Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
Exécuté par MDI (administrateur) sur DESKTOP-R6K41UK (09-10-2024 15:24:53)
Exécuté depuis D:\Logiciels\FRST Diagnostic\scoped_dir2164_1410507237\FRST64.exe
Profils chargés: MDI
Plate-forme: Microsoft Windows 10 Professionnel Version 22H2 19045.5011 (X64) Langue: Français (France)
Navigateur par défaut: "C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowser.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.AppServiceBridge.exe
(C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\MDI\AppData\Local\Programs\Opera\113.0.5230.142\opera_crashreporter.exe
(Discord Inc. -> Discord Inc.) C:\Users\MDI\AppData\Local\Discord\app-1.0.9166\Discord.exe <6>
(DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atieclxx.exe
(explorer.exe ->) () [Fichier non signé] C:\pointsoft\lanceur.exe
(explorer.exe ->) () [Fichier non signé] C:\Program Files\BLUE\Yeti_Pro_Driver\YetiProControlPanel.exe
(explorer.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Digital Communications Inc -> Digital Com. Inc) C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusClient.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe <48>
(Gen Digital Inc. -> Piriform Software Ltd) D:\Logiciels\Ccleaner\CCleaner64.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atiesrxx.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.20\AsusFanControlService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.32\atkexComSvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Digital Communications Inc -> Digital Com. Inc) C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (Segurazo Security -> DlGlTAL COMMUNICATIONS INC) [Fichier non signé] C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusWD.exe
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (TODO:) [Fichier non signé] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [AMDDVR] => C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe [2406840 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [CCleaner Smart Cleaning] => D:\Logiciels\Ccleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Steam] => D:\Logiciels\Steam\steam.exe [4406632 2024-09-17] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Opera Browser Assistant] => C:\Users\MDI\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4140448 2023-03-08] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [AMDNoiseSuppression] => "C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Discord] => C:\Users\MDI\AppData\Local\Discord\Update.exe [1515904 2024-10-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [AMDDVR] => C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe [2406840 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [Opera Browser Assistant] => C:\Users\Administrateur\AppData\Local\Programs\Opera\assistant\browser_assistant.exe (Pas de fichier)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [CCleaner Smart Cleaning] => D:\Logiciels\Ccleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {2e02070c-d4c4-11eb-9fe4-04d9f5d36610} - "H:\autorun.exe"
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {7c45cca5-0251-11eb-9f17-04d9f5d36610} - "F:\autorun.exe"
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {92ad5291-95ef-11eb-9fab-04d9f5d36610} - "G:\setup.exe" /autorun
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {f5ab52a2-ae49-11ea-9ebe-04d9f5d36610} - "E:\setup.exe" /autorun
Startup: C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur Pointsoft.lnk [2021-04-15]
ShortcutTarget: Lanceur Pointsoft.lnk -> C:\pointsoft\lanceur.exe () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yeti Pro Control Panel Autostart.lnk [2021-03-17]
ShortcutTarget: Yeti Pro Control Panel Autostart.lnk -> C:\Program Files\BLUE\Yeti_Pro_Driver\YetiProControlPanel.exe () [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {E1DD6977-A6F7-407C-8628-25EC7C3CD1EC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {FC284ABD-8346-44DB-A3B8-E02EBA4FA187} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A3943DA4-8BB8-4F4F-9497-E415AB43728D} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {75F3827C-3139-4ACD-8B63-C34BC797E54E} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A7A1C67D-9F3D-4053-AB8C-76570987A73E} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe (Pas de fichier)
Task: {7FA0F356-D1B6-4621-9B9C-4E7EA3ED1581} - System32\Tasks\ASUS\ArmouryAIOFanServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe [1039360 2020-11-10] (TODO:) [Fichier non signé]
Task: {D84CA052-CA76-44F6-8FAF-9A8218050B8F} - System32\Tasks\ASUS\ArmouryIgoService.exe => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\ArmouryIgoService.exe (Pas de fichier)
Task: {8DD81612-4CC7-4E1D-A112-B02FAFF1C303} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2025488 2021-01-22] (ASUSTeK Computer Inc. -> ASUS)
Task: {CAECA5D0-8152-4EE7-BC87-A069FDD935EE} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d640c524bc26f => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {0938F06F-CD32-435D-BB03-23823CDB468C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {9F80ECF6-E7EC-4387-A87A-388A584DC551} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [45540760 2021-01-13] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {02BFE980-A7DC-495F-8270-EF6643616ED3} - System32\Tasks\ASUS\NoiseCancelingEngine.exe => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1238328 2021-01-21] (ASUSTeK Computer Inc. -> ASUS)
Task: {BBFF4865-30C7-440A-B63C-7328804687E7} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Pas de fichier)
Task: {D96677AE-0DA0-4A91-823A-92836C6B8F36} - System32\Tasks\CCleaner Update => D:\Logiciels\Ccleaner\CCUpdate.exe [829408 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3D265915-E152-4C05-9624-3332EAF6A983} - System32\Tasks\CCleanerCrashReporting => D:\Logiciels\Ccleaner\CCleanerBugReport.exe [5937456 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "D:\Logiciels\Ccleaner\LOG" --programpath "D:\Logiciels\Ccleaner" --guid "f16bb92a-c1f7-4e58-9d7d-23a7ae1f5e8b" --version "6.28.11297" --silent
Task: {509A7FFF-C767-4B0D-9343-5458B5239CF3} - System32\Tasks\CCleanerSkipUAC - MDI => D:\Logiciels\Ccleaner\CCleaner.exe [39012144 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {C72E3EB4-843C-44EA-921A-D06F385A5EB4} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\Windows\system32\clipesu.exe [221680 2024-10-09] (Microsoft Windows -> Microsoft Corporation)
Task: {703B538E-40B5-4CDB-9B75-F17BE83478E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1077612F-0255-4C7C-AFF9-68DC8BEF8003} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4A5D8AB-5C84-491D-8920-51FB182A7275} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E8001BE5-1AEA-4D06-A96E-84B750D43FA9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5258C359-33FD-4EE6-A9C7-D3EA1ACF7609} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {601D0A6F-48C8-4A6F-9E43-C405DBA829E1} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1179539728-576559909-1883960167-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {CCE163E0-C0DB-457E-B758-FEE7CD906308} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1179539728-576559909-1883960167-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {3F681F1D-D604-4ACC-BFE4-7BBFB1BD2FB3} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1179539728-576559909-1883960167-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {8F6892F4-E61E-4184-9BD2-FEE2CBA5143C} - System32\Tasks\Opera scheduled assistant Autoupdate 1592002727 => C:\Users\MDI\AppData\Local\Programs\Opera\launcher.exe [1386912 2024-09-30] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\MDI\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {27130735-986F-482C-BF55-325792E49633} - System32\Tasks\Opera scheduled Autoupdate 1592002723 => C:\Users\MDI\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5570464 2024-09-27] (Opera Norway AS -> Opera Software)
Task: {590CD74C-1EFC-4ACB-AE42-C6ABEB99CC31} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {CE71C705-2D76-4110-B350-7558B6562B52} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => D:\Logiciels\Ccleaner\CCleanerBugReport.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{182ef3ee-8a43-40c4-8253-d202491d7fa2}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}\14C445943454F5731324434344: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}\6427565626F687D2634344533334: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{aed2c850-d4bd-4759-9d99-63f5ae23f739}: [DhcpNameServer] 8.8.8.8 8.8.4.4 192.168.0.254 212.27.40.240 212.27.40.241
Edge:
=======
Edge Profile: C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-23]
Edge HomePage: Default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87dbgpsszvwu2cegikmoxb752420¶m1=y6bdVFVIsvuYsgEClQfz8Oeg2evwTgtkD45B1N7UYtl1i1TGbMZZmhyro3luh2h4wjxL7xSVd3NGv%2BbEnOeyv2HBrNEejvKaVAhtCoWZnt%2FlYom3gO5QKHgMjvyNB9f6q8eZhmv3Wzoi%2F201eU2E4faGto6XaU%2BAQUk04Urb79qr5xWPW9eRMOmdPuEclK7E3ICOmt7ATLCayv%2BrZkVzmmKRWMabxGOG3%2F1jXg1iMzv%2B82TTQkv95Z2hyuqnXqrdv40WoqjbPG3%2Bs1r8fTmTNYRgdAlkr1BjIHGmsfipU1VgrwKYehWeWuDlc%2FY6JXVGwE9bidWx8W4VlnKDt2Zi%2BGqBiHSTZzr%2F65QPzhHhjt7sravPB6QyAHGws91vsaHL4%2BbWbey27FCadcfBJwa06A%3D%3D
Edge StartupUrls: Default -> "hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87dbgpsszvwu2cegikmoxb752420¶m1=y6bdVFVIsvuYsgEClQfz8Oeg2evwTgtkD45B1N7UYtl1i1TGbMZZmhyro3luh2h4wjxL7xSVd3NGv%2BbEnOeyv2HBrNEejvKaVAhtCoWZnt%2FlYom3gO5QKHgMjvyNB9f6q8eZhmv3Wzoi%2F201eU2E4faGto6XaU%2BAQUk04Urb79qr5xWPW9eRMOmdPuEclK7E3ICOmt7ATLCayv%2BrZkVzmmKRWMabxGOG3%2F1jXg1iMzv%2B82TTQkv95Z2hyuqnXqrdv40WoqjbPG3%2Bs1r8fTmTNYRgdAlkr1BjIHGmsfipU1VgrwKYehWeWuDlc%2FY6JXVGwE9bidWx8W4VlnKDt2Zi%2BGqBiHSTZzr%2F65QPzhHhjt7sravPB6QyAHGws91vsaHL4%2BbWbey27FCadcfBJwa06A%3D%3D"
Edge DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search{google:pathWildcard}?ei={inputEncoding}&fr=crmas&p={searchTerms}
Edge DefaultSearchKeyword: Default -> fr.yahoo.com
Edge DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
Edge Extension: (Google Docs hors connexion) - C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
Edge Extension: (Edge relevant text changes) - C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.381.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.381.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1179539728-576559909-1883960167-1001: @easyxplor.com.com/easyxplore Update;version=3 -> C:\Users\MDI\AppData\Local\easyxplore\Update\1.3.99.0\npeasyxploreUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1179539728-576559909-1883960167-1001: @easyxplor.com.com/easyxplore Update;version=9 -> C:\Users\MDI\AppData\Local\easyxplore\Update\1.3.99.0\npeasyxploreUpdate3.dll [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default [2022-08-27]
CHR Extension: (Slides) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-06-03]
CHR Extension: (Docs) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-06-03]
CHR Extension: (Google Drive) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-06-03]
CHR Extension: (YouTube) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-06-03]
CHR Extension: (Sheets) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-06-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-06-03]
CHR Extension: (Gmail) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-06-03]
CHR Extension: (Chrome Media Router) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-03]
CHR HKLM\...\Chrome\Extension: [icmgebopaejnjlncllgmcenbbflikfjd]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
"SAntivirusWD" => service a été déverrouillé. <==== ATTENTION
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
S3 ArmouryCrateDownloadTool; C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_1a978b89f16e1813\ArmouryLiveUpdate.exe [577304 2024-06-11] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [399984 2023-08-11] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.32\atkexComSvc.exe [907112 2023-12-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2022-08-18] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.20\AsusFanControlService.exe [1722216 2023-08-11] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [833600 2024-10-09] (ASUSTeK Computer Inc. -> )
S3 CCleanerPerformanceOptimizerService; D:\Logiciels\Ccleaner\CCleanerPerformanceOptimizerService.exe [1087792 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4701376 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-08] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [4799336 2023-09-13] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [1665648 2023-07-25] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 SAntivirusSvc; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusService.exe [302328 2020-06-14] (Digital Communications Inc -> Digital Com. Inc) <==== ATTENTION
R2 SAntivirusWD; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusWD.exe [74770848 2023-04-09] (Segurazo Security -> DlGlTAL COMMUNICATIONS INC) [Fichier non signé] <==== ATTENTION
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530488 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [25584 2023-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV20; C:\Windows\system32\AMDRyzenMasterDriver.sys [48328 2023-06-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\amdkmdag.sys [99745216 2023-08-29] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [43168 2022-08-18] (ASUSTeK Computer Inc. -> )
S3 blueyetipro; C:\Windows\System32\drivers\blueyetipro_x64.sys [254464 2014-05-16] (Thesycon Systemsoftware Consulting GmbH -> )
S3 blueyetiproks; C:\Windows\System32\drivers\blueyetiproks_x64.sys [46080 2014-05-16] (Thesycon Systemsoftware Consulting GmbH -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [284672 2021-04-15] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [42256 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [59360 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 GLCKIO2; C:\Windows\system32\drivers\GLCKIO2.sys [29368 2019-04-24] (ASUSTeK Computer Inc. -> )
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R0 mtinvme; C:\Windows\System32\drivers\mtinvme.sys [139640 2019-11-05] (Micron Technology, Inc. -> Micron Technology, Inc.)
R3 ROGKB; C:\Windows\System32\DriverStore\FileRepository\rogkb.inf_amd64_9c19fffb5d62d536\ROGKB.sys [33680 2021-08-30] (ASUSTeK Computer Inc. -> )
R3 ROGMS; C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_1a978b89f16e1813\ROGMS.sys [41384 2024-06-11] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
R1 SANTIVIRUSKD; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusKD.sys [90096 2020-06-14] (Digital Communications Inc. -> Digital Comm. Inc) <==== ATTENTION
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [24064 2020-09-13] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-09-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602392 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2016-05-12] (ZJMedia Digital Technology Ltd. -> WinISO.com)
S2 AMDRyzenMasterDriverV17; \??\C:\Program Files\AMD\CNext\CNext\AMDRyzenMasterDriver.sys [X]
S3 Secdrv; \??\C:\Windows\system32\drivers\SECDRV.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-10-09 15:24 - 2024-10-09 15:25 - 000000000 ____D C:\FRST
2024-10-09 14:27 - 2024-10-09 14:29 - 000000000 ____D C:\Users\MDI\AppData\Roaming\discord
2024-10-09 14:27 - 2024-10-09 14:28 - 000000000 ____D C:\Users\MDI\AppData\Local\Discord
2024-10-09 14:27 - 2024-10-09 14:27 - 000002290 _____ C:\Users\MDI\Desktop\Discord.lnk
2024-10-09 14:27 - 2024-10-09 14:27 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2024-10-09 14:27 - 2024-10-09 14:27 - 000000000 ____D C:\Users\MDI\AppData\Local\SquirrelTemp
2024-10-09 12:43 - 2024-10-09 12:44 - 000000000 ___HD C:\$WinREAgent
2024-10-09 11:50 - 2024-10-09 11:50 - 000000814 _____ C:\Users\Public\Desktop\L.A. Noire The Complete Edition.lnk
2024-10-09 11:35 - 2024-10-09 11:36 - 1170478184 _____ C:\Users\MDI\Downloads\Chœur montferrandais (29 août 2024 - Clermont-Ferrand).mp4
2024-10-08 21:19 - 2024-10-09 13:58 - 000003114 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2024-10-07 15:20 - 2024-10-07 15:20 - 000157975 _____ C:\Users\MDI\Downloads\Déclaration 3ème trimestre 2024.pdf
2024-10-05 15:22 - 2024-10-05 15:22 - 000109435 _____ C:\Users\MDI\Downloads\Design sans titre (2).zip
2024-10-05 14:20 - 2024-10-05 14:20 - 017779326 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape (2).zip
2024-10-04 18:37 - 2024-10-04 18:37 - 013593670 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape (1).zip
2024-10-04 18:29 - 2024-10-04 18:29 - 017890674 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape.zip
2024-10-04 18:16 - 2024-10-04 18:16 - 000292288 _____ C:\Users\MDI\Downloads\Design sans titre (1).zip
2024-10-03 18:43 - 2024-10-03 18:47 - 000000000 ____D C:\Users\MDI\Desktop\Mods Minecraft
2024-10-03 10:39 - 2024-10-09 11:47 - 000000000 ____D C:\Users\MDI\Desktop\Nouveau dossier
2024-10-02 18:56 - 2024-10-02 18:56 - 000025355 _____ C:\Users\MDI\Downloads\AA2_51776837_FW-086-KC_97603528 (1).pdf
2024-10-02 18:56 - 2024-10-02 18:56 - 000006105 _____ C:\Users\MDI\Downloads\DOC_BON_OPERATION_51776837_FW-086-KC_95682525 (1).pdf
2024-10-02 18:26 - 2024-10-02 18:26 - 000160087 _____ C:\Users\MDI\Downloads\AttestationDroits (2).pdf
2024-10-02 18:26 - 2024-10-02 18:26 - 000159998 _____ C:\Users\MDI\Downloads\AttestationDroits (1).pdf
2024-10-02 11:21 - 2024-10-09 13:58 - 000003106 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2024-10-02 11:20 - 2024-10-02 11:21 - 002991476 _____ C:\Windows\Minidump\100224-9343-01.dmp
2024-09-30 23:42 - 2024-09-30 23:42 - 009170073 _____ C:\Users\MDI\Downloads\Dramatic Skys Demo 1.5.3.24.zip
2024-09-30 23:08 - 2024-09-30 23:09 - 248455802 _____ C:\Users\MDI\Downloads\Hyper_Realistic_Sky_[v2.2].zip
2024-09-30 22:53 - 2024-09-30 22:53 - 013866246 _____ C:\Users\MDI\Downloads\§6月舞§f-[1.21]sky_resoucepack.zip
2024-09-30 22:32 - 2024-09-30 22:32 - 081743669 _____ C:\Users\MDI\Downloads\ModernArch R294 [1.20.3-1.21.1] [128x].zip
2024-09-30 22:31 - 2024-09-30 22:31 - 052167209 _____ C:\Users\MDI\Downloads\128x RealPix (All versions from 1.19 to 1.21.1 supported).zip
2024-09-27 16:11 - 2024-09-27 16:11 - 000077654 _____ C:\Users\MDI\Downloads\e-mandat.pdf
2024-09-27 15:59 - 2024-09-27 15:59 - 000250978 _____ C:\Users\MDI\Downloads\IR-Form-2042DPR-2024-cluzel.pdf
2024-09-27 15:27 - 2024-09-27 15:27 - 000025355 _____ C:\Users\MDI\Downloads\AA2_51776837_FW-086-KC_97603528.pdf
2024-09-27 15:27 - 2024-09-27 15:27 - 000006105 _____ C:\Users\MDI\Downloads\DOC_BON_OPERATION_51776837_FW-086-KC_95682525.pdf
2024-09-27 14:06 - 2024-09-27 14:06 - 000160313 _____ C:\Users\MDI\Downloads\AttestationDroits.pdf
2024-09-26 12:18 - 2024-09-26 12:18 - 002854396 _____ C:\Windows\Minidump\092624-7500-01.dmp
2024-09-25 18:28 - 2024-09-25 18:28 - 002119708 _____ C:\Windows\Minidump\092524-7062-01.dmp
2024-09-25 17:50 - 2024-09-25 17:50 - 003079652 _____ C:\Windows\Minidump\092524-7640-01.dmp
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-10-09 14:28 - 2020-06-03 15:55 - 000000000 ____D C:\Users\MDI\AppData\Local\D3DSCache
2024-10-09 14:03 - 2020-06-03 15:21 - 001943886 _____ C:\Windows\system32\PerfStringBackup.INI
2024-10-09 14:03 - 2019-12-07 16:50 - 000858030 _____ C:\Windows\system32\perfh00C.dat
2024-10-09 14:03 - 2019-12-07 16:50 - 000174630 _____ C:\Windows\system32\perfc00C.dat
2024-10-09 14:03 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-10-09 14:00 - 2020-06-12 16:25 - 000000000 ____D C:\Program Files\ASUS
2024-10-09 13:58 - 2020-06-12 16:21 - 000872200 _____ C:\Windows\system32\wpbbin.exe
2024-10-09 13:58 - 2020-06-12 16:21 - 000833600 _____ C:\Windows\system32\AsusUpdateCheck.exe
2024-10-09 13:58 - 2020-06-03 15:16 - 000008192 ___SH C:\DumpStack.log.tmp
2024-10-09 13:58 - 2020-06-03 15:16 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-10-09 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-10-09 13:57 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2024-10-09 13:47 - 2020-06-03 15:16 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-10-09 12:53 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-10-09 12:44 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-10-09 12:34 - 2020-06-14 18:57 - 000000000 ____D C:\Users\MDI\AppData\Local\CrashDumps
2024-10-09 12:33 - 2020-06-12 10:44 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Microsoft\MMC
2024-10-09 12:27 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Local\VirtualStore
2024-10-09 12:02 - 2021-12-17 11:27 - 000000000 ____D C:\Windows\SystemTemp
2024-10-09 12:02 - 2020-06-03 15:16 - 000472024 _____ C:\Windows\system32\FNTCACHE.DAT
2024-10-09 11:59 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\OpenSSH
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\inetsrv
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-10-09 11:56 - 2021-04-04 23:49 - 000000000 ____D C:\Windows\SysWOW64\directx
2024-10-09 11:50 - 2022-10-16 17:13 - 000000000 ____D C:\Users\MDI\Documents\Rockstar Games
2024-10-09 10:09 - 2020-06-03 15:19 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-10-09 09:57 - 2020-07-04 13:24 - 000000000 ____D C:\Windows\system32\MRT
2024-10-09 09:55 - 2020-07-04 13:24 - 201324920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-10-08 21:21 - 2021-05-12 23:25 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-10-08 21:21 - 2021-05-12 23:25 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-10-08 18:12 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-10-08 12:52 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2024-10-06 18:23 - 2022-08-14 17:26 - 000000000 ____D C:\Users\MDI\AppData\Roaming\slobs-client
2024-10-04 22:42 - 2021-06-20 17:39 - 000000000 ____D C:\Users\MDI\AppData\Local\AMD_Common
2024-10-04 09:18 - 2021-05-12 23:25 - 000002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-10-03 23:52 - 2020-06-03 15:47 - 000000000 ____D C:\Users\MDI
2024-10-03 19:03 - 2022-10-11 22:08 - 000000000 ____D C:\XboxGames
2024-10-03 18:56 - 2020-06-13 01:09 - 000000000 ____D C:\Users\MDI\Desktop\Jeux
2024-10-03 04:19 - 2022-10-22 16:43 - 000124480 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-10-03 04:19 - 2022-10-22 16:43 - 000075304 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-10-03 04:19 - 2022-10-11 22:08 - 002819648 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-10-03 04:17 - 2022-10-11 22:08 - 000153152 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000775720 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000243264 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000210472 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-10-02 11:21 - 2020-09-05 21:21 - 000000000 ____D C:\Windows\Minidump
2024-10-02 11:20 - 2022-09-01 17:24 - 1643681632 _____ C:\Windows\MEMORY.DMP
2024-10-01 18:57 - 2022-10-11 22:07 - 000000000 ____D C:\Users\MDI\AppData\Local\MinecraftInstaller
2024-10-01 18:49 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Local\Packages
2024-10-01 18:48 - 2020-06-03 15:50 - 000000000 ____D C:\Users\MDI\AppData\Local\PlaceholderTileLogoFolder
2024-10-01 18:35 - 2022-10-16 17:25 - 000000000 ____D C:\Users\MDI\AppData\Local\Steam
2024-10-01 17:59 - 2023-09-12 11:01 - 000000000 ____D C:\Users\MDI\AppData\Roaming\obs-studio
2024-09-30 10:41 - 2020-06-13 00:58 - 000004276 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1592002723
2024-09-30 10:41 - 2020-06-13 00:58 - 000001437 _____ C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-09-27 16:50 - 2020-07-25 15:51 - 000000000 ___RD C:\Users\MDI\Documents\Scanned Documents
2024-09-25 09:20 - 2022-11-07 10:20 - 000000642 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2024-09-20 09:37 - 2022-10-13 23:34 - 000003356 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2024-09-20 09:37 - 2021-06-19 18:20 - 000003928 _____ C:\Windows\system32\Tasks\CCleaner Update
2024-09-19 09:29 - 2022-09-10 10:40 - 000000000 ____D C:\Users\MDI\AppData\Roaming\com.adobe.dunamis
2024-09-19 09:29 - 2020-06-03 16:05 - 000000000 ____D C:\Users\MDI\AppData\Local\Adobe
2024-09-19 09:29 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Adobe
2024-09-18 09:38 - 2022-10-12 11:15 - 000002045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-09-18 09:38 - 2020-06-03 16:07 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-09-17 14:56 - 2020-06-03 15:16 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-09-13 10:28 - 2019-12-07 16:53 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2024-09-13 10:28 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-09-13 10:28 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
==================== Fichiers à la racine de certains dossiers ========
2023-01-31 00:21 - 2023-04-24 10:45 - 000000016 _____ () C:\Users\MDI\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par MDI (administrateur) sur DESKTOP-R6K41UK (09-10-2024 15:24:53)
Exécuté depuis D:\Logiciels\FRST Diagnostic\scoped_dir2164_1410507237\FRST64.exe
Profils chargés: MDI
Plate-forme: Microsoft Windows 10 Professionnel Version 22H2 19045.5011 (X64) Langue: Français (France)
Navigateur par défaut: "C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowser.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.AppServiceBridge.exe
(C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\MDI\AppData\Local\Programs\Opera\113.0.5230.142\opera_crashreporter.exe
(Discord Inc. -> Discord Inc.) C:\Users\MDI\AppData\Local\Discord\app-1.0.9166\Discord.exe <6>
(DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atieclxx.exe
(explorer.exe ->) () [Fichier non signé] C:\pointsoft\lanceur.exe
(explorer.exe ->) () [Fichier non signé] C:\Program Files\BLUE\Yeti_Pro_Driver\YetiProControlPanel.exe
(explorer.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Digital Communications Inc -> Digital Com. Inc) C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusClient.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\MDI\AppData\Local\Programs\Opera\opera.exe <48>
(Gen Digital Inc. -> Piriform Software Ltd) D:\Logiciels\Ccleaner\CCleaner64.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\atiesrxx.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.20\AsusFanControlService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.32\atkexComSvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Digital Communications Inc -> Digital Com. Inc) C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (Segurazo Security -> DlGlTAL COMMUNICATIONS INC) [Fichier non signé] C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusWD.exe
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (TODO:
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [AMDDVR] => C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe [2406840 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [CCleaner Smart Cleaning] => D:\Logiciels\Ccleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Steam] => D:\Logiciels\Steam\steam.exe [4406632 2024-09-17] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Opera Browser Assistant] => C:\Users\MDI\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4140448 2023-03-08] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [AMDNoiseSuppression] => "C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKU\S-1-5-21-1179539728-576559909-1883960167-1001\...\Run: [Discord] => C:\Users\MDI\AppData\Local\Discord\Update.exe [1515904 2024-10-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [AMDDVR] => C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe [2406840 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [Opera Browser Assistant] => C:\Users\Administrateur\AppData\Local\Programs\Opera\assistant\browser_assistant.exe (Pas de fichier)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\Run: [CCleaner Smart Cleaning] => D:\Logiciels\Ccleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {2e02070c-d4c4-11eb-9fe4-04d9f5d36610} - "H:\autorun.exe"
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {7c45cca5-0251-11eb-9f17-04d9f5d36610} - "F:\autorun.exe"
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {92ad5291-95ef-11eb-9fab-04d9f5d36610} - "G:\setup.exe" /autorun
HKU\S-1-5-21-1179539728-576559909-1883960167-500\...\MountPoints2: {f5ab52a2-ae49-11ea-9ebe-04d9f5d36610} - "E:\setup.exe" /autorun
Startup: C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur Pointsoft.lnk [2021-04-15]
ShortcutTarget: Lanceur Pointsoft.lnk -> C:\pointsoft\lanceur.exe () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yeti Pro Control Panel Autostart.lnk [2021-03-17]
ShortcutTarget: Yeti Pro Control Panel Autostart.lnk -> C:\Program Files\BLUE\Yeti_Pro_Driver\YetiProControlPanel.exe () [Fichier non signé]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {E1DD6977-A6F7-407C-8628-25EC7C3CD1EC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {FC284ABD-8346-44DB-A3B8-E02EBA4FA187} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A3943DA4-8BB8-4F4F-9497-E415AB43728D} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {75F3827C-3139-4ACD-8B63-C34BC797E54E} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A7A1C67D-9F3D-4053-AB8C-76570987A73E} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe (Pas de fichier)
Task: {7FA0F356-D1B6-4621-9B9C-4E7EA3ED1581} - System32\Tasks\ASUS\ArmouryAIOFanServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe [1039360 2020-11-10] (TODO:
Task: {D84CA052-CA76-44F6-8FAF-9A8218050B8F} - System32\Tasks\ASUS\ArmouryIgoService.exe => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\ArmouryIgoService.exe (Pas de fichier)
Task: {8DD81612-4CC7-4E1D-A112-B02FAFF1C303} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2025488 2021-01-22] (ASUSTeK Computer Inc. -> ASUS)
Task: {CAECA5D0-8152-4EE7-BC87-A069FDD935EE} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d640c524bc26f => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {0938F06F-CD32-435D-BB03-23823CDB468C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {9F80ECF6-E7EC-4387-A87A-388A584DC551} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [45540760 2021-01-13] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {02BFE980-A7DC-495F-8270-EF6643616ED3} - System32\Tasks\ASUS\NoiseCancelingEngine.exe => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1238328 2021-01-21] (ASUSTeK Computer Inc. -> ASUS)
Task: {BBFF4865-30C7-440A-B63C-7328804687E7} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Pas de fichier)
Task: {D96677AE-0DA0-4A91-823A-92836C6B8F36} - System32\Tasks\CCleaner Update => D:\Logiciels\Ccleaner\CCUpdate.exe [829408 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3D265915-E152-4C05-9624-3332EAF6A983} - System32\Tasks\CCleanerCrashReporting => D:\Logiciels\Ccleaner\CCleanerBugReport.exe [5937456 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "D:\Logiciels\Ccleaner\LOG" --programpath "D:\Logiciels\Ccleaner" --guid "f16bb92a-c1f7-4e58-9d7d-23a7ae1f5e8b" --version "6.28.11297" --silent
Task: {509A7FFF-C767-4B0D-9343-5458B5239CF3} - System32\Tasks\CCleanerSkipUAC - MDI => D:\Logiciels\Ccleaner\CCleaner.exe [39012144 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {C72E3EB4-843C-44EA-921A-D06F385A5EB4} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\Windows\system32\clipesu.exe [221680 2024-10-09] (Microsoft Windows -> Microsoft Corporation)
Task: {703B538E-40B5-4CDB-9B75-F17BE83478E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1077612F-0255-4C7C-AFF9-68DC8BEF8003} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4A5D8AB-5C84-491D-8920-51FB182A7275} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E8001BE5-1AEA-4D06-A96E-84B750D43FA9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpCmdRun.exe [1687208 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5258C359-33FD-4EE6-A9C7-D3EA1ACF7609} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-08-18] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {601D0A6F-48C8-4A6F-9E43-C405DBA829E1} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1179539728-576559909-1883960167-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {CCE163E0-C0DB-457E-B758-FEE7CD906308} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1179539728-576559909-1883960167-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {3F681F1D-D604-4ACC-BFE4-7BBFB1BD2FB3} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1179539728-576559909-1883960167-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {8F6892F4-E61E-4184-9BD2-FEE2CBA5143C} - System32\Tasks\Opera scheduled assistant Autoupdate 1592002727 => C:\Users\MDI\AppData\Local\Programs\Opera\launcher.exe [1386912 2024-09-30] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\MDI\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {27130735-986F-482C-BF55-325792E49633} - System32\Tasks\Opera scheduled Autoupdate 1592002723 => C:\Users\MDI\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5570464 2024-09-27] (Opera Norway AS -> Opera Software)
Task: {590CD74C-1EFC-4ACB-AE42-C6ABEB99CC31} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {CE71C705-2D76-4110-B350-7558B6562B52} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2023-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => D:\Logiciels\Ccleaner\CCleanerBugReport.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{182ef3ee-8a43-40c4-8253-d202491d7fa2}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}\14C445943454F5731324434344: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{22dd15ed-c435-429a-9075-c58b2baef96c}\6427565626F687D2634344533334: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{aed2c850-d4bd-4759-9d99-63f5ae23f739}: [DhcpNameServer] 8.8.8.8 8.8.4.4 192.168.0.254 212.27.40.240 212.27.40.241
Edge:
=======
Edge Profile: C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-23]
Edge HomePage: Default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87dbgpsszvwu2cegikmoxb752420¶m1=y6bdVFVIsvuYsgEClQfz8Oeg2evwTgtkD45B1N7UYtl1i1TGbMZZmhyro3luh2h4wjxL7xSVd3NGv%2BbEnOeyv2HBrNEejvKaVAhtCoWZnt%2FlYom3gO5QKHgMjvyNB9f6q8eZhmv3Wzoi%2F201eU2E4faGto6XaU%2BAQUk04Urb79qr5xWPW9eRMOmdPuEclK7E3ICOmt7ATLCayv%2BrZkVzmmKRWMabxGOG3%2F1jXg1iMzv%2B82TTQkv95Z2hyuqnXqrdv40WoqjbPG3%2Bs1r8fTmTNYRgdAlkr1BjIHGmsfipU1VgrwKYehWeWuDlc%2FY6JXVGwE9bidWx8W4VlnKDt2Zi%2BGqBiHSTZzr%2F65QPzhHhjt7sravPB6QyAHGws91vsaHL4%2BbWbey27FCadcfBJwa06A%3D%3D
Edge StartupUrls: Default -> "hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87dbgpsszvwu2cegikmoxb752420¶m1=y6bdVFVIsvuYsgEClQfz8Oeg2evwTgtkD45B1N7UYtl1i1TGbMZZmhyro3luh2h4wjxL7xSVd3NGv%2BbEnOeyv2HBrNEejvKaVAhtCoWZnt%2FlYom3gO5QKHgMjvyNB9f6q8eZhmv3Wzoi%2F201eU2E4faGto6XaU%2BAQUk04Urb79qr5xWPW9eRMOmdPuEclK7E3ICOmt7ATLCayv%2BrZkVzmmKRWMabxGOG3%2F1jXg1iMzv%2B82TTQkv95Z2hyuqnXqrdv40WoqjbPG3%2Bs1r8fTmTNYRgdAlkr1BjIHGmsfipU1VgrwKYehWeWuDlc%2FY6JXVGwE9bidWx8W4VlnKDt2Zi%2BGqBiHSTZzr%2F65QPzhHhjt7sravPB6QyAHGws91vsaHL4%2BbWbey27FCadcfBJwa06A%3D%3D"
Edge DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search{google:pathWildcard}?ei={inputEncoding}&fr=crmas&p={searchTerms}
Edge DefaultSearchKeyword: Default -> fr.yahoo.com
Edge DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
Edge Extension: (Google Docs hors connexion) - C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
Edge Extension: (Edge relevant text changes) - C:\Users\MDI\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.381.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.381.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-06-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1179539728-576559909-1883960167-1001: @easyxplor.com.com/easyxplore Update;version=3 -> C:\Users\MDI\AppData\Local\easyxplore\Update\1.3.99.0\npeasyxploreUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1179539728-576559909-1883960167-1001: @easyxplor.com.com/easyxplore Update;version=9 -> C:\Users\MDI\AppData\Local\easyxplore\Update\1.3.99.0\npeasyxploreUpdate3.dll [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default [2022-08-27]
CHR Extension: (Slides) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-06-03]
CHR Extension: (Docs) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-06-03]
CHR Extension: (Google Drive) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-06-03]
CHR Extension: (YouTube) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-06-03]
CHR Extension: (Sheets) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-06-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-06-03]
CHR Extension: (Gmail) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-06-03]
CHR Extension: (Chrome Media Router) - C:\Users\MDI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-03]
CHR HKLM\...\Chrome\Extension: [icmgebopaejnjlncllgmcenbbflikfjd]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
"SAntivirusWD" => service a été déverrouillé. <==== ATTENTION
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
S3 ArmouryCrateDownloadTool; C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_1a978b89f16e1813\ArmouryLiveUpdate.exe [577304 2024-06-11] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [399984 2023-08-11] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.32\atkexComSvc.exe [907112 2023-12-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2022-08-18] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.20\AsusFanControlService.exe [1722216 2023-08-11] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2020-06-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [833600 2024-10-09] (ASUSTeK Computer Inc. -> )
S3 CCleanerPerformanceOptimizerService; D:\Logiciels\Ccleaner\CCleanerPerformanceOptimizerService.exe [1087792 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4701376 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-08] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [4799336 2023-09-13] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [1665648 2023-07-25] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 SAntivirusSvc; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusService.exe [302328 2020-06-14] (Digital Communications Inc -> Digital Com. Inc) <==== ATTENTION
R2 SAntivirusWD; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusWD.exe [74770848 2023-04-09] (Segurazo Security -> DlGlTAL COMMUNICATIONS INC) [Fichier non signé] <==== ATTENTION
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530488 2024-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [25584 2023-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV20; C:\Windows\system32\AMDRyzenMasterDriver.sys [48328 2023-06-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0395392.inf_amd64_fd2d64b4438fd1a7\B395067\amdkmdag.sys [99745216 2023-08-29] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [43168 2022-08-18] (ASUSTeK Computer Inc. -> )
S3 blueyetipro; C:\Windows\System32\drivers\blueyetipro_x64.sys [254464 2014-05-16] (Thesycon Systemsoftware Consulting GmbH -> )
S3 blueyetiproks; C:\Windows\System32\drivers\blueyetiproks_x64.sys [46080 2014-05-16] (Thesycon Systemsoftware Consulting GmbH -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [284672 2021-04-15] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [42256 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [59360 2020-06-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 GLCKIO2; C:\Windows\system32\drivers\GLCKIO2.sys [29368 2019-04-24] (ASUSTeK Computer Inc. -> )
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R0 mtinvme; C:\Windows\System32\drivers\mtinvme.sys [139640 2019-11-05] (Micron Technology, Inc. -> Micron Technology, Inc.)
R3 ROGKB; C:\Windows\System32\DriverStore\FileRepository\rogkb.inf_amd64_9c19fffb5d62d536\ROGKB.sys [33680 2021-08-30] (ASUSTeK Computer Inc. -> )
R3 ROGMS; C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_1a978b89f16e1813\ROGMS.sys [41384 2024-06-11] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
R1 SANTIVIRUSKD; C:\Program Files (x86)\Digital Communications\SAntivirus\SAntivirusKD.sys [90096 2020-06-14] (Digital Communications Inc. -> Digital Comm. Inc) <==== ATTENTION
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [24064 2020-09-13] (Microsoft Corporation) [Fichier non signé]
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-09-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602392 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2016-05-12] (ZJMedia Digital Technology Ltd. -> WinISO.com)
S2 AMDRyzenMasterDriverV17; \??\C:\Program Files\AMD\CNext\CNext\AMDRyzenMasterDriver.sys [X]
S3 Secdrv; \??\C:\Windows\system32\drivers\SECDRV.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-10-09 15:24 - 2024-10-09 15:25 - 000000000 ____D C:\FRST
2024-10-09 14:27 - 2024-10-09 14:29 - 000000000 ____D C:\Users\MDI\AppData\Roaming\discord
2024-10-09 14:27 - 2024-10-09 14:28 - 000000000 ____D C:\Users\MDI\AppData\Local\Discord
2024-10-09 14:27 - 2024-10-09 14:27 - 000002290 _____ C:\Users\MDI\Desktop\Discord.lnk
2024-10-09 14:27 - 2024-10-09 14:27 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2024-10-09 14:27 - 2024-10-09 14:27 - 000000000 ____D C:\Users\MDI\AppData\Local\SquirrelTemp
2024-10-09 12:43 - 2024-10-09 12:44 - 000000000 ___HD C:\$WinREAgent
2024-10-09 11:50 - 2024-10-09 11:50 - 000000814 _____ C:\Users\Public\Desktop\L.A. Noire The Complete Edition.lnk
2024-10-09 11:35 - 2024-10-09 11:36 - 1170478184 _____ C:\Users\MDI\Downloads\Chœur montferrandais (29 août 2024 - Clermont-Ferrand).mp4
2024-10-08 21:19 - 2024-10-09 13:58 - 000003114 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2024-10-07 15:20 - 2024-10-07 15:20 - 000157975 _____ C:\Users\MDI\Downloads\Déclaration 3ème trimestre 2024.pdf
2024-10-05 15:22 - 2024-10-05 15:22 - 000109435 _____ C:\Users\MDI\Downloads\Design sans titre (2).zip
2024-10-05 14:20 - 2024-10-05 14:20 - 017779326 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape (2).zip
2024-10-04 18:37 - 2024-10-04 18:37 - 013593670 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape (1).zip
2024-10-04 18:29 - 2024-10-04 18:29 - 017890674 _____ C:\Users\MDI\Downloads\Black and White Classy Black Friday Sale Banner Landscape.zip
2024-10-04 18:16 - 2024-10-04 18:16 - 000292288 _____ C:\Users\MDI\Downloads\Design sans titre (1).zip
2024-10-03 18:43 - 2024-10-03 18:47 - 000000000 ____D C:\Users\MDI\Desktop\Mods Minecraft
2024-10-03 10:39 - 2024-10-09 11:47 - 000000000 ____D C:\Users\MDI\Desktop\Nouveau dossier
2024-10-02 18:56 - 2024-10-02 18:56 - 000025355 _____ C:\Users\MDI\Downloads\AA2_51776837_FW-086-KC_97603528 (1).pdf
2024-10-02 18:56 - 2024-10-02 18:56 - 000006105 _____ C:\Users\MDI\Downloads\DOC_BON_OPERATION_51776837_FW-086-KC_95682525 (1).pdf
2024-10-02 18:26 - 2024-10-02 18:26 - 000160087 _____ C:\Users\MDI\Downloads\AttestationDroits (2).pdf
2024-10-02 18:26 - 2024-10-02 18:26 - 000159998 _____ C:\Users\MDI\Downloads\AttestationDroits (1).pdf
2024-10-02 11:21 - 2024-10-09 13:58 - 000003106 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2024-10-02 11:20 - 2024-10-02 11:21 - 002991476 _____ C:\Windows\Minidump\100224-9343-01.dmp
2024-09-30 23:42 - 2024-09-30 23:42 - 009170073 _____ C:\Users\MDI\Downloads\Dramatic Skys Demo 1.5.3.24.zip
2024-09-30 23:08 - 2024-09-30 23:09 - 248455802 _____ C:\Users\MDI\Downloads\Hyper_Realistic_Sky_[v2.2].zip
2024-09-30 22:53 - 2024-09-30 22:53 - 013866246 _____ C:\Users\MDI\Downloads\§6月舞§f-[1.21]sky_resoucepack.zip
2024-09-30 22:32 - 2024-09-30 22:32 - 081743669 _____ C:\Users\MDI\Downloads\ModernArch R294 [1.20.3-1.21.1] [128x].zip
2024-09-30 22:31 - 2024-09-30 22:31 - 052167209 _____ C:\Users\MDI\Downloads\128x RealPix (All versions from 1.19 to 1.21.1 supported).zip
2024-09-27 16:11 - 2024-09-27 16:11 - 000077654 _____ C:\Users\MDI\Downloads\e-mandat.pdf
2024-09-27 15:59 - 2024-09-27 15:59 - 000250978 _____ C:\Users\MDI\Downloads\IR-Form-2042DPR-2024-cluzel.pdf
2024-09-27 15:27 - 2024-09-27 15:27 - 000025355 _____ C:\Users\MDI\Downloads\AA2_51776837_FW-086-KC_97603528.pdf
2024-09-27 15:27 - 2024-09-27 15:27 - 000006105 _____ C:\Users\MDI\Downloads\DOC_BON_OPERATION_51776837_FW-086-KC_95682525.pdf
2024-09-27 14:06 - 2024-09-27 14:06 - 000160313 _____ C:\Users\MDI\Downloads\AttestationDroits.pdf
2024-09-26 12:18 - 2024-09-26 12:18 - 002854396 _____ C:\Windows\Minidump\092624-7500-01.dmp
2024-09-25 18:28 - 2024-09-25 18:28 - 002119708 _____ C:\Windows\Minidump\092524-7062-01.dmp
2024-09-25 17:50 - 2024-09-25 17:50 - 003079652 _____ C:\Windows\Minidump\092524-7640-01.dmp
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-10-09 14:28 - 2020-06-03 15:55 - 000000000 ____D C:\Users\MDI\AppData\Local\D3DSCache
2024-10-09 14:03 - 2020-06-03 15:21 - 001943886 _____ C:\Windows\system32\PerfStringBackup.INI
2024-10-09 14:03 - 2019-12-07 16:50 - 000858030 _____ C:\Windows\system32\perfh00C.dat
2024-10-09 14:03 - 2019-12-07 16:50 - 000174630 _____ C:\Windows\system32\perfc00C.dat
2024-10-09 14:03 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-10-09 14:00 - 2020-06-12 16:25 - 000000000 ____D C:\Program Files\ASUS
2024-10-09 13:58 - 2020-06-12 16:21 - 000872200 _____ C:\Windows\system32\wpbbin.exe
2024-10-09 13:58 - 2020-06-12 16:21 - 000833600 _____ C:\Windows\system32\AsusUpdateCheck.exe
2024-10-09 13:58 - 2020-06-03 15:16 - 000008192 ___SH C:\DumpStack.log.tmp
2024-10-09 13:58 - 2020-06-03 15:16 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-10-09 13:58 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-10-09 13:57 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2024-10-09 13:47 - 2020-06-03 15:16 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-10-09 12:53 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-10-09 12:44 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-10-09 12:34 - 2020-06-14 18:57 - 000000000 ____D C:\Users\MDI\AppData\Local\CrashDumps
2024-10-09 12:33 - 2020-06-12 10:44 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Microsoft\MMC
2024-10-09 12:27 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Local\VirtualStore
2024-10-09 12:02 - 2021-12-17 11:27 - 000000000 ____D C:\Windows\SystemTemp
2024-10-09 12:02 - 2020-06-03 15:16 - 000472024 _____ C:\Windows\system32\FNTCACHE.DAT
2024-10-09 11:59 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\OpenSSH
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\inetsrv
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-10-09 11:59 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-10-09 11:56 - 2021-04-04 23:49 - 000000000 ____D C:\Windows\SysWOW64\directx
2024-10-09 11:50 - 2022-10-16 17:13 - 000000000 ____D C:\Users\MDI\Documents\Rockstar Games
2024-10-09 10:09 - 2020-06-03 15:19 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-10-09 09:57 - 2020-07-04 13:24 - 000000000 ____D C:\Windows\system32\MRT
2024-10-09 09:55 - 2020-07-04 13:24 - 201324920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-10-08 21:21 - 2021-05-12 23:25 - 000003690 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-10-08 21:21 - 2021-05-12 23:25 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-10-08 18:12 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-10-08 12:52 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2024-10-06 18:23 - 2022-08-14 17:26 - 000000000 ____D C:\Users\MDI\AppData\Roaming\slobs-client
2024-10-04 22:42 - 2021-06-20 17:39 - 000000000 ____D C:\Users\MDI\AppData\Local\AMD_Common
2024-10-04 09:18 - 2021-05-12 23:25 - 000002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-10-03 23:52 - 2020-06-03 15:47 - 000000000 ____D C:\Users\MDI
2024-10-03 19:03 - 2022-10-11 22:08 - 000000000 ____D C:\XboxGames
2024-10-03 18:56 - 2020-06-13 01:09 - 000000000 ____D C:\Users\MDI\Desktop\Jeux
2024-10-03 04:19 - 2022-10-22 16:43 - 000124480 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-10-03 04:19 - 2022-10-22 16:43 - 000075304 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-10-03 04:19 - 2022-10-11 22:08 - 002819648 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-10-03 04:17 - 2022-10-11 22:08 - 000153152 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000775720 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000243264 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-10-03 04:10 - 2022-10-11 22:08 - 000210472 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-10-02 11:21 - 2020-09-05 21:21 - 000000000 ____D C:\Windows\Minidump
2024-10-02 11:20 - 2022-09-01 17:24 - 1643681632 _____ C:\Windows\MEMORY.DMP
2024-10-01 18:57 - 2022-10-11 22:07 - 000000000 ____D C:\Users\MDI\AppData\Local\MinecraftInstaller
2024-10-01 18:49 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Local\Packages
2024-10-01 18:48 - 2020-06-03 15:50 - 000000000 ____D C:\Users\MDI\AppData\Local\PlaceholderTileLogoFolder
2024-10-01 18:35 - 2022-10-16 17:25 - 000000000 ____D C:\Users\MDI\AppData\Local\Steam
2024-10-01 17:59 - 2023-09-12 11:01 - 000000000 ____D C:\Users\MDI\AppData\Roaming\obs-studio
2024-09-30 10:41 - 2020-06-13 00:58 - 000004276 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1592002723
2024-09-30 10:41 - 2020-06-13 00:58 - 000001437 _____ C:\Users\MDI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-09-27 16:50 - 2020-07-25 15:51 - 000000000 ___RD C:\Users\MDI\Documents\Scanned Documents
2024-09-25 09:20 - 2022-11-07 10:20 - 000000642 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2024-09-20 09:37 - 2022-10-13 23:34 - 000003356 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2024-09-20 09:37 - 2021-06-19 18:20 - 000003928 _____ C:\Windows\system32\Tasks\CCleaner Update
2024-09-19 09:29 - 2022-09-10 10:40 - 000000000 ____D C:\Users\MDI\AppData\Roaming\com.adobe.dunamis
2024-09-19 09:29 - 2020-06-03 16:05 - 000000000 ____D C:\Users\MDI\AppData\Local\Adobe
2024-09-19 09:29 - 2020-06-03 15:48 - 000000000 ____D C:\Users\MDI\AppData\Roaming\Adobe
2024-09-18 09:38 - 2022-10-12 11:15 - 000002045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-09-18 09:38 - 2020-06-03 16:07 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-09-17 14:56 - 2020-06-03 15:16 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-09-13 10:28 - 2019-12-07 16:53 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2024-09-13 10:28 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-09-13 10:28 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
==================== Fichiers à la racine de certains dossiers ========
2023-01-31 00:21 - 2023-04-24 10:45 - 000000016 _____ () C:\Users\MDI\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================