBF2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D791648B-7BD7-4169-A0A1-7EFFEEB210BE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {404F5772-3EE4-4214-9E15-6194E6099326} - System32\Tasks\Optimize Thumbnail Cache => C:\Program Files (x86)\Common Files\installshield\engine\8\intel 32\isupdate.exe [61104 2020-09-26] (Flexera Software LLC -> InstallShield®) [Fichier non signé]
Task: {720603FD-5682-40E5-95C4-31470FEABC6E} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2092358576-1393696132-1650822473-1001 => C:\Users\ASUS\AppData\Roaming\Zoom\bin\Zoom.exe [406344 2024-07-02] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
AutoConfigURL: [HKLM] => hxxp://127.0.0.1:86/ <==== ATTENTION
AutoConfigURL: [HKLM-x32] => hxxp://127.0.0.1:86/ <==== ATTENTION
Tcpip\..\Interfaces\{50f89378-7f44-4d69-9fa5-15887b3581e9}: [NameServer] 172.16.0.18
Tcpip\..\Interfaces\{7ec17406-1795-4ee1-9830-606f34c56a58}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}: [DhcpNameServer] 192.168.121.249
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\027416C616879702142323: [DhcpNameServer] 192.168.167.69
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\45F405E454451353640313547344: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\7416C616879702143313022716E69616: [DhcpNameServer] 192.168.76.137
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\75946494D2C41424F413: [DhcpNameServer] 10.0.60.1
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\75946494D2C41424F413: [DhcpDomain] crmn.rnrt
Tcpip\..\Interfaces\{901ad761-0d74-45a0-a8bb-7eeb9b75f377}\D4970226162697: [DhcpNameServer] 192.168.1.1 192.168.1.1
ManualProxies: 0hxxp://127.0.0.1:86/ <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-04]
Edge Extension: (Google Docs hors connexion) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-29]
Edge Extension: (Edge relevant text changes) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26]
Edge Extension: (IBM Security Rapport) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kajikgogckeajjplomldcempamhidmcc [2023-11-21]
Edge Extension: (IDM Integration Module) - C:\Users\ASUS\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2024-04-25]
Edge HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2021-12-09]
Edge HKLM-x32\...\Edge\Extension: [kajikgogckeajjplomldcempamhidmcc]
FireFox:
========
FF DefaultProfile: 7sr3zg9w.default
FF ProfilePath: C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default [2024-01-18]
FF Extension: (IBM Security Rapport) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\rapportext@trusteer.com.xpi [2021-03-08] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\sp@avast.com.xpi [2019-02-19]
FF Extension: (Avast Online Security) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\Extensions\wrc@avast.com.xpi [2018-06-23]
FF Extension: (Telemetry coverage) - C:\Users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\7sr3zg9w.default\features\{88f82596-a322-4c56-b98f-ca095d2f323b}\telemetry-coverage-bug1487578@mozilla.org.xpi [2019-01-07] []
FF ProfilePath: C:\Users\ASUS\AppData\Roaming\AMozilla\AFirefox\Profiles\2ux5hbke.default [2021-12-17] <==== ATTENTION
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-06-28] [] [non signé]
FF HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ASUS\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\ASUS\AppData\Roaming\IDM\idmmzcc5 [2021-12-23] [] [non signé]
FF HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-11-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-11-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default [2024-07-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-05]
CHR Extension: (Dolce&Gabbana Light Blue) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdgndohmehggibeplnmggdefcjphmbfa [2016-09-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-02]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2024-06-28]
CHR Extension: (Lanceur d'applications pour Drive (par Google)) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-28]
CHR Extension: (Search Manager) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [2019-11-26]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-12]
CHR Extension: (Google Docs) - C:\ProgramData\GoogleDriveAdvodrs [2022-04-22]
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-01-07]
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\System Profile [2019-01-07]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-12-09]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKU\S-1-5-21-2092358576-1393696132-1650822473-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-12-09]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-06-25] (Adobe Inc. -> Adobe Inc.)
R2 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1701448571088.exe [4698216 2023-12-01] (OpenVPN Inc. -> )
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ovpnhelper_service; C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe [4534888 2023-12-01] (OpenVPN Inc. -> )
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438368 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-05-04] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (pdfforge GmbH -> © pdfforge GmbH.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-05-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [84480 2015-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Alcor Micro, Corp.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusSGDrv; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [141304 2015-12-19] (ASUSTeK Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-03] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 MpKsl556b6564; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9BFC2F8F-FC24-401C-BC83-8CFAE7CC00E4}\MpKslDrv.sys [271648 2024-07-06] (Microsoft Windows -> Microsoft Corporation)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [90568 2023-03-31] (WDKTestCert lev,132435948852968539 -> OpenVPN, Inc)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap_ovpnconnect; C:\WINDOWS\System32\drivers\tap_ovpnconnect.sys [40448 2023-12-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-07-06 15:16 - 2024-07-06 15:17 - 000027065 ____C C:\Users\ASUS\Desktop\FRST.txt
2024-07-06 15:15 - 2024-07-06 15:17 - 000000000 ____D C:\FRST
2024-07-06 15:13 - 2024-07-06 15:13 - 002395648 _____ (Farbar) C:\Users\ASUS\Downloads\FRST64 (1).exe
2024-07-06 15:12 - 2024-07-06 15:12 - 002395648 _____ (Farbar) C:\Users\ASUS\Desktop\FRST64.exe
2024-07-02 09:04 - 2024-07-02 09:04 - 000000000 ___DC C:\Users\ASUS\Documents\Zoom
2024-07-02 09:02 - 2024-07-02 09:02 - 000004266 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2092358576-1393696132-1650822473-1001
2024-07-02 09:02 - 2024-07-02 09:02 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2024-07-02 09:02 - 2024-07-02 09:02 - 000000000 ____D C:\Users\ASUS\AppData\Local\Zoom
2024-06-19 14:12 - 2024-06-19 14:19 - 579037917 _____ C:\Users\ASUS\Downloads\Photos-001 (6).zip
2024-06-19 14:07 - 2024-06-19 14:11 - 566693288 _____ C:\Users\ASUS\Downloads\Photos-001 (5).zip
2024-06-19 14:03 - 2024-06-19 14:06 - 507795104 _____ C:\Users\ASUS\Downloads\Photos-001 (4).zip
2024-06-19 13:56 - 2024-06-19 14:01 - 535444530 _____ C:\Users\ASUS\Downloads\Photos-001 (3).zip
2024-06-19 13:50 - 2024-06-19 13:54 - 502954057 _____ C:\Users\ASUS\Downloads\Photos-001 (2).zip
2024-06-19 13:46 - 2024-06-19 13:47 - 236303773 _____ C:\Users\ASUS\Downloads\Photos-001 (1).zip
2024-06-19 13:36 - 2024-06-19 13:37 - 135843206 _____ C:\Users\ASUS\Downloads\Photos-001.zip
2024-06-19 13:34 - 2024-06-19 13:35 - 005867417 _____ C:\Users\ASUS\Downloads\20210823_122551.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005866456 _____ C:\Users\ASUS\Downloads\20211112_133046.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005832728 _____ C:\Users\ASUS\Downloads\20210826_081230.mp4
2024-06-19 13:34 - 2024-06-19 13:34 - 005801753 _____ C:\Users\ASUS\Downloads\20211119_110431.mp4
2024-06-19 13:33 - 2024-06-19 13:33 - 005739606 _____ C:\Users\ASUS\Downloads\20211206_131723.mp4
2024-06-19 13:33 - 2024-06-19 13:33 - 005653824 _____ C:\Users\ASUS\Downloads\20211010_180308.mp4
2024-06-19 13:32 - 2024-06-19 13:32 - 005611389 _____ C:\Users\ASUS\Downloads\20211206_131750.mp4
2024-06-19 13:32 - 2024-06-19 13:32 - 005591888 _____ C:\Users\ASUS\Downloads\20211025_072646.mp4
2024-06-19 13:30 - 2024-06-19 13:30 - 005335733 _____ C:\Users\ASUS\Downloads\20211013_173448.mp4
2024-06-19 13:30 - 2024-06-19 13:30 - 005335580 _____ C:\Users\ASUS\Downloads\20211028_130732.mp4
2024-06-19 10:21 - 2024-06-19 10:24 - 030625757 ____C C:\Users\ASUS\Desktop\these_A_VANOTTI_Meddy_2015.pdf
2024-06-19 10:14 - 2024-06-19 10:14 - 000000000 ___HD C:\$WinREAgent
2024-06-13 10:01 - 2024-06-13 10:04 - 000000000 ___DC C:\Users\ASUS\Desktop\famille
2024-06-13 09:59 - 2024-06-13 09:59 - 000000000 ___DC C:\Users\ASUS\Desktop\Recherche
2024-06-07 09:55 - 2024-06-07 09:55 - 000000165 ___HC C:\Users\ASUS\Desktop\~$Présentation1 Mois.pptx
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-07-06 15:12 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-06 15:09 - 2024-01-13 09:43 - 000000000 ____D C:\Users\ASUS\AppData\Roaming\OpenVPN Connect
2024-07-06 15:09 - 2019-01-23 11:53 - 000000446 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2024-07-06 14:46 - 2016-03-22 09:50 - 000000000 __SHD C:\Users\ASUS\IntelGraphicsProfiles
2024-07-05 15:20 - 2016-06-28 14:59 - 000000000 ___DC C:\Users\ASUS\Documents\Origin User Files
2024-07-05 14:23 - 2016-11-24 15:15 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Excel
2024-07-05 13:49 - 2024-05-07 14:39 - 000000000 ___DC C:\Users\ASUS\Desktop\CRMN
2024-07-05 13:00 - 2016-03-22 10:17 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\Microsoft\Word
2024-07-05 11:51 - 2023-02-13 11:37 - 001681374 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-07-05 11:51 - 2019-12-07 15:50 - 000758068 _____ C:\WINDOWS\system32\perfh00C.dat
2024-07-05 11:51 - 2019-12-07 15:50 - 000142822 _____ C:\WINDOWS\system32\perfc00C.dat
2024-07-05 11:51 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-07-05 11:43 - 2023-02-13 11:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-07-05 11:43 - 2021-04-15 12:39 - 000008192 ___SH C:\DumpStack.log.tmp
2024-07-05 11:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-07-05 11:43 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-07-04 13:22 - 2023-02-13 11:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-07-04 10:26 - 2020-09-05 09:51 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-04 10:26 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-04 10:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-07-02 11:21 - 2023-02-13 11:37 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-07-02 11:21 - 2022-10-26 12:15 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-07-02 11:21 - 2022-10-26 12:15 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-07-02 09:02 - 2021-07-12 17:42 - 000000000 ____D C:\Users\ASUS\AppData\Roaming\Zoom
2024-06-30 14:54 - 2023-02-13 11:29 - 000000000 ____D C:\Users\ASUS
2024-06-28 09:49 - 2023-02-13 11:18 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-06-28 09:49 - 2016-06-28 10:07 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002010 _____ C:\Users\Default\Desktop\Google Slides.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000002010 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2024-06-26 17:01 - 2021-09-27 14:02 - 000001998 _____ C:\Users\Default\Desktop\Google Docs.lnk
2024-06-26 17:01 - 2020-09-13 20:17 - 000002050 ____C C:\Users\ASUS\Desktop\Google Drive.lnk
2024-06-19 16:14 - 2023-02-13 11:26 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK
2024-06-19 14:23 - 2023-02-13 11:26 - 000460064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-06-19 14:22 - 2023-02-13 11:04 - 000000000 ____D C:\WINDOWS\en-GB
2024-06-19 14:22 - 2023-02-13 10:59 - 000000000 ____D C:\Program Files\Hyper-V
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-06-19 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-06-19 14:21 - 2016-03-22 10:44 - 000000000 ___DC C:\Users\ASUS\AppData\Roaming\DMCache
2024-06-19 13:15 - 2022-04-04 14:55 - 000000000 ___DC C:\Users\ASUS\Desktop\yassine trie
2024-06-19 13:12 - 2024-01-26 16:48 - 000000000 ___DC C:\Users\ASUS\Desktop\Nouveau dossier
2024-06-19 13:07 - 2022-03-07 14:32 - 000000000 ___DC C:\Users\ASUS\Desktop\Nouveau dossier trie
2024-06-19 12:51 - 2024-01-28 15:47 - 000000000 ___DC C:\Users\ASUS\Desktop\ryma
2024-06-19 11:54 - 2023-12-06 17:03 - 000000000 ___DC C:\Users\ASUS\Desktop\souad
2024-06-19 11:39 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-06-19 11:38 - 2021-12-07 18:04 - 000000000 ___DC C:\Users\ASUS\Desktop\album yassine
2024-06-19 11:26 - 2020-09-07 20:28 - 000000000 ___DC C:\Users\ASUS\Desktop\salma 2020
2024-06-19 11:04 - 2023-02-13 11:27 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-06-19 10:12 - 2017-12-01 16:56 - 000000000 ___DC C:\Users\ASUS\AppData\Local\Packages
2024-06-13 10:12 - 2016-06-30 02:45 - 199048176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-06-13 10:12 - 2016-06-30 02:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-06-10 10:04 - 2023-02-13 11:37 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-06-10 10:04 - 2023-02-13 11:37 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d731ecf12e77b4
==================== Fichiers à la racine de certains dossiers ========
2021-10-21 13:48 - 2021-10-21 13:48 - 000334288 _____ (Mozilla Foundation) C:\ProgramData\freebl3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000137168 _____ (Mozilla Foundation) C:\ProgramData\mozglue.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000440120 _____ (Microsoft Corporation) C:\ProgramData\msvcp140.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 001246160 _____ (Mozilla Foundation) C:\ProgramData\nss3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000144848 _____ (Mozilla Foundation) C:\ProgramData\softokn3.dll
2021-10-21 13:48 - 2021-10-21 13:48 - 000083784 _____ (Microsoft Corporation) C:\ProgramData\vcruntime140.dll
2018-05-17 22:10 - 2021-04-15 11:01 - 000000184 ____C () C:\Users\ASUS\AppData\Roaming\sp_data.sys
2021-12-17 12:27 - 2018-08-07 01:30 - 000399224 _____ (BitTorrent, Inc.) C:\Users\ASUS\AppData\Roaming\utorrent_2.2.1.exe
2017-04-20 00:24 - 2017-04-20 00:24 - 000000043 ____C () C:\Users\ASUS\AppData\Roaming\WB.CFG
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================